<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="3097">
<package pkgid="12705bd40ce2a244da26cbd545b265c1ad9bc66653348f0dd8e1d51696ade63d" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="84.el6_8"/>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-82" date="1477569600">- Release 1.2.11.15-82
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-83" date="1477656000">- Release 1.2.11.15-83
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-84" date="1478520000">- Release 1.2.11.15-84
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462)</changelog>
</package>
<package pkgid="5b153df07313fe1eaf9d03571aa31e7a82dc8f1539f25206144a497d575d87dc" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="91.el6_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-89" date="1486987200">- Release 1.2.11.15-89
- Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-90" date="1490270400">- Release 1.2.11.15-90
- Resovles: #1435365 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.1.11.15-91" date="1491220800">- Release 1.2.11.15-91
- Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages</changelog>
</package>
<package pkgid="a4ee6fe7c44e8bac7c779832663d6383946f2ca4625d1487e145bbcf04b14def" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="94.el6_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-92" date="1519387200">- Release 1.2.11.15-92
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-93" date="1519646400">- Release 1.2.11.15-93
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-94" date="1519646401">- Release 1.2.11.15-94
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)</changelog>
</package>
<package pkgid="97e5b1c37f5b08531284e9cbf285c626ff7cc5599fd2bcf3815fd3770377e3b2" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="95.el6_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-93" date="1519646400">- Release 1.2.11.15-93
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-94" date="1519646401">- Release 1.2.11.15-94
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-95" date="1523534400">- Bump version to 1.2.11-15-95
- Resolves: Bug 1562152 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="999bc7238fdfe1a537b5cd7b5cf2bd8dbc315086c3a910e222b8899ab49d86c5" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="84.el6_8"/>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-82" date="1477569600">- Release 1.2.11.15-82
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-83" date="1477656000">- Release 1.2.11.15-83
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-84" date="1478520000">- Release 1.2.11.15-84
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462)</changelog>
</package>
<package pkgid="472cc03be66eccdccc246531706b5b3c02dd4c4358294f1b0fed36f63055a7d1" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="91.el6_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-89" date="1486987200">- Release 1.2.11.15-89
- Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-90" date="1490270400">- Release 1.2.11.15-90
- Resovles: #1435365 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.1.11.15-91" date="1491220800">- Release 1.2.11.15-91
- Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages</changelog>
</package>
<package pkgid="a870a25f0129f999de2c4038ff747b36272bcc38273ec4adf33f55f189b2c4c7" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="94.el6_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-92" date="1519387200">- Release 1.2.11.15-92
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-93" date="1519646400">- Release 1.2.11.15-93
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-94" date="1519646401">- Release 1.2.11.15-94
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)</changelog>
</package>
<package pkgid="c0cd6119beb9aa7e9846a5f34a021707f6eecd94ac7ce4416658e08c443e973d" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="95.el6_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-93" date="1519646400">- Release 1.2.11.15-93
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-94" date="1519646401">- Release 1.2.11.15-94
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-95" date="1523534400">- Bump version to 1.2.11-15-95
- Resolves: Bug 1562152 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="d1bfb6fb92159b23a1c78501fe09b9c7d0de119252a07abf94adcbf1e9ef993c" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="84.el6_8"/>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-82" date="1477569600">- Release 1.2.11.15-82
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-83" date="1477656000">- Release 1.2.11.15-83
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-84" date="1478520000">- Release 1.2.11.15-84
- Resolves: #1376676 - Backport AES storage scheme plugin (DS 47462)</changelog>
</package>
<package pkgid="b3fd82a5f4c54bf59adfbe3d51349111e872806340e2bfbdb27b76e40e55cd0f" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="91.el6_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-89" date="1486987200">- Release 1.2.11.15-89
- Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-90" date="1490270400">- Release 1.2.11.15-90
- Resovles: #1435365 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.1.11.15-91" date="1491220800">- Release 1.2.11.15-91
- Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages</changelog>
</package>
<package pkgid="e821576eb92d2d0421b1ce1d07a901ee4eab4f2b13b8c79da6b288eb2d70d686" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="94.el6_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-92" date="1519387200">- Release 1.2.11.15-92
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-93" date="1519646400">- Release 1.2.11.15-93
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-94" date="1519646401">- Release 1.2.11.15-94
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)</changelog>
</package>
<package pkgid="8ba998d1ded9611278827da587eee7aa6bd26f943998ff7a476cc32d4b50980c" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="95.el6_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-93" date="1519646400">- Release 1.2.11.15-93
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-94" date="1519646401">- Release 1.2.11.15-94
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-95" date="1523534400">- Bump version to 1.2.11-15-95
- Resolves: Bug 1562152 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="792065677c547d92342932a5d6bc21902aca5e889370871e7e410c7fd1ad99dc" name="ImageMagick" arch="i686">
  <version epoch="0" ver="6.7.2.7" rel="4.el6_7"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.5.4.7-7" date="1390996800">- Enable OpenEXR support (rhbz#838748)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-2" date="1424347200">- Rebase to 6.7.2.7</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-4" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717</changelog>
</package>
<package pkgid="4379f7ae86b38847700d998ccb9d2e23ce53d213e4f3db402c9f05e678722c10" name="ImageMagick" arch="i686">
  <version epoch="0" ver="6.7.2.7" rel="5.el6_8"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.5.4.7-7" date="1390996800">- Enable OpenEXR support (rhbz#838748)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-2" date="1424347200">- Rebase to 6.7.2.7</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-5" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717</changelog>
</package>
<package pkgid="5af428c3dbe877f96d348356eb7c4ff10bb65aa13abaf5797edf863a405c7756" name="ImageMagick-c++" arch="i686">
  <version epoch="0" ver="6.7.2.7" rel="4.el6_7"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.5.4.7-7" date="1390996800">- Enable OpenEXR support (rhbz#838748)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-2" date="1424347200">- Rebase to 6.7.2.7</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-4" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717</changelog>
</package>
<package pkgid="ef5817ecb24cb843bbbd223308c8649ba12d7fb0c79b7f6c7af76d491c8ea445" name="ImageMagick-c++" arch="i686">
  <version epoch="0" ver="6.7.2.7" rel="5.el6_8"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.5.4.7-7" date="1390996800">- Enable OpenEXR support (rhbz#838748)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-2" date="1424347200">- Rebase to 6.7.2.7</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-5" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717</changelog>
</package>
<package pkgid="d13129b1fc0687793a7ac0a9fcb8925ff02c0194f5e37eccfc0f67d723fb4e66" name="ImageMagick-c++-devel" arch="i686">
  <version epoch="0" ver="6.7.2.7" rel="4.el6_7"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.5.4.7-7" date="1390996800">- Enable OpenEXR support (rhbz#838748)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-2" date="1424347200">- Rebase to 6.7.2.7</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-4" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717</changelog>
</package>
<package pkgid="36843db7b6d799f0cb5a96a3797df90c0892f74795a1f5cc33e1a7e26985722f" name="ImageMagick-c++-devel" arch="i686">
  <version epoch="0" ver="6.7.2.7" rel="5.el6_8"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.5.4.7-7" date="1390996800">- Enable OpenEXR support (rhbz#838748)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-2" date="1424347200">- Rebase to 6.7.2.7</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-5" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717</changelog>
</package>
<package pkgid="5ffaff95316b02fcef2214d164fc7800f44c515cf0d29905bd971fe842d59889" name="ImageMagick-devel" arch="i686">
  <version epoch="0" ver="6.7.2.7" rel="4.el6_7"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.5.4.7-7" date="1390996800">- Enable OpenEXR support (rhbz#838748)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-2" date="1424347200">- Rebase to 6.7.2.7</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-4" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717</changelog>
</package>
<package pkgid="25a240ccb0f4c74b76b89b43b95946b2cfad66de03a4b096ae8de6fdfc1d152e" name="ImageMagick-devel" arch="i686">
  <version epoch="0" ver="6.7.2.7" rel="5.el6_8"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.5.4.7-7" date="1390996800">- Enable OpenEXR support (rhbz#838748)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-2" date="1424347200">- Rebase to 6.7.2.7</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-5" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717</changelog>
</package>
<package pkgid="e9de80e78320f159951cb7edd20e56ac040a2feb97637a4062ef3506b672eb5b" name="ImageMagick-doc" arch="i686">
  <version epoch="0" ver="6.7.2.7" rel="4.el6_7"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.5.4.7-7" date="1390996800">- Enable OpenEXR support (rhbz#838748)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-2" date="1424347200">- Rebase to 6.7.2.7</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-4" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717</changelog>
</package>
<package pkgid="6ca60bbcdf45de122a9fb7179c93d92d706d62654babb7b983c1eba061b23ffd" name="ImageMagick-doc" arch="i686">
  <version epoch="0" ver="6.7.2.7" rel="5.el6_8"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.5.4.7-7" date="1390996800">- Enable OpenEXR support (rhbz#838748)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-2" date="1424347200">- Rebase to 6.7.2.7</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-5" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717</changelog>
</package>
<package pkgid="422b3b43619a0d11e175a480afa100bea9fd3c2531bec3b64f8f970092dbbfb7" name="ImageMagick-perl" arch="i686">
  <version epoch="0" ver="6.7.2.7" rel="4.el6_7"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.5.4.7-7" date="1390996800">- Enable OpenEXR support (rhbz#838748)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-2" date="1424347200">- Rebase to 6.7.2.7</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-4" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717</changelog>
</package>
<package pkgid="686f3e033be0c3bd752b0ab0571f97870cc83c064ecae71bbdba44fbbfaccc9e" name="ImageMagick-perl" arch="i686">
  <version epoch="0" ver="6.7.2.7" rel="5.el6_8"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 6.5.4.7-7" date="1390996800">- Enable OpenEXR support (rhbz#838748)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-2" date="1424347200">- Rebase to 6.7.2.7</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.2.7-5" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716 and CVE-2016-3717</changelog>
</package>
<package pkgid="ac520e8990617bfb66ac8eeb6d0eb4def426d90f5d722b7e61ef811083775d29" name="apr" arch="i686">
  <version epoch="0" ver="1.3.9" rel="5.el6_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.3.9-4" date="1330603200">- add fix for apr_fnmatch() regression (CVE-2011-1928, #706352)
- add fix for CVE-2011-0419 (#703520)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.3.9-5" date="1339156800">- add fix for apr_mcast_hops w/AF_INET6 socket (#824515)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.3.9-5.1" date="1509364800">- Resolves: #1507346 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="a9c97028a603580d611bb9017851234fc3fe7e13f205dba3ec79b1360004c6f4" name="apr-devel" arch="i686">
  <version epoch="0" ver="1.3.9" rel="5.el6_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.3.9-4" date="1330603200">- add fix for apr_fnmatch() regression (CVE-2011-1928, #706352)
- add fix for CVE-2011-0419 (#703520)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.3.9-5" date="1339156800">- add fix for apr_mcast_hops w/AF_INET6 socket (#824515)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.3.9-5.1" date="1509364800">- Resolves: #1507346 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="7bdaa934878e8f59706be8b817993499fc79d90a2ad7eca67253038ae69fc56a" name="autocorr-af" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="1c2f4cb40ca90b5c5a70d20b2b6d6c61b0daa9e0c7b9e9de4a59e1843e71b1cc" name="autocorr-af" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="1779f02445472502c8dd0aba04c1f045c6fef5bbad42a191811ec0d059e5def4" name="autocorr-af" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="dc80e1b10cb9bda7e64496229215735c98043918f1b94e2eb7d811a368f73c15" name="autocorr-bg" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="64033fac639e2edd9b6c8e1a7e63c369cb1fff881df021472fe1c13b8aece486" name="autocorr-bg" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="92db82a8e8c950155b8571cbc7ebd26d0348972eaf7f4725b366201ad89d304b" name="autocorr-bg" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="2e9b321435d412b53b3e6e837a1315bcf27275f0b282d4b524d0e3fb5cf3fcd0" name="autocorr-ca" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="df1032de82277a7a7101dc0d05ea1b97ec12bfd6b2d00652616a8036813401dc" name="autocorr-ca" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="8a1e8d9bbd091699026e11ec9549b5d1c0a12c5d158c78e095c7092165c2436a" name="autocorr-ca" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="43deb0f9284cf9bb2afc55bdbcb2b972b9bf243810e46f66fd36c62661572f5e" name="autocorr-cs" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="2154934563d2380e3b827a156f8621ae84f697ea4f4a757b0c2aaf812367c3ba" name="autocorr-cs" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="899318dab871b62869f0545ad4b623e7705c4d5050bdd936ba67e3c7f623c01e" name="autocorr-cs" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="a89d1d379159c9edec17019af81485c290552320c4f30057b615c266d5a56625" name="autocorr-da" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="fab318f93e0d14c5edbd33794e164d8c096cc181e914da77a15133b430fbb897" name="autocorr-da" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="f28eddacdd774794afabc519000d144813a26dbf2c369060b74dab097e3c0a23" name="autocorr-da" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="ff8e877fdec567260555b388f0b071a85695ceaf792d007df6fe984f042c5741" name="autocorr-de" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="d1abca34872ddcfe0084e55d8a3f7a6c4d7ab0878660c13d431e7b79cda60e5b" name="autocorr-de" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="8bbe98676251c1133100612384b5379108ceec52e64f0080f116baafbeb70d79" name="autocorr-de" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="1243b1b7c355931a41bf8d2813c68e65e718091b2b5b1914767d2eb1ed5f9c41" name="autocorr-en" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="75a7cd41c017f985b53a1b017955003d50aaa289b431cf8a017ce8e1c5ec441e" name="autocorr-en" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="5e8b3d4c8c4ecbb091b52384ef443c157d01b80375355017f98945af1a17cb1b" name="autocorr-en" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="9860fe9b1f0401e91c6af1c3db042d6cda7500a72fb50e6fcb2240878b0cb255" name="autocorr-es" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="ad834f03e60d4aa6661daa0f2fc8e7b0de0e6de454712189d687f7ec08f8605d" name="autocorr-es" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="2cd0b0ffebe54ad00994e75d4119d006d2418fa103466b460a53888867764573" name="autocorr-es" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="eef929cfee75678238997d0c8e50dab42bc6d9505fa26a337f2860fb8dff4d87" name="autocorr-fa" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="0a1d3714cc91b7fd173dce175de1764c20777f40366f98fd21da67ade7e7b2b5" name="autocorr-fa" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="0866460539d922b1b78168ab2fc3ce40a44fbb2740445811017741cdc41828c4" name="autocorr-fa" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="5d06eb4b93897620a6214b35099729e21c5680c3ff7f8625fe0238e29b6bd497" name="autocorr-fi" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="5b11a0f1cb83bde880b62e187dbdfdddc9ec5f0a23f6c4352ee0abefe139a3d8" name="autocorr-fi" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="5c77988f644c65ccabc585552a5bce739a7e2e4d878231eda221f6682added82" name="autocorr-fi" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="65cdb7d75e42a56dadf7c700ab70c4ad7b3d3379c60ea9c18c677c6b3851e1e7" name="autocorr-fr" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="a880ddb5e3a6293a08744d314f0bfea84d7cff371733b75b26003139b89f4961" name="autocorr-fr" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="5b3338887a92651835381ae29f0f3b6bd7d4ddd97c73ff91ed8be0e1e7aeb975" name="autocorr-fr" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="b0f0e0595d0054f4777981dc65153640593dfa4070dc354bd20e5bd4a7fe1bb3" name="autocorr-ga" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="2826ca3d0def0e03bda200f522eb61eec278b0ae1ab41c08c1c79f8cce9c6d70" name="autocorr-ga" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="93b019125f117ab97b371211177f4c9cb9b8344abfff5f3fe79b5a2ae9987fb0" name="autocorr-ga" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="f3dc08b30c1c4bdffd9ffd4500dd6d6700b88329827a059e35df7dcf4cee8a4f" name="autocorr-hr" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="3f2e3896b81581e93ab5df96850e9546c3a4021f047f079ff61d40503fc0575d" name="autocorr-hr" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="966c01897c9f59773e12e949df00f6931e4fc1c322f57ab0f0db43321168304c" name="autocorr-hr" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="223a681ce59b6e859d8fc982812a054fde73b7bf0450d9f88b7d387e86f118f0" name="autocorr-hu" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="531b3b4aa2a290b9566d22f51164807b7f4362fccb4bcb2bf8e561c1044e16d5" name="autocorr-hu" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="fc3459db7defd86d9b3746aff76c5d03fd74202c732b0b9e4803bfa43e24f1ed" name="autocorr-hu" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="a139d3ebeaea06447047a2d3252de30c9731086caea63d61719bf350a0fb781b" name="autocorr-is" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="50b80dd7b0ef8b80e7b38d43dbe3240544911af61475098f7e40abd02938dc7e" name="autocorr-is" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="771a4ce81d0cc1cd9c098e7cb4c9a19982f305d75a9032ad6c8dafe0cae08ee7" name="autocorr-is" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="652ef3676aed9c1a0bb953841d75a48859e233865c609df39145446b4ef940c4" name="autocorr-it" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="95d95a26541b13ff8d4de01cde064a01164e5d6265fcd4e1e5122db096f95235" name="autocorr-it" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="9f3ec06d354e14d8a2abc5c9f701257791d90e2a2c87728d3fb103b46f937e00" name="autocorr-it" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="d59a386c8032335eda477ab1ab4521308a2762b30bec8044b7f034181413d915" name="autocorr-ja" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="5a67147b4e9dc4b93db0dbc20d581665ec9afa6c55ea51791afe6746fc4340ed" name="autocorr-ja" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="c5f940e92cb5cf5bd6a95aa33ae30984916d2d28d58ce1b26850c66bd400d4c5" name="autocorr-ja" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="a04da8532cc9cb77c72037a6e783cdc9aba618169125cfc3641ada37481c860d" name="autocorr-ko" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="9e235e3d7432cac5f596e789f12a399a0c5ad997c235e0a87aff692118c8aa29" name="autocorr-ko" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="cdf61029bbdcca5094c5edcf105d5904e606e05c0d7acccd29b1e79da9714561" name="autocorr-ko" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="dc32e395ade8effa2ce2b04adfe32ec5b7e0e69274d1877a624e4f4f9901d026" name="autocorr-lb" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="6018a4afe121ba4d9ea2e037a3e9d0de4f9589c371e4aee331e28ab1d5a34ed9" name="autocorr-lb" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="e882fabad6bd7f861272db588eca579f183d33a4168c74d2f47543b7a3662462" name="autocorr-lb" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="21da45baa307a9896e47a1287e436fe0409afde1d768de1fab7ece0fce4e5abb" name="autocorr-lt" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="efda3860a2142487504c79780d1654a0fe9bd3a3ffadfbe3cc381423930bb825" name="autocorr-lt" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="ca4a92227919a5711fff6b6db4a1d378d5fe7582e37fb945c4bfe65ab712b8e8" name="autocorr-lt" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="b8c52bd7f4090b5d812c34c5826fcb69fc98dca91f2a6bae42787ffe4e4f20cc" name="autocorr-mn" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="9a10d7f1895eca409cd71ad0d0dbf8d841e86742804bd76d9fbe838d228fe850" name="autocorr-mn" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="1e89ce10c05e0ef3bf34984e0b1a8b6848a586f91c0df2b185f36165c348ea66" name="autocorr-mn" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="6fd7d8b6cfe52419b2ae30ab84deaad67bee8064d51a97c26c21beefed5e453f" name="autocorr-nl" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="d403e2cfdabfee3bc9c450bd3267c749cc020137a87b04cf69fb9f3fdecc98c1" name="autocorr-nl" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="b9cd37beae376871174296dfca9fa1e5fdd1a27eef92357e6e2092fb919c1a2e" name="autocorr-nl" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="2bcca06d2c3bfb73d0bdd01c6450e12945e0709966d203d6b719ddca6279df44" name="autocorr-pl" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="ad322e797da44d9709da666b83e2f2ef764584bb76843a9b34b483c874245ae5" name="autocorr-pl" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="87e5ca390955a352a38f4987a80419577ad6cbda41a434daf836093b0e70e7bc" name="autocorr-pl" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="12584140ef1dd6f31823d63f48265d8c0985cd90389de990b55dafbd2df6df64" name="autocorr-pt" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="9b89a93a9d29b3701a96029d9193124271ca8bdaf1804d178daa5e96e329317e" name="autocorr-pt" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="0edb19bf9e8fb5c204fb417db185de2e01d6a8bdef07976cd612407d81b3564e" name="autocorr-pt" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="929d9295a7e94717d04c8aaa7d2ca2d82dc81b52c8f8c3861d32705db362d932" name="autocorr-ro" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="069b7f785f4fff02f70970193e0a2c9c7e09c4f5131b09d83d3786a22dcb0edb" name="autocorr-ro" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="3ec716faa7e738d98a9317ec32c9d6b5825dee13f4072918cb18f3b3f39b7596" name="autocorr-ro" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="d0b093d5e97fcce03d71d98915fbbe40ebb6b8e6cad3ebe52b55f1d855705269" name="autocorr-ru" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="b49204e083a263ce3d1305c37d2fef050949010ac2cd81c47333a91bd375d659" name="autocorr-ru" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="5a9268a8d11cc4fab8c7354cbc0f259fbff7a7e4a54049d09d514d41c62e0f48" name="autocorr-ru" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="015cf1d95087ce97353f6360fa9c29f79dd82cf477bd704fa5f26ecfd398efc1" name="autocorr-sk" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="ce7974e9a0c5ec4f4d10ae2a20493c42945c6d2517bb07e3058c530fff3e923c" name="autocorr-sk" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="2435c49dfacae726996d7cb99ae65ae58ca2a9799aa669fddd105c89d36af4a1" name="autocorr-sk" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="7ec9443999de4cb52e55de8cdf6fc3b503877d69640b60951839a6a9107ffa41" name="autocorr-sl" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="110df20e48f93c1eb7ee281e397c7318dac41bb9b473c4c36fe792af57844fd5" name="autocorr-sl" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="3212c04e361fa5ea8766337dfecae30c980db089b83ff8a30b0ffc2472fa01d8" name="autocorr-sl" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="191c8c3b682b69ee24f5fa9eed6df21737135e3b3b361583b0976eb8d880fa69" name="autocorr-sr" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="398180ec0adc988cbe0d8151add86acd6c29c8a6db379ef56e20599b72f93164" name="autocorr-sr" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="9f7dfca069fb4910d291bcef31817de150c33c4411319bead5a0109bb65ee31f" name="autocorr-sr" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="5ffc9a94f77ee7a3946dfd7c2bcfe7fe675b8322e0427212248070259ce6a98d" name="autocorr-sv" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="4f05489a659db751a27aa5e9a06896326f9afd04779148d969a414fa665d9eca" name="autocorr-sv" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="00e3eb4af210f5cc15bac4cdea98b586180608f10d9cfd7fb31fab14360f8cdf" name="autocorr-sv" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="f764f60c55a7c81e3fe73feeaec20a533715476af7a90503d852551be9ee18e2" name="autocorr-tr" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="ce60697f8aaece914e0964d8254f1cfa0f9e6e7c39d0f5a65f5e31c9fbe11e07" name="autocorr-tr" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="ce0648ee5cb5156b6ed08d63fa1bce12e41c667db9e718e25b7300b17f9ac8eb" name="autocorr-tr" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="7376a122fbf92bfba336da13db9cd886da6a3d408da6da8bed5ffe9266bbfec5" name="autocorr-vi" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="3cfbf3b3afe292e05482014e9fc6b0f58da4f19389a6e9e1f78d58d8876149ea" name="autocorr-vi" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="e61e6e0bfa61c1660b319ba2cad568580874ecd1fd205cc7b4d9e4d36c0a539d" name="autocorr-vi" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="de4d3a2b8b9b54cdf6c01e17bf736674438d7523ef41a2b4e67627b5c0641232" name="autocorr-zh" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="b4e0ae19e5f630e77f41d06b2681c7475fadfb8fd100b6d36f55b4f17e95f8f3" name="autocorr-zh" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="fa2d9941d28e6cb34e5a0bb598e8d641c6e9671a9e7d3b1080c29d487590dd45" name="autocorr-zh" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="35791567cb83abb698cac172846ead35b1c3eca874bbf1caf854220b24c53dbc" name="bash" arch="i686">
  <version epoch="0" ver="4.1.2" rel="48.el6"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.1.2-46" date="1481544000">- CVE-2016-7543 - Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1379630</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.1.2-47" date="1481544001">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1396383</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.1.2-48" date="1487160000">- Fix signal handling in read builtin
  Resolves: #1421926</changelog>
</package>
<package pkgid="414a15d494ff4f0a6ca87ddbdb0ec5c5e56962c44517ef56cb4bbae89857505c" name="bash-doc" arch="i686">
  <version epoch="0" ver="4.1.2" rel="48.el6"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.1.2-46" date="1481544000">- CVE-2016-7543 - Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1379630</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.1.2-47" date="1481544001">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1396383</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.1.2-48" date="1487160000">- Fix signal handling in read builtin
  Resolves: #1421926</changelog>
</package>
<package pkgid="295febc4e5ef34790af7722ec89d1e6a5af9da5cd446846868d9cb930fbf0509" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.8.2-0.36.rc1" date="1425297600">- Fix CVE-2015-1349</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 32:9.8.2-0.37.rc1" date="1431000000">- Resolves: 1215687 - DNS resolution failure in high load environment with
  SERVFAIL and "out of memory/success" in the log</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.1" date="1436443200">- Fix CVE-2015-4620</changelog>
</package>
<package pkgid="3f956a2b503adf22710ee08cc6ccaa203ee0d78e6c7ab777e0d7145354fcff17" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 32:9.8.2-0.37.rc1" date="1431000000">- Resolves: 1215687 - DNS resolution failure in high load environment with
  SERVFAIL and "out of memory/success" in the log</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.1" date="1436443200">- Fix CVE-2015-4620</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.8.2-0.37.rc1.2" date="1437998400">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="e0b958da8c61376a3898d78b691e05b1749350a124a359cc4bb36f1c24de8a28" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.4"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.8.2-0.37.rc1.2" date="1437998400">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.3" date="1441195200">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195201">- Apply previously not applied patch for CVE-2015-5722</changelog>
</package>
<package pkgid="0c41fb32b9f9a5edd08ca586b3f713cd9d7c5ebd3d4078f8b4d31ebecdb93d88" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.3" date="1441195200">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195201">- Apply previously not applied patch for CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.44.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="adc84dd3df65f3d37e60630bdaa898cbf284c2c37d925fc0df27ab2e3043ae19" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195200">- Apply previously not applied patch for CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.6" date="1453118400">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="a4a25719c5faacfc94e488f6faa590334b012e87372f9f03c82930d40b08d26e" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.7"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.6" date="1453118400">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.7" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
</package>
<package pkgid="d62699d494a09897b16f1cc164a39d0ec6e08656e251cb234bddb2382aa69384" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.46.rc1" date="1453118400">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="9700a38597fcd508f63d442df2379e4b3ab7e22a49f113344388e9a6102eb72e" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.2"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="3daaffba30b54b745d667c38577af9a07c125bbe549b58c81e6c2da673c23f9e" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.3" date="1477915200">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="5eb9e99b3fb16fe2b31ff20646dd0dd3af1dfc3edae3f27f62cfd0d54bd1439c" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.3" date="1477915200">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.47.rc1.4" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="52bb000e478933684d71a7df3fcb7ed3b01d615b9c74e1327c413db346d920a6" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.61.rc1" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
</package>
<package pkgid="7f6febd2f4ddfc0969f91faba176c82c28f1186e9b461e71112cdbbed65bfa54" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
</package>
<package pkgid="ffb4a6d0e0565b8f7cd8814e1ccabd457e2cec1b242969d8ce65d9ee7ebc19f0" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="84b019fa6d67619886ef9aa506612fa03f97782aea65fad4fa796606be83880a" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.5" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="f1d9c5871f7d44dc5ce5253be2fa4c9b2d60fc14b1b9f48e6386d573baba3f3e" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.67.rc1" date="1512388800">- Change EDNS flags only after successful query (#1416035)
- Fix crash in ldap driver at bind-sdb stop (#1426626)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1" date="1516104000">- Fix CVE-2017-3145</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.1" date="1533816000">- Fix CVE-2018-5740</changelog>
</package>
<package pkgid="833b9203744ae02487069fa0649a456afd5479af1f017f7bfed0b58c0a597804" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.1" date="1533816000">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.2" date="1557921600">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.3" date="1559908800">- Use only selected documentation files</changelog>
</package>
<package pkgid="d9d6739f85bca6845a30b2c7e44f01b263fd260afc49f1b8982289bd4ceb0d84" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.5" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.6" date="1590753600">- Add additional fix to limit recursions</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.7" date="1591012800">- Correct tests covering CVE-2020-8617</changelog>
</package>
<package pkgid="e78947b1dd48dacca07c5ac21d174e3568d3d1a27144fdd20f3aac9ae7ed951e" name="bind" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.8"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.6" date="1590753600">- Add additional fix to limit recursions</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.7" date="1591012800">- Correct tests covering CVE-2020-8617</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.8" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)</changelog>
</package>
<package pkgid="b2cf12033b068720d15d9e4c7abfb71140d18a426cd03a5a34888ecf23a0fc8d" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.8.2-0.36.rc1" date="1425297600">- Fix CVE-2015-1349</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 32:9.8.2-0.37.rc1" date="1431000000">- Resolves: 1215687 - DNS resolution failure in high load environment with
  SERVFAIL and "out of memory/success" in the log</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.1" date="1436443200">- Fix CVE-2015-4620</changelog>
</package>
<package pkgid="5dc11cc46b53cfd5428cdc0981ff9a162b9b92f99ed41c9a4f38307ae3a1a33f" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 32:9.8.2-0.37.rc1" date="1431000000">- Resolves: 1215687 - DNS resolution failure in high load environment with
  SERVFAIL and "out of memory/success" in the log</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.1" date="1436443200">- Fix CVE-2015-4620</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.8.2-0.37.rc1.2" date="1437998400">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="cf79517a7486d50cb5f628b838144dbadb6a6ef152325e2f072ba1ea4f4a65c3" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.4"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.8.2-0.37.rc1.2" date="1437998400">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.3" date="1441195200">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195201">- Apply previously not applied patch for CVE-2015-5722</changelog>
</package>
<package pkgid="3f3234102dc2ade2517a63b98ab9f266ca0487f4c0123c3207b5c83a17071235" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.3" date="1441195200">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195201">- Apply previously not applied patch for CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.44.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="23d3c0cfcd0e38672687f49abd4e218bb79735ec2aa4f7ab15d1ecd31eb66e0b" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195200">- Apply previously not applied patch for CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.6" date="1453118400">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="7b2424663bf21e41c9aab277b97e18ec90fc681138e2e217d745316cea0f0334" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.7"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.6" date="1453118400">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.7" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
</package>
<package pkgid="cc8443e64fcc4588ccbd58080f9fe4c6a9a5ef9802f7e0c72bbe93d6d79157aa" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.46.rc1" date="1453118400">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="4ecfd6f14f0ae79699ef25c5acdd7faa9f226326087e5aeab986050fc76b107c" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.2"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="0fe2c2a6f39c29746612499feb43f45c9113dd159372a982b6f544aea7b864a7" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.3" date="1477915200">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="cb40a8d9fb3f9e17d35ca03c8a48cb87ebf2d1572041427d21ae6624f4a18efc" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.3" date="1477915200">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.47.rc1.4" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="c71ebb0e4ff130425534918ef31ec2d070a7fc7a43e3162d1aa24e5535912d6d" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.61.rc1" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
</package>
<package pkgid="205e358a4de03bde0c673ee0db5b0b923d7357333f6ab3a5b16235464c45e72a" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
</package>
<package pkgid="65d0109e8e2f6710bde6477b284bf549457a5214fba9ad2e8a308f844948229f" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="459e4d3d453be09c97ff2c5cb0fb0360279501d90b1d3cc2216f4f83138360bc" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.5" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="9838e53ccf22c9e2b3b076e727e7ec4778155d7aa39e86b9fc79dc4a55ba4882" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.67.rc1" date="1512388800">- Change EDNS flags only after successful query (#1416035)
- Fix crash in ldap driver at bind-sdb stop (#1426626)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1" date="1516104000">- Fix CVE-2017-3145</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.1" date="1533816000">- Fix CVE-2018-5740</changelog>
</package>
<package pkgid="ebcfa1760d953ae5b07da9a0e14a25c2d2982c2640e9793a1113b11148342b2b" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.1" date="1533816000">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.2" date="1557921600">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.3" date="1559908800">- Use only selected documentation files</changelog>
</package>
<package pkgid="3f451e02ce43fab493a31c19d9f8f58c2e60a51c2db95f0f58053802da466542" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.5" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.6" date="1590753600">- Add additional fix to limit recursions</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.7" date="1591012800">- Correct tests covering CVE-2020-8617</changelog>
</package>
<package pkgid="f57896e9974f7f9abaee4c4a8fe479edb434c8b6fa79e0eb75f2b2d6c0353edc" name="bind-chroot" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.8"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.6" date="1590753600">- Add additional fix to limit recursions</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.7" date="1591012800">- Correct tests covering CVE-2020-8617</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.8" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)</changelog>
</package>
<package pkgid="e3fcaa2d365264f30f6c11972cadf58db0aae40bc4d83568e31e94c1849f6a36" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.8.2-0.36.rc1" date="1425297600">- Fix CVE-2015-1349</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 32:9.8.2-0.37.rc1" date="1431000000">- Resolves: 1215687 - DNS resolution failure in high load environment with
  SERVFAIL and "out of memory/success" in the log</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.1" date="1436443200">- Fix CVE-2015-4620</changelog>
</package>
<package pkgid="2c78eda06f3f11997551a1496c8cf1ce6a42a1d849bf63864e425283379ed69c" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 32:9.8.2-0.37.rc1" date="1431000000">- Resolves: 1215687 - DNS resolution failure in high load environment with
  SERVFAIL and "out of memory/success" in the log</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.1" date="1436443200">- Fix CVE-2015-4620</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.8.2-0.37.rc1.2" date="1437998400">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="060e2b7fd6ffc15cd25d09e3320b10338509a878f76ae1c89ca6dc81dcfa1810" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.4"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.8.2-0.37.rc1.2" date="1437998400">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.3" date="1441195200">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195201">- Apply previously not applied patch for CVE-2015-5722</changelog>
</package>
<package pkgid="1e95d14f04f66c5edf8c004c03169e8a6dbfecab2723ef2a96773181a8f21b73" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.3" date="1441195200">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195201">- Apply previously not applied patch for CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.44.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="2375ad5e29a45db76bc2cae6353cc28f814255fd626f3d3059178d9a997cd231" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195200">- Apply previously not applied patch for CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.6" date="1453118400">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="d4571732d261920246991286773ff23489ffd7deb4415370ed5f59c1e2c30749" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.7"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.6" date="1453118400">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.7" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
</package>
<package pkgid="225ecf461de670e36346a49df85bcd152a4f758c0860a663b3b0571c2f7518c6" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.46.rc1" date="1453118400">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="0f9820c649ad42856935e7809f29c15456e3ed23974869a2c471d19bcbf48dc3" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.2"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="f57713b59fcc082c4abbc2393da452610e58ef1413a25701fbb9c8ee89847bf8" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.3" date="1477915200">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="a79f1ca81e1ea9fcc5c8958ccbf0d806d7d93365bd6885a74f2ba16294c26c71" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.3" date="1477915200">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.47.rc1.4" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="94cded554f19814271e13b43b5bfe065537432243caba3ea5635fc07c67c32d4" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.61.rc1" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
</package>
<package pkgid="28d60a8c90201a5af60ef07d087ca36b50a201ddcaedbc9d8a2124c1adbec37d" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
</package>
<package pkgid="82626875853d1935405e18ae07d07485c4c79eb7697f58bd76ecf02246e30e42" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="9058d8aee3ab3f6558003d95fdb7fb54591e32e45845d816e4564714c3991457" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.5" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="8ce80c47c82c6fce7ca1492c1d901606ed4384cfc5a4e446e86ab5d2c4a60c55" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.67.rc1" date="1512388800">- Change EDNS flags only after successful query (#1416035)
- Fix crash in ldap driver at bind-sdb stop (#1426626)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1" date="1516104000">- Fix CVE-2017-3145</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.1" date="1533816000">- Fix CVE-2018-5740</changelog>
</package>
<package pkgid="81e8d339af4aee612849cbe1a162857657db5094cbfd905e339d3b621f835caa" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.1" date="1533816000">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.2" date="1557921600">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.3" date="1559908800">- Use only selected documentation files</changelog>
</package>
<package pkgid="bd5e29847f28c681d00071493941add2c30d9ae99f4eb0469a22b89ee6873acf" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.5" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.6" date="1590753600">- Add additional fix to limit recursions</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.7" date="1591012800">- Correct tests covering CVE-2020-8617</changelog>
</package>
<package pkgid="f1d6c007de19e2138ddc190f7280255aec51331651f0077a2cb14883a9aaa193" name="bind-devel" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.8"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.6" date="1590753600">- Add additional fix to limit recursions</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.7" date="1591012800">- Correct tests covering CVE-2020-8617</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.8" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)</changelog>
</package>
<package pkgid="c91ac19f6ae46ceab137c8682dcdb6fcb30af2b0b774e556bb87296babb6d795" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.8.2-0.36.rc1" date="1425297600">- Fix CVE-2015-1349</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 32:9.8.2-0.37.rc1" date="1431000000">- Resolves: 1215687 - DNS resolution failure in high load environment with
  SERVFAIL and "out of memory/success" in the log</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.1" date="1436443200">- Fix CVE-2015-4620</changelog>
</package>
<package pkgid="23b6d24ba5e508df74ded38bd71606fc2c89349ea64913da722f5ae814488c77" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 32:9.8.2-0.37.rc1" date="1431000000">- Resolves: 1215687 - DNS resolution failure in high load environment with
  SERVFAIL and "out of memory/success" in the log</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.1" date="1436443200">- Fix CVE-2015-4620</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.8.2-0.37.rc1.2" date="1437998400">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="ba412205dd4629e97172ed1ab51459411be4933c4f99d5b4842a4621b6d6ab1e" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.4"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.8.2-0.37.rc1.2" date="1437998400">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.3" date="1441195200">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195201">- Apply previously not applied patch for CVE-2015-5722</changelog>
</package>
<package pkgid="3fdea44c33476215c1186b519600a83082950c0a7959d0eb493d6c14506a415e" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.3" date="1441195200">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195201">- Apply previously not applied patch for CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.44.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="fca9f739e450a78d410010a24758298a438aa023b78671ef2ba9f90cce876b21" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195200">- Apply previously not applied patch for CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.6" date="1453118400">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="292432aca91d21d89b4143d563f198513d353b4575d0010fa69e874ae65ead86" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.7"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.6" date="1453118400">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.7" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
</package>
<package pkgid="7ed4f220bb74da3d02a6235937e4627cd5c1a8a35d31705b3565f3beb7918c61" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.46.rc1" date="1453118400">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="ab5ad2ae3cb0e498be09870850b99d17bbd0e48c28179a9d4962950c340a998d" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.2"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="c0cb49d05cb02886ce5c3395c4b1ac3974436c7ab5153db297c0bfa11d245512" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.3" date="1477915200">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="9a27a3db4d42258757d79b06c6cfb01d28026e29d6d6e726df4877500547f2b4" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.3" date="1477915200">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.47.rc1.4" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="86e74bc8ea7ac4c4263bd4acaa823a3c3534eab4b69b09f6ff26a10c0d615473" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.61.rc1" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
</package>
<package pkgid="a7ac26544dd1521f8ac8d263f72c4b50a630399195e924bd86a0b4aed772c76c" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
</package>
<package pkgid="2454c0d0285180ad8ca8372e62b55b07481136101654fda9188eeee5f0ec8873" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="b7adb73279c3161ea0cbcfbeb610fc17f115f56026c35c0768f68a0598cec7a0" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.5" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="20c898d58c1d3548fe3fc6e1401e5d3ed4354f0cbf1f8870afd6320fa8764562" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.67.rc1" date="1512388800">- Change EDNS flags only after successful query (#1416035)
- Fix crash in ldap driver at bind-sdb stop (#1426626)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1" date="1516104000">- Fix CVE-2017-3145</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.1" date="1533816000">- Fix CVE-2018-5740</changelog>
</package>
<package pkgid="b2bc7d8dd364662b9c9ec772603791be17092ecb3bcbbba8dd4d3088a967c928" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.1" date="1533816000">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.2" date="1557921600">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.3" date="1559908800">- Use only selected documentation files</changelog>
</package>
<package pkgid="0260edc1e0c226c49f66583e3ca503f3c3976233210f54ae8139bbae52fe23af" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.5" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.6" date="1590753600">- Add additional fix to limit recursions</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.7" date="1591012800">- Correct tests covering CVE-2020-8617</changelog>
</package>
<package pkgid="96e44f398115d84ccab20b597896f01bf83641a97ab85850348fb9c9882d8066" name="bind-libs" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.8"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.6" date="1590753600">- Add additional fix to limit recursions</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.7" date="1591012800">- Correct tests covering CVE-2020-8617</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.8" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)</changelog>
</package>
<package pkgid="6bbee33dd085feea625713a3d054540fbea0860cc1a905b0be5a280e7bf0e988" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.8.2-0.36.rc1" date="1425297600">- Fix CVE-2015-1349</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 32:9.8.2-0.37.rc1" date="1431000000">- Resolves: 1215687 - DNS resolution failure in high load environment with
  SERVFAIL and "out of memory/success" in the log</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.1" date="1436443200">- Fix CVE-2015-4620</changelog>
</package>
<package pkgid="44fdb18dd4a3ced07d44f3fed8c91b9a3f3dc4d8f3a1eb358fb66b4339d558fa" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 32:9.8.2-0.37.rc1" date="1431000000">- Resolves: 1215687 - DNS resolution failure in high load environment with
  SERVFAIL and "out of memory/success" in the log</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.1" date="1436443200">- Fix CVE-2015-4620</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.8.2-0.37.rc1.2" date="1437998400">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="514e0c9742ae328edfa40005be986554903b26cc2bb7fcdeec0a5b84dfdc24aa" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.4"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.8.2-0.37.rc1.2" date="1437998400">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.3" date="1441195200">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195201">- Apply previously not applied patch for CVE-2015-5722</changelog>
</package>
<package pkgid="77b341cdcbe84bd835854d09ccebc7d46addafceea231d0b522fc98fb47bcb58" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.3" date="1441195200">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195201">- Apply previously not applied patch for CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.44.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="d79f3aae871f123200aa8cd2f58a69454fdfdc13829119a639841232ab686fed" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195200">- Apply previously not applied patch for CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.6" date="1453118400">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="c016b77c2b46824f032435cf206a0885b0f6efe9fdce0f0295746f51c7a32bae" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.7"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.6" date="1453118400">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.7" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
</package>
<package pkgid="285eba34713bdc3902589fb03f418ec731c4694bf9ec3a57541460d7cd77c855" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.46.rc1" date="1453118400">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="df21751ae1142e5827d9cd3f9493e5fdce7130e0d37f123b8409752307b9463f" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.2"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="549d41a01215e49a029ee633393c86b2c1a2b77a7442f0105fb8e22e51f797c0" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.3" date="1477915200">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="c81d86299734e605eee151725396fdbede67748b03e265da198d7cd6e6b21656" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.3" date="1477915200">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.47.rc1.4" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="1621c0fa9e4e577fb13ebcdaf0d5e7e1a5fb300de044a59041d4bb3c5e6ed2e6" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.61.rc1" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
</package>
<package pkgid="9448963233b2f0351977de28b59fd7505db3b083f147483c2210633969d6f140" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
</package>
<package pkgid="b41b7081a7726a0a97ed2c40f3aad22efad75a72c1866d876ec5eaf848e586ca" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="39f0ee9b476aa256feecb250b8a16f12e56f45a41c13ef6ac46874f44b9f4949" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.5" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="10bf6ccb00491852190c58295c9dc305d51b3558a6e4f1585aaa855827907fe4" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.67.rc1" date="1512388800">- Change EDNS flags only after successful query (#1416035)
- Fix crash in ldap driver at bind-sdb stop (#1426626)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1" date="1516104000">- Fix CVE-2017-3145</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.1" date="1533816000">- Fix CVE-2018-5740</changelog>
</package>
<package pkgid="f5a58b71102f2753ed25149fc02a9c6a7b7387187eaa72678533f0c620cc8fe2" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.1" date="1533816000">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.2" date="1557921600">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.3" date="1559908800">- Use only selected documentation files</changelog>
</package>
<package pkgid="33102af0b5d55c548c380db640ec25d946b1223b2664359ce3c79097a0e72afc" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.5" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.6" date="1590753600">- Add additional fix to limit recursions</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.7" date="1591012800">- Correct tests covering CVE-2020-8617</changelog>
</package>
<package pkgid="3ab39050adf36857b15e65e472340815a178065508d1a6f5e504430f50b12985" name="bind-sdb" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.8"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.6" date="1590753600">- Add additional fix to limit recursions</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.7" date="1591012800">- Correct tests covering CVE-2020-8617</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.8" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)</changelog>
</package>
<package pkgid="a41e889a58c82e63df1133d0f661abed05e2c758c1b35500f0a6ec6caa881dba" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; 32:9.8.2-0.36.rc1" date="1425297600">- Fix CVE-2015-1349</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 32:9.8.2-0.37.rc1" date="1431000000">- Resolves: 1215687 - DNS resolution failure in high load environment with
  SERVFAIL and "out of memory/success" in the log</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.1" date="1436443200">- Fix CVE-2015-4620</changelog>
</package>
<package pkgid="5b6d80deebdc2513465905f25130853ea30f2f6d15380b4dd1bdd46859d2f83b" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 32:9.8.2-0.37.rc1" date="1431000000">- Resolves: 1215687 - DNS resolution failure in high load environment with
  SERVFAIL and "out of memory/success" in the log</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.1" date="1436443200">- Fix CVE-2015-4620</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.8.2-0.37.rc1.2" date="1437998400">- Fix CVE-2015-5477</changelog>
</package>
<package pkgid="33138f696325225dff3bdb129c63bd259f61e5d9911ab2f9fa934487ac250016" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.4"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 32:9.8.2-0.37.rc1.2" date="1437998400">- Fix CVE-2015-5477</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.3" date="1441195200">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195201">- Apply previously not applied patch for CVE-2015-5722</changelog>
</package>
<package pkgid="3499a1b716daa9f064def979e59754c04246dfe4c9c9ee256af46204e7211625" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.3" date="1441195200">- Fix CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195201">- Apply previously not applied patch for CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.44.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
</package>
<package pkgid="b9301e1ba11a502183389f6de845c3dc4701b1f67f2361d9dadefb1521f7c17e" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.6"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.4" date="1441195200">- Apply previously not applied patch for CVE-2015-5722</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.6" date="1453118400">- Fix CVE-2015-8704</changelog>
</package>
<package pkgid="6461c96bc55b69e3eb224a5d88863b28b16687d5722fb34a1127b7f358e18619" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.37.rc1.el6_7.7"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.5" date="1450094400">- Fix CVE-2015-8000</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.6" date="1453118400">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.37.rc1.7" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
</package>
<package pkgid="1b8cce235700c80dbc390588aeb71fd70116b4ade28c6f1bda40b7fada665847" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.1"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.46.rc1" date="1453118400">- Fix CVE-2015-8704</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
</package>
<package pkgid="8ce3538bc85ee86038b1edfe56771f91de4cd694a1f081aa6a2204e620476f8b" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.2"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1" date="1457524800">- Fix CVE-2016-1285 and CVE-2016-1286</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
</package>
<package pkgid="5d6571fbc313a2d8e6d090b99e3929e96de445be9aac146d648ffbbf45dd32be" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.3"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.1" date="1474632000">- Fix CVE-2016-2776</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.3" date="1477915200">- Fix CVE-2016-8864</changelog>
</package>
<package pkgid="0972ea6f3259afdbe82a1fa2612ed483563351ffc804229b01365daa11c30983" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.47.rc1.el6_8.4"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.2" date="1476705600">- Fix CVE-2016-2848</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.47.rc1.3" date="1477915200">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.47.rc1.4" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
</package>
<package pkgid="53982eb9292e15bfebfdc8aebf171ace192e033807b863d096c4312679192174" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.61.rc1" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
</package>
<package pkgid="ec4967a1a2055178c878ddf42fc6d2bc3495a2cecc0dca61421ddd1ac7357fa1" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
</package>
<package pkgid="c26832e4d213b7e436064cb52d627d02569c609ebd2c9a3b5fd7702fb4c2d88a" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="34b995e52f4dba4c7f03d1a602516a43a4c9c2569820d9978da7b93fe6e65032" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.5" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="9d11b9ff6aea9a31f5118a4d9e22904c3f5026b1a19b4853bb080a5f1c3a7ecb" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.67.rc1" date="1512388800">- Change EDNS flags only after successful query (#1416035)
- Fix crash in ldap driver at bind-sdb stop (#1426626)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1" date="1516104000">- Fix CVE-2017-3145</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.1" date="1533816000">- Fix CVE-2018-5740</changelog>
</package>
<package pkgid="2cf114459dbaed866608e20d5b24bd64a3a6066c6fc4df7a4bad2a0592ee4198" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.1" date="1533816000">- Fix CVE-2018-5740</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.2" date="1557921600">- Fix CVE-2018-5743</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.3" date="1559908800">- Use only selected documentation files</changelog>
</package>
<package pkgid="c216753fb645a6b4eb5fd42fc9149adf6dc53196f4db99cd3841d7a291da4dc8" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.5" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.6" date="1590753600">- Add additional fix to limit recursions</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.7" date="1591012800">- Correct tests covering CVE-2020-8617</changelog>
</package>
<package pkgid="6055789e22872ce53f2b88dca2039ebc83ef9b946335325847327b6848d2fb02" name="bind-utils" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.68.rc1.el6_10.8"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.6" date="1590753600">- Add additional fix to limit recursions</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.7" date="1591012800">- Correct tests covering CVE-2020-8617</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.68.rc1.8" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)</changelog>
</package>
<package pkgid="909d120dfb230e23e74720b37b7e0786b3da539b1ae6bf1f43f2ef2448d23562" name="bluez" arch="i686">
  <version epoch="0" ver="4.66" rel="2.el6_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.57-5" date="1273752000">- Don't build on s390 machines, there's no USB there
Related: rhbz#584317</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.66-1" date="1277899200">- Update to 4.66
- Update cable pairing patch
- Remove out-dated patches, including wacom pairing
- Move hidd, pand and dund man pages to the -compat
  sub-package
Resolves: rhbz#565586</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 4.66-2" date="1505131200">- sdpd heap fixes
Resolves: #1490008</changelog>
</package>
<package pkgid="9ee76fcc7239a5ddbeb04c312ea0febb1c66bfac89fb041ffe87b481f3218f18" name="bluez-alsa" arch="i686">
  <version epoch="0" ver="4.66" rel="2.el6_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.57-5" date="1273752000">- Don't build on s390 machines, there's no USB there
Related: rhbz#584317</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.66-1" date="1277899200">- Update to 4.66
- Update cable pairing patch
- Remove out-dated patches, including wacom pairing
- Move hidd, pand and dund man pages to the -compat
  sub-package
Resolves: rhbz#565586</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 4.66-2" date="1505131200">- sdpd heap fixes
Resolves: #1490008</changelog>
</package>
<package pkgid="6ddf5d6b45d6bcda88c2085a8fd5e4b12a55bcd077e804068f5060fa3d58286a" name="bluez-compat" arch="i686">
  <version epoch="0" ver="4.66" rel="2.el6_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.57-5" date="1273752000">- Don't build on s390 machines, there's no USB there
Related: rhbz#584317</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.66-1" date="1277899200">- Update to 4.66
- Update cable pairing patch
- Remove out-dated patches, including wacom pairing
- Move hidd, pand and dund man pages to the -compat
  sub-package
Resolves: rhbz#565586</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 4.66-2" date="1505131200">- sdpd heap fixes
Resolves: #1490008</changelog>
</package>
<package pkgid="891f22ff79778ef0256fbea6828723f19a6ca176cbff1b613e7c2039ed8b1bb3" name="bluez-cups" arch="i686">
  <version epoch="0" ver="4.66" rel="2.el6_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.57-5" date="1273752000">- Don't build on s390 machines, there's no USB there
Related: rhbz#584317</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.66-1" date="1277899200">- Update to 4.66
- Update cable pairing patch
- Remove out-dated patches, including wacom pairing
- Move hidd, pand and dund man pages to the -compat
  sub-package
Resolves: rhbz#565586</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 4.66-2" date="1505131200">- sdpd heap fixes
Resolves: #1490008</changelog>
</package>
<package pkgid="40c417ebb3ee9e5367e06a606d0cad2ae5135297b04085d0916bd87964d3dfae" name="bluez-gstreamer" arch="i686">
  <version epoch="0" ver="4.66" rel="2.el6_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.57-5" date="1273752000">- Don't build on s390 machines, there's no USB there
Related: rhbz#584317</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.66-1" date="1277899200">- Update to 4.66
- Update cable pairing patch
- Remove out-dated patches, including wacom pairing
- Move hidd, pand and dund man pages to the -compat
  sub-package
Resolves: rhbz#565586</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 4.66-2" date="1505131200">- sdpd heap fixes
Resolves: #1490008</changelog>
</package>
<package pkgid="7bcac087a22a9f93c8768c7001d23a15381831c3d2e61a666180f537f1294c46" name="bluez-libs" arch="i686">
  <version epoch="0" ver="4.66" rel="2.el6_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.57-5" date="1273752000">- Don't build on s390 machines, there's no USB there
Related: rhbz#584317</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.66-1" date="1277899200">- Update to 4.66
- Update cable pairing patch
- Remove out-dated patches, including wacom pairing
- Move hidd, pand and dund man pages to the -compat
  sub-package
Resolves: rhbz#565586</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 4.66-2" date="1505131200">- sdpd heap fixes
Resolves: #1490008</changelog>
</package>
<package pkgid="a4b907bab21cfb79ecba7c5c8bb54eaf57d5e16a4672f7ca36124e724bdc26c8" name="bluez-libs-devel" arch="i686">
  <version epoch="0" ver="4.66" rel="2.el6_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.57-5" date="1273752000">- Don't build on s390 machines, there's no USB there
Related: rhbz#584317</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.66-1" date="1277899200">- Update to 4.66
- Update cable pairing patch
- Remove out-dated patches, including wacom pairing
- Move hidd, pand and dund man pages to the -compat
  sub-package
Resolves: rhbz#565586</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 4.66-2" date="1505131200">- sdpd heap fixes
Resolves: #1490008</changelog>
</package>
<package pkgid="57dd1475f806f7b11431cbf0e935a3da83bc603193abe66917636ee6e9ab251b" name="clufter-bin" arch="i686">
  <version epoch="0" ver="0.77.1" rel="1.el6"/>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.7-1" date="1481544000">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.7</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.8-1" date="1484740800">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.8</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.77.1-1" date="1521115200">- split -bin and -common packages, the former becoming the only arch-specific
- also move python-specific (entry points, main files) back from -cli package
- move nano fallback editor dependency to -cli package [PGissue#1]
- bump upstream package, see https://pagure.io/clufter/releases</changelog>
</package>
<package pkgid="2250b16cc8a423dd2304b30d5fa3c8deac5917ed6557626bc5506af9880f31ad" name="clufter-cli" arch="noarch">
  <version epoch="0" ver="0.77.1" rel="1.el6"/>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.7-1" date="1481544000">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.7</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.8-1" date="1484740800">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.8</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.77.1-1" date="1521115200">- split -bin and -common packages, the former becoming the only arch-specific
- also move python-specific (entry points, main files) back from -cli package
- move nano fallback editor dependency to -cli package [PGissue#1]
- bump upstream package, see https://pagure.io/clufter/releases</changelog>
</package>
<package pkgid="389e5b2cce8fb7ab6ba9b39c28b18bd0644221daf28822e7d7e088644eb22558" name="clufter-common" arch="noarch">
  <version epoch="0" ver="0.77.1" rel="1.el6"/>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.7-1" date="1481544000">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.7</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.8-1" date="1484740800">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.8</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.77.1-1" date="1521115200">- split -bin and -common packages, the former becoming the only arch-specific
- also move python-specific (entry points, main files) back from -cli package
- move nano fallback editor dependency to -cli package [PGissue#1]
- bump upstream package, see https://pagure.io/clufter/releases</changelog>
</package>
<package pkgid="e633dbc982b69031eab0027926cf39eea7e53abb357441b0f881625fa0529399" name="clufter-lib-ccs" arch="noarch">
  <version epoch="0" ver="0.77.1" rel="1.el6"/>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.7-1" date="1481544000">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.7</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.8-1" date="1484740800">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.8</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.77.1-1" date="1521115200">- split -bin and -common packages, the former becoming the only arch-specific
- also move python-specific (entry points, main files) back from -cli package
- move nano fallback editor dependency to -cli package [PGissue#1]
- bump upstream package, see https://pagure.io/clufter/releases</changelog>
</package>
<package pkgid="5857472ac34d33a8e087f4da84d34ed4d4d2607a59075bb0df81446e66511cf3" name="clufter-lib-general" arch="noarch">
  <version epoch="0" ver="0.77.1" rel="1.el6"/>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.7-1" date="1481544000">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.7</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.8-1" date="1484740800">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.8</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.77.1-1" date="1521115200">- split -bin and -common packages, the former becoming the only arch-specific
- also move python-specific (entry points, main files) back from -cli package
- move nano fallback editor dependency to -cli package [PGissue#1]
- bump upstream package, see https://pagure.io/clufter/releases</changelog>
</package>
<package pkgid="4a497cae3fab4d2d531668a02d125f74c4e1a983b45980bc46308606deda709c" name="clufter-lib-pcs" arch="noarch">
  <version epoch="0" ver="0.77.1" rel="1.el6"/>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.7-1" date="1481544000">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.7</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.8-1" date="1484740800">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.8</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.77.1-1" date="1521115200">- split -bin and -common packages, the former becoming the only arch-specific
- also move python-specific (entry points, main files) back from -cli package
- move nano fallback editor dependency to -cli package [PGissue#1]
- bump upstream package, see https://pagure.io/clufter/releases</changelog>
</package>
<package pkgid="cd480f3a3c4dc6c451ebd32f347fcc7d98337cb1ddddb524cc1b5e595f5cc892" name="cmirror" arch="i686">
  <version epoch="0" ver="2.02.143" rel="12.el6"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-10" date="1479988800">- Disable queueing on mpath devs in blk-availability initscript.
- Add new -m|--mpathoption disablequeueing to blkdeactivate.
- Prevent only repair for non-synced raid1 unless --force, not other raid types.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-11" date="1481630400">- Fix handling of transient failure of a PV holding RAID sub LVs.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-12" date="1484136000">- Allow transiently failed RAID LV to be refreshed.</changelog>
</package>
<package pkgid="a5eeced49d68a2fbe0448ec6690c26ebbf10491d5d8f80542d4225205b75eef1" name="compat-xcb-util" arch="i686">
  <version epoch="0" ver="0.4.0" rel="2.2.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.3.6-6" date="1418904000">- Add compat-xcb-util subpackage to restore libxcb-icccm.so.1</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.4.0-2.1" date="1447675200">- xcb-util 0.4.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.4.0-2.2" date="1459425600">- Fix now-unnecessary compat header and pkgconfig</changelog>
</package>
<package pkgid="3265471cef84f21333bce8cf101268b52cc7f6fa5fdc136ecbf9de61dd9d02e9" name="copy-jdk-configs" arch="noarch">
  <version epoch="0" ver="3.3" rel="9.el6"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503666</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503666</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1503666</changelog>
</package>
<package pkgid="d02470ea831ef14ba5ce44fe48060e0d63acb8b86b4a4cb6b3728b3a5a3e0741" name="coreutils" arch="i686">
  <version epoch="0" ver="8.4" rel="46.el6"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.4-44" date="1475582400">- fix the functionality of 'sort -h -k ...' in multi-byte locales (#1357979)
- use correct path to grep(1) in colorls.sh (#1376892)
- make colorls.sh compatible with ksh (#1321643)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.4-45" date="1486382400">- su: deny killing other processes with root privileges (CVE-2017-2616)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.4-46" date="1486382401">- pure rebuild to bring back support for acl_extended_file_nofollow() on x86_64</changelog>
</package>
<package pkgid="4d370da3b34cbef77ef1096ab82a3b46e31885ad6920f3ab6eb6137e6d70f6b2" name="coreutils-libs" arch="i686">
  <version epoch="0" ver="8.4" rel="46.el6"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.4-44" date="1475582400">- fix the functionality of 'sort -h -k ...' in multi-byte locales (#1357979)
- use correct path to grep(1) in colorls.sh (#1376892)
- make colorls.sh compatible with ksh (#1321643)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.4-45" date="1486382400">- su: deny killing other processes with root privileges (CVE-2017-2616)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.4-46" date="1486382401">- pure rebuild to bring back support for acl_extended_file_nofollow() on x86_64</changelog>
</package>
<package pkgid="77a51eda3454ff13064b7b3dfb8a69243f4715f25d5e06c2f37d20a66a2d4016" name="curl" arch="i686">
  <version epoch="0" ver="7.19.7" rel="53.el6_9"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-51" date="1452859200">- SSH: make CURLOPT_SSH_PUBLIC_KEYFILE treat "" as NULL (#1260742)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-52" date="1454068800">- fix a bug in DNS caching code that causes a memory leak (#1302893)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-53" date="1488888000">- treat Negotiate authentication as connection-oriented (CVE-2017-2628)</changelog>
</package>
<package pkgid="fe27d006724f2e6f6fa6db571fbc1456c3e372010bb60e96eabb60d54922df6d" name="dbus" arch="i686">
  <version epoch="1" ver="1.2.24" rel="11.el6_10"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-9" date="1522756800">- Add dbus-run-session (#1268972)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-10" date="1562587200">- Fix CVE-2019-12749 (#1725574)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-11" date="1562587201">- Apply patch for CVE-2019-12749 (#1725574)</changelog>
</package>
<package pkgid="bb36e8baa228989d49c3fda19d44307151a34cbf14fedca4db2b0f266411a95f" name="dbus-devel" arch="i686">
  <version epoch="1" ver="1.2.24" rel="11.el6_10"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-9" date="1522756800">- Add dbus-run-session (#1268972)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-10" date="1562587200">- Fix CVE-2019-12749 (#1725574)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-11" date="1562587201">- Apply patch for CVE-2019-12749 (#1725574)</changelog>
</package>
<package pkgid="7e9688be22663b7e530f0c2a1771ee68259e26b3844abb638b7b01cd0b9bf396" name="dbus-doc" arch="noarch">
  <version epoch="1" ver="1.2.24" rel="11.el6_10"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-9" date="1522756800">- Add dbus-run-session (#1268972)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-10" date="1562587200">- Fix CVE-2019-12749 (#1725574)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-11" date="1562587201">- Apply patch for CVE-2019-12749 (#1725574)</changelog>
</package>
<package pkgid="27c22a404a473302373f7dcc4da626e06c39ca936278d9812a20631eb9e7048a" name="dbus-libs" arch="i686">
  <version epoch="1" ver="1.2.24" rel="11.el6_10"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-9" date="1522756800">- Add dbus-run-session (#1268972)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-10" date="1562587200">- Fix CVE-2019-12749 (#1725574)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-11" date="1562587201">- Apply patch for CVE-2019-12749 (#1725574)</changelog>
</package>
<package pkgid="a8637eb4b1a230f931296568cdaa81fd21debae20792a2c821d7ef164633e3da" name="dbus-x11" arch="i686">
  <version epoch="1" ver="1.2.24" rel="11.el6_10"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-9" date="1522756800">- Add dbus-run-session (#1268972)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-10" date="1562587200">- Fix CVE-2019-12749 (#1725574)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.2.24-11" date="1562587201">- Apply patch for CVE-2019-12749 (#1725574)</changelog>
</package>
<package pkgid="edbdc112e4f9fbb2cde79644894189697ca064375e319e7ae0e710f5cf203dd4" name="device-mapper" arch="i686">
  <version epoch="0" ver="1.02.117" rel="12.el6"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-10" date="1479988800">- Disable queueing on mpath devs in blk-availability initscript.
- Add new -m|--mpathoption disablequeueing to blkdeactivate.
- Prevent only repair for non-synced raid1 unless --force, not other raid types.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-11" date="1481630400">- Fix handling of transient failure of a PV holding RAID sub LVs.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-12" date="1484136000">- Allow transiently failed RAID LV to be refreshed.</changelog>
</package>
<package pkgid="beefab6ad730d20a7bda0dff837db7d3d1f0a0d4de811f737a85390cbfc26db8" name="device-mapper-devel" arch="i686">
  <version epoch="0" ver="1.02.117" rel="12.el6"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-10" date="1479988800">- Disable queueing on mpath devs in blk-availability initscript.
- Add new -m|--mpathoption disablequeueing to blkdeactivate.
- Prevent only repair for non-synced raid1 unless --force, not other raid types.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-11" date="1481630400">- Fix handling of transient failure of a PV holding RAID sub LVs.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-12" date="1484136000">- Allow transiently failed RAID LV to be refreshed.</changelog>
</package>
<package pkgid="b972734bf2900834338f2067118364ac9749f65760e44ca95f2fdb25425758a1" name="device-mapper-event" arch="i686">
  <version epoch="0" ver="1.02.117" rel="12.el6"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-10" date="1479988800">- Disable queueing on mpath devs in blk-availability initscript.
- Add new -m|--mpathoption disablequeueing to blkdeactivate.
- Prevent only repair for non-synced raid1 unless --force, not other raid types.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-11" date="1481630400">- Fix handling of transient failure of a PV holding RAID sub LVs.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-12" date="1484136000">- Allow transiently failed RAID LV to be refreshed.</changelog>
</package>
<package pkgid="0f41bddfc35c496fdca97189598195ee38300315211371d4c8ee806c64bec32b" name="device-mapper-event-devel" arch="i686">
  <version epoch="0" ver="1.02.117" rel="12.el6"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-10" date="1479988800">- Disable queueing on mpath devs in blk-availability initscript.
- Add new -m|--mpathoption disablequeueing to blkdeactivate.
- Prevent only repair for non-synced raid1 unless --force, not other raid types.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-11" date="1481630400">- Fix handling of transient failure of a PV holding RAID sub LVs.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-12" date="1484136000">- Allow transiently failed RAID LV to be refreshed.</changelog>
</package>
<package pkgid="730968f38c4325f1cc2d22969275a6033d268dd841155b002c043ba0fa09b3db" name="device-mapper-event-libs" arch="i686">
  <version epoch="0" ver="1.02.117" rel="12.el6"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-10" date="1479988800">- Disable queueing on mpath devs in blk-availability initscript.
- Add new -m|--mpathoption disablequeueing to blkdeactivate.
- Prevent only repair for non-synced raid1 unless --force, not other raid types.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-11" date="1481630400">- Fix handling of transient failure of a PV holding RAID sub LVs.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-12" date="1484136000">- Allow transiently failed RAID LV to be refreshed.</changelog>
</package>
<package pkgid="93b57aa74d31392916a07f908a1b2577fffcb5eb40116f5e438a82ce6b016f7f" name="device-mapper-libs" arch="i686">
  <version epoch="0" ver="1.02.117" rel="12.el6"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-10" date="1479988800">- Disable queueing on mpath devs in blk-availability initscript.
- Add new -m|--mpathoption disablequeueing to blkdeactivate.
- Prevent only repair for non-synced raid1 unless --force, not other raid types.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-11" date="1481630400">- Fix handling of transient failure of a PV holding RAID sub LVs.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-12" date="1484136000">- Allow transiently failed RAID LV to be refreshed.</changelog>
</package>
<package pkgid="55f17bfde902f807444acebe9ed144a789dda45e8a4ed9889d3a73ce2793e36b" name="device-mapper-multipath" arch="i686">
  <version epoch="0" ver="0.4.9" rel="100.el6"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.98" date="1481025600">- Add 0266-RHBZ-1401391-fix-prio-put.patch
  * don't try to drop a nonexistant prio handler
- Add 0267-RHBZ-1401769-orphan-status.patch
  * don't print out checker and device status for orphan paths
- Resolves: bz #1401391, #1401769</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.99" date="1481025601">- Change devicemapper Requires to &gt;= 1.02.117-10.el6 (bz #1344381)
- Resolves: #1344381</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.100" date="1483617600">- Modify 0261-RHBZ-1377532-disable-changed-paths.patch
  * add man page information
- Refresh 0265-RHBZ-1355669-max-sectors-kb.patch
- Related: #1377532</changelog>
</package>
<package pkgid="9f90a63fd7d8f13ac275293abd44a12ff9323e1761d9f59b53d4d37c1111e319" name="device-mapper-multipath-libs" arch="i686">
  <version epoch="0" ver="0.4.9" rel="100.el6"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.98" date="1481025600">- Add 0266-RHBZ-1401391-fix-prio-put.patch
  * don't try to drop a nonexistant prio handler
- Add 0267-RHBZ-1401769-orphan-status.patch
  * don't print out checker and device status for orphan paths
- Resolves: bz #1401391, #1401769</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.99" date="1481025601">- Change devicemapper Requires to &gt;= 1.02.117-10.el6 (bz #1344381)
- Resolves: #1344381</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.100" date="1483617600">- Modify 0261-RHBZ-1377532-disable-changed-paths.patch
  * add man page information
- Refresh 0265-RHBZ-1355669-max-sectors-kb.patch
- Related: #1377532</changelog>
</package>
<package pkgid="ae1e352b36fb1ce1f522cbf28ade65665861394068fd0745075ae7bffe7db95c" name="device-mapper-persistent-data" arch="i686">
  <version epoch="0" ver="0.6.2" rel="0.1.rc7.el6"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc1" date="1455105600">- Fix bug in thin_dump when using metadata snaps.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc5" date="1456315200">- Fix bugs in thin_delta.
- Fix recent regression in thin_repair.
- Force g++-98 dialect.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.6.2-0.1.rc7" date="1458648000">- Fixes for thin_repair.
- Add new fields to thin_ls: MAPPED_BYTES, EXCLUSIVE_BYTES and SHARED_BYTES.</changelog>
</package>
<package pkgid="0fc62ec04cf0442e22344f8cf17f1393cc82b154b0b435349420a573e4b4aaff" name="dhclient" arch="i686">
  <version epoch="12" ver="4.1.1" rel="53.P1.el6_9.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.1.1-53.P1" date="1478606400">- Resolves: #1363790 - dhclient does not update routing table after the lease
  expiry</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-53.P1.1" date="1501502400">- Resolves: #1063217 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.3" date="1519819200">- Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

&lt;* Wed Feb 28 2018 Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.2
- Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow</changelog>
</package>
<package pkgid="1c1ebdbc5cce13282e030a5ba4941522ae10de8d3ee6d047b4f2d92a887c82a0" name="dhclient" arch="i686">
  <version epoch="12" ver="4.1.1" rel="53.P1.el6_9.4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-53.P1.1" date="1501502400">- Resolves: #1063217 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.3" date="1519819200">- Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

&lt;* Wed Feb 28 2018 Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.2
- Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.el6_9.4" date="1524571200">- Resolves: #1570897 - Fix comamnd execution in NM script (CVE-2018-1111)</changelog>
</package>
<package pkgid="14b09f54c25fb18176f8c158be844fd62a0bef429e90fe3d8056c1f9ef31c207" name="dhcp" arch="i686">
  <version epoch="12" ver="4.1.1" rel="53.P1.el6_9.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.1.1-53.P1" date="1478606400">- Resolves: #1363790 - dhclient does not update routing table after the lease
  expiry</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-53.P1.1" date="1501502400">- Resolves: #1063217 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.3" date="1519819200">- Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

&lt;* Wed Feb 28 2018 Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.2
- Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow</changelog>
</package>
<package pkgid="584aa328f63d171ec6906ce870dae48df4b036b476a1467433a3a495da6d1076" name="dhcp" arch="i686">
  <version epoch="12" ver="4.1.1" rel="53.P1.el6_9.4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-53.P1.1" date="1501502400">- Resolves: #1063217 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.3" date="1519819200">- Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

&lt;* Wed Feb 28 2018 Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.2
- Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.el6_9.4" date="1524571200">- Resolves: #1570897 - Fix comamnd execution in NM script (CVE-2018-1111)</changelog>
</package>
<package pkgid="f449e29bc84958ee062ad17201c93cfbb65308420a775d6b0806986fac0f7935" name="dhcp-common" arch="i686">
  <version epoch="12" ver="4.1.1" rel="53.P1.el6_9.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.1.1-53.P1" date="1478606400">- Resolves: #1363790 - dhclient does not update routing table after the lease
  expiry</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-53.P1.1" date="1501502400">- Resolves: #1063217 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.3" date="1519819200">- Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

&lt;* Wed Feb 28 2018 Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.2
- Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow</changelog>
</package>
<package pkgid="190ad80c60d389f65643dc062c1f4812090a41203a432394d9510740fc5323e6" name="dhcp-common" arch="i686">
  <version epoch="12" ver="4.1.1" rel="53.P1.el6_9.4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-53.P1.1" date="1501502400">- Resolves: #1063217 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.3" date="1519819200">- Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

&lt;* Wed Feb 28 2018 Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.2
- Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.el6_9.4" date="1524571200">- Resolves: #1570897 - Fix comamnd execution in NM script (CVE-2018-1111)</changelog>
</package>
<package pkgid="3a3ad35eef197bdb31d2155b6ed114088448c6e7ce63b6ef40124c2e1b81fbea" name="dhcp-devel" arch="i686">
  <version epoch="12" ver="4.1.1" rel="53.P1.el6_9.3"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.1.1-53.P1" date="1478606400">- Resolves: #1363790 - dhclient does not update routing table after the lease
  expiry</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-53.P1.1" date="1501502400">- Resolves: #1063217 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.3" date="1519819200">- Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

&lt;* Wed Feb 28 2018 Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.2
- Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow</changelog>
</package>
<package pkgid="10a54c59ebfe3895bc787bb77829e875a0cbfab53bd61f118f6793b0a17e6f7c" name="dhcp-devel" arch="i686">
  <version epoch="12" ver="4.1.1" rel="53.P1.el6_9.4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-53.P1.1" date="1501502400">- Resolves: #1063217 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.3" date="1519819200">- Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

&lt;* Wed Feb 28 2018 Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.2
- Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.el6_9.4" date="1524571200">- Resolves: #1570897 - Fix comamnd execution in NM script (CVE-2018-1111)</changelog>
</package>
<package pkgid="510bf5fdfa62c1ca987cd49006031323c0051405a0e3714d2d427ecdaa27e737" name="dnsmasq" arch="i686">
  <version epoch="0" ver="2.48" rel="18.el6_9"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.48-16" date="1449748800">- Resolves: #1288617 - add missing patch file</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.48-17" date="1453118400">- Resolves: #1154953 - use both SO_REUSEADDR and SO_REUSEPORT</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.48-18" date="1506427200">- Fix CVE-2017-14491</changelog>
</package>
<package pkgid="7b79cb62536f33ba8c1c0538f5fca9439cd0d6e6758086defa15d908e17f4721" name="dnsmasq-utils" arch="i686">
  <version epoch="0" ver="2.48" rel="18.el6_9"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.48-16" date="1449748800">- Resolves: #1288617 - add missing patch file</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.48-17" date="1453118400">- Resolves: #1154953 - use both SO_REUSEADDR and SO_REUSEPORT</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.48-18" date="1506427200">- Fix CVE-2017-14491</changelog>
</package>
<package pkgid="e181d5a3a17fdd37c0911bf8495ded4c46b035c7459ac38fdc2c7041c83fea23" name="dovecot" arch="i686">
  <version epoch="1" ver="2.0.9" rel="22.el6_10.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-21" date="1440417600">-fixed crash on "NOT &lt;nonexistent sequence&gt;" search (#1220628)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-22" date="1452254400">- allow larger DH parameters length(#1230258)
- don't check client PID in non-login auth sockets (#1281670)
- messages containing a CP932 character were not shown in a search result (#1275233)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-22.1" date="1568721600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1752708)</changelog>
</package>
<package pkgid="340529dd18a0b2501de3b28273844ae10209573221d6a383334fdca4fdb8efa9" name="dovecot-devel" arch="i686">
  <version epoch="1" ver="2.0.9" rel="22.el6_10.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-21" date="1440417600">-fixed crash on "NOT &lt;nonexistent sequence&gt;" search (#1220628)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-22" date="1452254400">- allow larger DH parameters length(#1230258)
- don't check client PID in non-login auth sockets (#1281670)
- messages containing a CP932 character were not shown in a search result (#1275233)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-22.1" date="1568721600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1752708)</changelog>
</package>
<package pkgid="2eb5bc20770fb58ebbec94b4ba765a01ff4761e5175a07718462500dbb3d83fe" name="dovecot-mysql" arch="i686">
  <version epoch="1" ver="2.0.9" rel="22.el6_10.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-21" date="1440417600">-fixed crash on "NOT &lt;nonexistent sequence&gt;" search (#1220628)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-22" date="1452254400">- allow larger DH parameters length(#1230258)
- don't check client PID in non-login auth sockets (#1281670)
- messages containing a CP932 character were not shown in a search result (#1275233)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-22.1" date="1568721600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1752708)</changelog>
</package>
<package pkgid="f233fa50db9dfdc999738c695c3179b8ece95b46abedbf23ca15b39ab657714e" name="dovecot-pgsql" arch="i686">
  <version epoch="1" ver="2.0.9" rel="22.el6_10.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-21" date="1440417600">-fixed crash on "NOT &lt;nonexistent sequence&gt;" search (#1220628)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-22" date="1452254400">- allow larger DH parameters length(#1230258)
- don't check client PID in non-login auth sockets (#1281670)
- messages containing a CP932 character were not shown in a search result (#1275233)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-22.1" date="1568721600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1752708)</changelog>
</package>
<package pkgid="26a62b652999aa2e24e612bacf0ec819266fb36d1cb4e4f364724c2758af9c6d" name="dovecot-pigeonhole" arch="i686">
  <version epoch="1" ver="2.0.9" rel="22.el6_10.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-21" date="1440417600">-fixed crash on "NOT &lt;nonexistent sequence&gt;" search (#1220628)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-22" date="1452254400">- allow larger DH parameters length(#1230258)
- don't check client PID in non-login auth sockets (#1281670)
- messages containing a CP932 character were not shown in a search result (#1275233)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1:2.0.9-22.1" date="1568721600">- fix CVE-2019-11500: IMAP protocol parser does not properly handle NUL byte
  when scanning data in quoted strings, leading to out of bounds heap
  memory writes (#1752708)</changelog>
</package>
<package pkgid="755b97ea8f38cbb6f4a76b85eac4a2b5c117de343e15bc7270a2e28e17a14b03" name="dracut" arch="noarch">
  <version epoch="0" ver="004" rel="409.el6_8.2"/>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409" date="1460030400">- don't handle "iscsistart -N" exit value
  start iscsistart -b more reliably in the background
Resolves: rhbz#1324340</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.1" date="1461931200">- cannot start multiple "iscsistart -b" in parallel
Resolves: rhbz#1322209</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.2" date="1461931201">- rebuild for z
Resolves: rhbz#1322209</changelog>
</package>
<package pkgid="11a7c1c68f94c27b5bcd72bc378984f30f459ef92caf03b4b87bbb24d30c6591" name="dracut-caps" arch="noarch">
  <version epoch="0" ver="004" rel="409.el6_8.2"/>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409" date="1460030400">- don't handle "iscsistart -N" exit value
  start iscsistart -b more reliably in the background
Resolves: rhbz#1324340</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.1" date="1461931200">- cannot start multiple "iscsistart -b" in parallel
Resolves: rhbz#1322209</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.2" date="1461931201">- rebuild for z
Resolves: rhbz#1322209</changelog>
</package>
<package pkgid="3efbb0877197e7eae1e59764d2d892198af29edb030bf3cfd58a925d0b32535a" name="dracut-fips" arch="noarch">
  <version epoch="0" ver="004" rel="409.el6_8.2"/>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409" date="1460030400">- don't handle "iscsistart -N" exit value
  start iscsistart -b more reliably in the background
Resolves: rhbz#1324340</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.1" date="1461931200">- cannot start multiple "iscsistart -b" in parallel
Resolves: rhbz#1322209</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.2" date="1461931201">- rebuild for z
Resolves: rhbz#1322209</changelog>
</package>
<package pkgid="7e9f6bf09d401fe1120a23cd6e5ec1278761dc942a9f4add2f03c0ccd6a95dee" name="dracut-fips-aesni" arch="noarch">
  <version epoch="0" ver="004" rel="409.el6_8.2"/>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409" date="1460030400">- don't handle "iscsistart -N" exit value
  start iscsistart -b more reliably in the background
Resolves: rhbz#1324340</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.1" date="1461931200">- cannot start multiple "iscsistart -b" in parallel
Resolves: rhbz#1322209</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.2" date="1461931201">- rebuild for z
Resolves: rhbz#1322209</changelog>
</package>
<package pkgid="41f165ab4da51641d88966489c7708879c496ca78180d90ec1f160f378976423" name="dracut-generic" arch="noarch">
  <version epoch="0" ver="004" rel="409.el6_8.2"/>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409" date="1460030400">- don't handle "iscsistart -N" exit value
  start iscsistart -b more reliably in the background
Resolves: rhbz#1324340</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.1" date="1461931200">- cannot start multiple "iscsistart -b" in parallel
Resolves: rhbz#1322209</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.2" date="1461931201">- rebuild for z
Resolves: rhbz#1322209</changelog>
</package>
<package pkgid="17642998741daee2d9092d04400c27d97877a6a44df6502edbe97f21a76836a4" name="dracut-kernel" arch="noarch">
  <version epoch="0" ver="004" rel="409.el6_8.2"/>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409" date="1460030400">- don't handle "iscsistart -N" exit value
  start iscsistart -b more reliably in the background
Resolves: rhbz#1324340</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.1" date="1461931200">- cannot start multiple "iscsistart -b" in parallel
Resolves: rhbz#1322209</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.2" date="1461931201">- rebuild for z
Resolves: rhbz#1322209</changelog>
</package>
<package pkgid="0cd1fb15b22fd47d2c990b1dc95a7f855ff48c09937f1e80bd68dce010bfb6e9" name="dracut-network" arch="noarch">
  <version epoch="0" ver="004" rel="409.el6_8.2"/>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409" date="1460030400">- don't handle "iscsistart -N" exit value
  start iscsistart -b more reliably in the background
Resolves: rhbz#1324340</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.1" date="1461931200">- cannot start multiple "iscsistart -b" in parallel
Resolves: rhbz#1322209</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.2" date="1461931201">- rebuild for z
Resolves: rhbz#1322209</changelog>
</package>
<package pkgid="013a84a8fcfa3cc0e14eea50929788adfeaf218409e5b0d962480af8e36a895b" name="dracut-tools" arch="noarch">
  <version epoch="0" ver="004" rel="409.el6_8.2"/>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409" date="1460030400">- don't handle "iscsistart -N" exit value
  start iscsistart -b more reliably in the background
Resolves: rhbz#1324340</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.1" date="1461931200">- cannot start multiple "iscsistart -b" in parallel
Resolves: rhbz#1322209</changelog>
  <changelog author="Harald Hoyer &lt;harald@redhat.com&gt; - 004-409.2" date="1461931201">- rebuild for z
Resolves: rhbz#1322209</changelog>
</package>
<package pkgid="a3f91a6e8abb6649c176ad4654abf2433136ece32a762652ed98d733474ff2ab" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="10.el6_10"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.7.1-10" date="1579176000">- fixes arbitrary code execution via .gitmodules
  Resolves: CVE-2018-17456</changelog>
</package>
<package pkgid="98189c49bd2e933e3c283a488d54982fc5d600538539434c073c2af64c4f8e1b" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el6_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-4" date="1361880000">- fix CVE-2013-0308</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-4.1" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318252</changelog>
</package>
<package pkgid="6d0468a0928c6487bc078044232e1371c9c049b8e52ea992dce3f8c53a494528" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="9.el6_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-7" date="1475236800">- fixes memory corruption on git shortlog
- add -f option for "git submodule add" to add files even when
  these are included in .gitignore
- improve performance of extremly slow http(s)
- fix cloning using http(s) protocol when redirection is requested
  Resolves: #874659 #1207253 #1237395 #1289984</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="b34c2c7022314573cdc713354dbb516b14e24e3617c991ad8a5567d30179edd7" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="10.el6_10"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.7.1-10" date="1579176000">- fixes arbitrary code execution via .gitmodules
  Resolves: CVE-2018-17456</changelog>
</package>
<package pkgid="8b23b40754fbdfb4cebd38e3bd696c5c39f65879814768a3058a3d5711bfee7d" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el6_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-4" date="1361880000">- fix CVE-2013-0308</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-4.1" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318252</changelog>
</package>
<package pkgid="d353cea62b28beb6d3cf2a1510b11c0d5be2c2f36a3cc42b7c1d7af8608a7cae" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="9.el6_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-7" date="1475236800">- fixes memory corruption on git shortlog
- add -f option for "git submodule add" to add files even when
  these are included in .gitignore
- improve performance of extremly slow http(s)
- fix cloning using http(s) protocol when redirection is requested
  Resolves: #874659 #1207253 #1237395 #1289984</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="7b17558627c71c7bba9990f00f3ef11036845a51dcc01e15db7583a747611449" name="emacs-mercurial" arch="i686">
  <version epoch="0" ver="1.4" rel="5.el6_9"/>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 1.4-3" date="1268395200">- replaced instances of #!/usr/bin/env python with #!/usr/bin/python
  Fixed: #528797</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.4-4" date="1431691200">- Fixed troubles with SSl connection
- Fixed adding of broken symlink when 'copy -A'
- Fixed permissions for */hgk - Thanks to Dave Johanse &lt;davejohansen@gmail.com&gt;
  Resolves: #784079 #928301 #1006457</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.4-5" date="1497528000">- Fixes CVE-2017-9462</changelog>
</package>
<package pkgid="4d37415b35a3a54e006422454b1a089aeb821813c85671268d92e1d9f14b2d52" name="emacs-mercurial-el" arch="i686">
  <version epoch="0" ver="1.4" rel="5.el6_9"/>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 1.4-3" date="1268395200">- replaced instances of #!/usr/bin/env python with #!/usr/bin/python
  Fixed: #528797</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.4-4" date="1431691200">- Fixed troubles with SSl connection
- Fixed adding of broken symlink when 'copy -A'
- Fixed permissions for */hgk - Thanks to Dave Johanse &lt;davejohansen@gmail.com&gt;
  Resolves: #784079 #928301 #1006457</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.4-5" date="1497528000">- Fixes CVE-2017-9462</changelog>
</package>
<package pkgid="3615b8cb6c8d315466be6f524ff5308b3b20b9ab3475f16087bed07ac7aa139b" name="expat" arch="i686">
  <version epoch="0" ver="2.0.1" rel="13.el6_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.0.1-11" date="1335528000">- use symbol version for XML_SetHashSalt (CVE-2012-0876, #816306)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.0.1-12" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.0.1-13" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
</package>
<package pkgid="a6cb13a30fe68020f09d00adc104892c1f5aa1a76a07af92aaf556dccc230aab" name="expat-devel" arch="i686">
  <version epoch="0" ver="2.0.1" rel="13.el6_8"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.0.1-11" date="1335528000">- use symbol version for XML_SetHashSalt (CVE-2012-0876, #816306)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.0.1-12" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.0.1-13" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
</package>
<package pkgid="9f372a788a1bf03b7755d98c83f82834a44537b726a61b15436b4957f360ae06" name="file" arch="i686">
  <version epoch="0" ver="5.04" rel="30.el6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-28" date="1450267200">- fix #1263987 - fix bugs found by coverity in the patch</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-29" date="1451995200">- fix #1284826 - try to read ELF header to detect corrupted one</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-30" date="1455624000">- fix CVE-2014-3538 (unrestricted regular expression matching)</changelog>
</package>
<package pkgid="8d7e30adc6b50822c0dee87f14204d2b7593457c076a506fe61db4259cb80c93" name="file-devel" arch="i686">
  <version epoch="0" ver="5.04" rel="30.el6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-28" date="1450267200">- fix #1263987 - fix bugs found by coverity in the patch</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-29" date="1451995200">- fix #1284826 - try to read ELF header to detect corrupted one</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-30" date="1455624000">- fix CVE-2014-3538 (unrestricted regular expression matching)</changelog>
</package>
<package pkgid="a7a4c50e8cdeed5f18678fa8bba77aabb2c61228a220de13b45e10422866f8d3" name="file-libs" arch="i686">
  <version epoch="0" ver="5.04" rel="30.el6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-28" date="1450267200">- fix #1263987 - fix bugs found by coverity in the patch</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-29" date="1451995200">- fix #1284826 - try to read ELF header to detect corrupted one</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-30" date="1455624000">- fix CVE-2014-3538 (unrestricted regular expression matching)</changelog>
</package>
<package pkgid="9ce564bc11105bf8a14289b9b1841b7fdee4e9181e69636146810e4b9e12c66a" name="file-static" arch="i686">
  <version epoch="0" ver="5.04" rel="30.el6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-28" date="1450267200">- fix #1263987 - fix bugs found by coverity in the patch</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-29" date="1451995200">- fix #1284826 - try to read ELF header to detect corrupted one</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-30" date="1455624000">- fix CVE-2014-3538 (unrestricted regular expression matching)</changelog>
</package>
<package pkgid="82d1fdace438c6d140af17a8f87bbc3ab9ded8aa0c9cffa872c73709c4fab1d1" name="firefox" arch="i686">
  <version epoch="0" ver="38.1.1" rel="1.el6_7"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.0.1-1" date="1431691200">- Update to 38.0.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.0-1" date="1435320000">- Update to 38.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.1-1" date="1438862400">- Update to 38.1.1 ESR</changelog>
</package>
<package pkgid="48fdbdf8e4d14df086d299390ed8b63a1dd9fb70e0cb2bbe42289e4c4a1b61ac" name="firefox" arch="i686">
  <version epoch="0" ver="38.2.0" rel="4.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.0-1" date="1435320000">- Update to 38.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.1-1" date="1438862400">- Update to 38.1.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.2.0-4" date="1438948800">- Update to 38.2.0 ESR</changelog>
</package>
<package pkgid="a836363f257f09014d32234f687732a4c0f9e654036597302e3d89d34074b627" name="firefox" arch="i686">
  <version epoch="0" ver="38.2.1" rel="1.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.1-1" date="1438862400">- Update to 38.1.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.2.0-4" date="1438948800">- Update to 38.2.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.2.1-1" date="1440590400">- Update to 38.2.1 ESR</changelog>
</package>
<package pkgid="48e3de1a511f02c837038dc9526e4c56629253f4c0a6d0c93b09fbba45539735" name="firefox" arch="i686">
  <version epoch="0" ver="38.3.0" rel="2.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.2.0-4" date="1438948800">- Update to 38.2.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.2.1-1" date="1440590400">- Update to 38.2.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.3.0-2" date="1442318400">- Update to 38.3.0 ESR</changelog>
</package>
<package pkgid="872c5a26a9641179ec22171d191c606b055de6cbd9d2ecd4049cc948eb7fc64c" name="firefox" arch="i686">
  <version epoch="0" ver="38.4.0" rel="1.el6_7"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.2.1-1" date="1440590400">- Update to 38.2.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.3.0-2" date="1442318400">- Update to 38.3.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.4.0-1" date="1446120000">- Update to 38.4.0 ESR</changelog>
</package>
<package pkgid="8b3c90d31e4313ae86f3dbbdc21b7214e5c7a1aa87671052ca130f988765fedc" name="firefox" arch="i686">
  <version epoch="0" ver="38.5.0" rel="2.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.3.0-2" date="1442318400">- Update to 38.3.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.4.0-1" date="1446120000">- Update to 38.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.5.0-2" date="1449835200">- Update to 38.5.0 ESR</changelog>
</package>
<package pkgid="cdbb7c8110933e6029aee930a93511e57f674a4e676c5ae1204083a3ba0ed81b" name="firefox" arch="i686">
  <version epoch="0" ver="38.6.0" rel="1.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.4.0-1" date="1446120000">- Update to 38.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.5.0-2" date="1449835200">- Update to 38.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.6.0-1" date="1453377600">- Update to 38.6.0 ESR</changelog>
</package>
<package pkgid="08499f74a2ff6f72526f7d5d6fb399cfcd74b6ae8ecb7dd24fb7f9e92b4427b8" name="firefox" arch="i686">
  <version epoch="0" ver="38.6.1" rel="1.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.6.0-1" date="1453377600">- Update to 38.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.6.0-2" date="1453896000">- Added 'loop.enabled' to default config</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.6.1-1" date="1455192000">- Update to 38.6.1 ESR</changelog>
</package>
<package pkgid="4219a8f74bdb9affde36177d47fe8b5ba65ebd6bb3295bfeed71837799220050" name="firefox" arch="i686">
  <version epoch="0" ver="38.7.0" rel="1.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.6.0-2" date="1453896000">- Added 'loop.enabled' to default config</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 38.6.1-1" date="1455192000">- Update to 38.6.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.7.0-1" date="1457006400">- Update to 38.7.0 ESR</changelog>
</package>
<package pkgid="f8d450d7c4917ad6cbcb888e8e6f2fa18f84ebcf30bb4960a04453daa34abe39" name="firefox" arch="i686">
  <version epoch="0" ver="45.1.0" rel="1.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.0.1-1" date="1459944000">- Update to 45.0.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.0.2-1" date="1460462400">- Update to 45.0.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.1.0-1" date="1461240000">- Update to 45.1.0 ESR</changelog>
</package>
<package pkgid="5181e4204b7f713975e3b48b22543365f007736a9249b17443d398ded41a3e64" name="firefox" arch="i686">
  <version epoch="0" ver="45.2.0" rel="1.el6_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.1.1-1" date="1462363200">- Update to 45.1.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.1.1-2" date="1462881600">- Added fix for mozbz#1270046 - new Samba auth response</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.2.0-1" date="1464955200">- Update to 45.2.0 ESR</changelog>
</package>
<package pkgid="f47a01caf0cef34eb5d2a6edb31f9d86906d52b8deb3b4f5cc79cbcd503da5b1" name="firefox" arch="i686">
  <version epoch="0" ver="45.3.0" rel="1.el6_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.2.0-2" date="1466424000">- Added fix for mozbz#975832, rhbz#1343202</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.2.0-3" date="1468238400">- Added fix for mozbz#256180</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.3.0-1" date="1469620800">- Update to 45.3.0 ESR</changelog>
</package>
<package pkgid="f707ad6cd7b09b48ff4b1919f7f9f4fd2859cb371c283450b2cf4f010fbb7f86" name="firefox" arch="i686">
  <version epoch="0" ver="45.4.0" rel="1.el6_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.2.0-3" date="1468238400">- Added fix for mozbz#256180</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.3.0-1" date="1469620800">- Update to 45.3.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-1" date="1473249600">- Update to 45.4.0 ESR</changelog>
</package>
<package pkgid="930a35ffaaaa27fafb95dce4e7e45cf1991fd6dbaaf20e544a7ca825b28b23bc" name="firefox" arch="i686">
  <version epoch="0" ver="45.5.0" rel="1.el6_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-2" date="1474891200">- Added Laszlo Ersek patch for aarch64 crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-3" date="1477915200">- Added upcoming upstream patches mozbz#1018486</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1478606400">- Update to 45.5.0 ESR</changelog>
</package>
<package pkgid="f03e0653b482f295c95cd751b4a9d85e82e1309ee4125daf3b537ba3f514efc6" name="firefox" arch="i686">
  <version epoch="0" ver="45.5.1" rel="1.el6_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-3" date="1477915200">- Added upcoming upstream patches mozbz#1018486</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1478606400">- Update to 45.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480507200">- Update to 45.5.1 ESR</changelog>
</package>
<package pkgid="d64b021574d5adef0dea64203737609c4fab8d120e67e33ec17c4c880f41258f" name="firefox" arch="i686">
  <version epoch="0" ver="45.6.0" rel="1.el6_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1478606400">- Update to 45.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480507200">- Update to 45.5.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.6.0-1" date="1481457600">- Update to 45.6.0 ESR</changelog>
</package>
<package pkgid="c40e3121e4607e09acc8bba4aa3146a742297335cb2ef0d281fcf4937aa04b71" name="firefox" arch="i686">
  <version epoch="0" ver="45.7.0" rel="1.el6_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.6.0-1" date="1481457600">- Update to 45.6.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-2" date="1484136000">- Enabled ffmpeg &gt; 54.35.1 (rhbz#1330898, mozbz#1263665)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.7.0-1" date="1484827200">- Updated to 45.7.0 (B1)</changelog>
</package>
<package pkgid="13a5085b51a25f77ac34922ad8cc37c6183bdc09d1e69b845541a096d604a843" name="firefox" arch="i686">
  <version epoch="0" ver="45.7.0" rel="2.el6_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-2" date="1484136000">- Enabled ffmpeg &gt; 54.35.1 (rhbz#1330898, mozbz#1263665)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.7.0-1" date="1484827200">- Updated to 45.7.0 (B1)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.7.0-2" date="1486123200">- Enabled ppc/s390 arches (rhbz#1418765)</changelog>
</package>
<package pkgid="3ad7d36bab185466f081fa6bf23a5dfd65dda49d4b79e0acbf9ee88dd6e08ff1" name="firefox" arch="i686">
  <version epoch="0" ver="45.8.0" rel="2.el6_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.7.0-2" date="1486123200">- Enabled ppc/s390 arches (rhbz#1418765)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488456000">- Update to 45.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-2" date="1488801600">- Update to 45.8.0 ESR (B2)</changelog>
</package>
<package pkgid="49e7f0ff9785650d857af6d3a14a5975a41fcfaf412be3badebe9c7ee3d717b8" name="firefox" arch="i686">
  <version epoch="0" ver="52.1.0" rel="2.el6_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1491912000">- Update to 52.1.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.1.0-2" date="1492603200">- Update to 52.1.0 ESR (Build3)</changelog>
</package>
<package pkgid="abe4597ec5e1d5972051d961c2278f4ca0ace5bd506fe20ab21dcdf7057b080c" name="firefox" arch="i686">
  <version epoch="0" ver="52.2.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1491912000">- Update to 52.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.1-1" date="1493985600">- Update to 52.1.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1496923200">- Update to 52.2.0 ESR</changelog>
</package>
<package pkgid="08a111757cf923ec9a076cb91eddfa426e65197f4c7dc5878906ae04c2231008" name="firefox" arch="i686">
  <version epoch="0" ver="52.3.0" rel="3.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1496923200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1502107200">- Fix for rhbz#1470294 - bundling newer libffi for ppc* platforms</changelog>
</package>
<package pkgid="6c8fe24f282e69deb493b438a7825f73e523c9b4ad8a0ba39a1efc7d60702065" name="firefox" arch="i686">
  <version epoch="0" ver="52.4.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1502107200">- Fix for rhbz#1470294 - bundling newer libffi for ppc* platforms</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-4" date="1503662400">- Added fix for rhbz#1451055</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
</package>
<package pkgid="0f6f5df535b0a99473466e27223d8e6acd0cb38be4b7ca5d5dea7230168438e9" name="firefox" arch="i686">
  <version epoch="0" ver="52.5.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-4" date="1503662400">- Added fix for rhbz#1451055</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
</package>
<package pkgid="9e71dc27fea2298deb8b2d4d285f2221def7abf3772c7c3993da937037251d5d" name="firefox" arch="i686">
  <version epoch="0" ver="52.5.1" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
</package>
<package pkgid="5eaee715e80a9dd15bc26733071cca07e4eb56786c5ddc7853c3f33f6ed536dd" name="firefox" arch="i686">
  <version epoch="0" ver="52.6.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.0-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
</package>
<package pkgid="4201d53f3c1a865a056ce4dafaea019acf711a771912664fb02ea4a350fddc60" name="firefox" arch="i686">
  <version epoch="0" ver="52.7.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.0-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
</package>
<package pkgid="fc5b3d8818d9055493251c433d07946942e3c7cd9ad2b604ed70172833bf7864" name="firefox" arch="i686">
  <version epoch="0" ver="52.7.2" rel="1.el6_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.0-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
</package>
<package pkgid="a09fca73677c6fe4c2b12be583ba6c92c7dba6a04d0ddf55b82d8247731509a9" name="firefox" arch="i686">
  <version epoch="0" ver="52.7.3" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
</package>
<package pkgid="b75131c0c26b4e995d2c4784f009bdb10e98f74fa1ccdfcfcd2d191f10b54e0c" name="firefox" arch="i686">
  <version epoch="0" ver="52.8.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1525435200">- Update to 52.8.0 ESR</changelog>
</package>
<package pkgid="52352fe1da4c80f585189ac6340a75ddc8cda3cb01ccc5767690c8d1f93604c4" name="firefox" arch="i686">
  <version epoch="0" ver="60.1.0" rel="5.el6"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-3" date="1529668800">- Updated to 60.1.0 ESR build2</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-4" date="1529841600">- Disabled jemalloc on all second arches</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-5" date="1529928000">- Added mesa-libEGL dependency to gtk3/rhel6</changelog>
</package>
<package pkgid="fc7e928e9c453e79c09e798b2caac48e04658f30ce9e92dbf677d37f223b5b1f" name="firefox" arch="i686">
  <version epoch="0" ver="60.2.0" rel="1.el6"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.1.0-8" date="1534420800">- Fixed homepage and bookmarks (rhbz#1606778)
- Fixed missing file associations in RHEL6 (rhbz#1613565)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.1.0-9" date="1535457600">- Do not set user agent (rhbz#1608065)
- GTK dialogs are localized now (rhbz#1619373)
- JNLP association works again (rhbz#1607457)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.0-1" date="1535716800">- Update to 60.2.0 ESR</changelog>
</package>
<package pkgid="5a70c501ef2c715ba42dfd476980bd937d8ed361b3bf82350ec58c9dae40c048" name="firefox" arch="i686">
  <version epoch="0" ver="60.2.1" rel="1.el6"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.1.0-9" date="1535457600">- Do not set user agent (rhbz#1608065)
- GTK dialogs are localized now (rhbz#1619373)
- JNLP association works again (rhbz#1607457)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.0-1" date="1535716800">- Update to 60.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.1-1" date="1537790400">- Update to 60.2.1 ESR</changelog>
</package>
<package pkgid="1411366e742c9d32691a57851fac7eae3416623c65060256b2215f43fb56eb78" name="firefox" arch="i686">
  <version epoch="0" ver="60.2.2" rel="1.el6"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.0-1" date="1535716800">- Update to 60.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.1-1" date="1537790400">- Update to 60.2.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.2-1" date="1538481600">- Update to 60.2.2 ESR</changelog>
</package>
<package pkgid="ede778eb071ce9650c5042c641e0759b5d32660591eb490b128a86fe88ee6db8" name="firefox" arch="i686">
  <version epoch="0" ver="60.3.0" rel="1.el6"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.2-1" date="1538481600">- Update to 60.2.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.2-2" date="1539172800">- Added patch for rhbz#1633932</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.3.0-1" date="1539950400">- Update to 60.3.0 ESR</changelog>
</package>
<package pkgid="7e6a8856fa03774af2ede19dbb0e0e2ca404150ac76ce5cfec37b42bd0131003" name="firefox" arch="i686">
  <version epoch="0" ver="60.4.0" rel="1.el6"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.3.0-1" date="1539950400">- Update to 60.3.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.3.0-2" date="1543924800">- Added firefox-gnome-shell-extension</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.4.0-1" date="1544011200">- Update to 60.4.0 ESR</changelog>
</package>
<package pkgid="c249145e8254b9f684b3ad1c923e23d371deb91ce64390a5a4a8a73a997c30e6" name="firefox" arch="i686">
  <version epoch="0" ver="60.5.0" rel="2.el6"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.4.0-3" date="1547121600">- Fixing fontconfig warnings (rhbz#1601475)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.5.0-1" date="1548158400">- Updated to 60.5.0 ESR build1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.5.0-2" date="1548417600">- Updated to 60.5.0 ESR build2</changelog>
</package>
<package pkgid="8bfd2157ce8a1ab01f51be795ec16e763cf09b3b56142705e67cf0ddd0a01d9c" name="firefox" arch="i686">
  <version epoch="0" ver="60.5.1" rel="1.el6_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.5.0-2" date="1548417600">- Updated to 60.5.0 ESR build2</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.5.0-3" date="1549454400">- Added fix for rhbz#1672424 - Firefox crashes on NFS drives.</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.5.1-1" date="1550059200">- Update to 60.5.1 ESR</changelog>
</package>
<package pkgid="6e7308e77335ae44c84d98147143d202fbfcffadbfa662aed531acf62f0f4db3" name="firefox" arch="i686">
  <version epoch="0" ver="60.6.0" rel="3.el6_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.6.0-1" date="1552478400">- Update to 60.6.0 ESR (Build 1)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.6.0-2" date="1552564800">- Update to 60.6.0 ESR (Build 2)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.6.0-3" date="1552651200">- Added Google API keys (mozbz#1531176)</changelog>
</package>
<package pkgid="34a5d43d2f9fd082108b1f6e5494390bae27763b4bf1d27300d81a43265e5736" name="firefox" arch="i686">
  <version epoch="0" ver="60.6.1" rel="1.el6_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.6.0-2" date="1552564800">- Update to 60.6.0 ESR (Build 2)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.6.0-3" date="1552651200">- Added Google API keys (mozbz#1531176)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.6.1-1" date="1553515200">- Update to 60.6.1 ESR (Build 1)</changelog>
</package>
<package pkgid="f9b6070513611a29f87cbaee4f54f91eb13ca6ed35c086d2896078e056b46c0c" name="firefox" arch="i686">
  <version epoch="0" ver="60.7.0" rel="1.el6_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.6.2-1" date="1557230400">- Updated to 60.6.2 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.6.3-1" date="1557403200">- Updated to 60.6.3 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.7.0-1" date="1557921600">- Updated to 60.7.0 ESR</changelog>
</package>
<package pkgid="5762907e1106ae6354abc19222c247d1aedf8819e1e65e692af50549da91050a" name="firefox" arch="i686">
  <version epoch="0" ver="60.7.2" rel="1.el6_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.7.0-1" date="1557921600">- Updated to 60.7.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.7.1-1" date="1560945600">- Updated to 60.7.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.7.2-1" date="1561032000">- Update to 60.7.2 ESR</changelog>
</package>
<package pkgid="2ab292bd861025002d2e6cf98cc65bec3154d5654cc07b18be7f005d43d6a3ac" name="firefox" arch="i686">
  <version epoch="0" ver="60.8.0" rel="1.el6_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.7.0-1" date="1557921600">- Updated to 60.7.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.7.1-1" date="1560945600">- Updated to 60.7.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.7.2-3" date="1561032000">- Update to 60.7.2 ESR</changelog>
</package>
<package pkgid="18b7756ef97146864408131e251fc019c3d636f163f0a6abd317d9e5ae088605" name="firefox" arch="i686">
  <version epoch="0" ver="60.9.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.7.2-3" date="1561032000">- Update to 60.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.8.0-1" date="1562155200">- Update to 60.8.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.9.0-1" date="1567425600">- Update to 60.9.0 ESR</changelog>
</package>
<package pkgid="1804805bd0e916dcf89e3589374aaf5d1f06020b57373970e2ad0e3f3f01c681" name="firefox" arch="i686">
  <version epoch="0" ver="68.10.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1589198400">- Added s390x specific patches</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1590753600">- Update to 68.9.0 build1
- Added patch for pipewire 0.3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1593172800">- Update to 68.10.0 build1</changelog>
</package>
<package pkgid="17c09a311a7b229d3d205f635e6753b17d6da51e0fbc2f99264d5ca290d65323" name="firefox" arch="i686">
  <version epoch="0" ver="68.11.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1590753600">- Update to 68.9.0 build1
- Added patch for pipewire 0.3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1593172800">- Update to 68.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1595505600">- Update to 68.11.0 build1</changelog>
</package>
<package pkgid="023f3bb22b3cfba3d49d8262c6c3f3da0bfa7d1900c684eee1b0a343a568bfa2" name="firefox" arch="i686">
  <version epoch="0" ver="68.12.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1593172800">- Update to 68.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1595505600">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1597924800">- Update to 68.12.0 build1</changelog>
</package>
<package pkgid="e2732af72e80e34ad78f7ff963c9f33d9ecccb956047d7fdeaa722cdb62360a7" name="firefox" arch="i686">
  <version epoch="0" ver="68.2.0" rel="4.el6_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 68.2.0-2" date="1571659200">- Rebuild</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 68.2.0-3" date="1571832000">- Rebuild</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 68.2.0-4" date="1571918400">- Added patch for TLS 1.3 support.</changelog>
</package>
<package pkgid="7feaa86c2116e03b1ff4f4fc7235405d8eaf1779d2ef6f508b6468785f23bdfb" name="firefox" arch="i686">
  <version epoch="0" ver="68.3.0" rel="1.el6_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 68.2.0-3" date="1571832000">- Rebuild</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 68.2.0-4" date="1571918400">- Added patch for TLS 1.3 support.</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 68.3.0-1" date="1574856000">- Update to 68.3.0 ESR</changelog>
</package>
<package pkgid="b8ffce2947a42087edb763eb295b2ce65cb83ee7bf1da62113cebef59aa510a7" name="firefox" arch="i686">
  <version epoch="0" ver="68.4.1" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1576670400">- Fix for wrong intl.accept_lang when using non en-us langpack</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1578052800">- Update to 68.4.0esr build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1578484800">- Update to 68.4.1esr build1</changelog>
</package>
<package pkgid="eaa61eaccc640698a594708a192d899872c14fa31adef4cf6198d32e4c5abe0e" name="firefox" arch="i686">
  <version epoch="0" ver="68.5.0" rel="2.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1578484800">- Update to 68.4.1esr build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1580904000">- Update to 68.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1581076800">- Update to 68.5.0 build2</changelog>
</package>
<package pkgid="42e3aa25d642495bf090dea0eb1deed36d4d7f308b62a6078d755ce3ebdb3b51" name="firefox" arch="i686">
  <version epoch="0" ver="68.6.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1581076800">- Update to 68.5.0 build2</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 68.5.0-3" date="1582545600">- Added fix for rhbz#1805667
- Enabled mzbz@1170092 - Firefox prefs at /etc</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1583323200">- Update to 68.6.0 build1</changelog>
</package>
<package pkgid="8ff4339baa2182e770b13ac184fd96c9931a1224cf68a4e9ed922a18184f0ced" name="firefox" arch="i686">
  <version epoch="0" ver="68.6.1" rel="1.el6_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 68.5.0-3" date="1582545600">- Added fix for rhbz#1805667
- Enabled mzbz@1170092 - Firefox prefs at /etc</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1583323200">- Update to 68.6.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.6.1-1" date="1586174400">- Update to 68.6.1 ESR</changelog>
</package>
<package pkgid="ad728bcd2c4f76fcf472c16c6a85db811b9c7f71628cc434bd804e0100a5de05" name="firefox" arch="i686">
  <version epoch="0" ver="68.7.0" rel="2.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1583323200">- Update to 68.6.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.6.1-1" date="1586174400">- Update to 68.6.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.7.0-2" date="1586260800">- Update to 68.7.0 build3</changelog>
</package>
<package pkgid="ff969ec40b02b9b409cc49bc985aa45bcd464c72e5edee8463141ea0a97840b4" name="firefox" arch="i686">
  <version epoch="0" ver="68.8.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.7.0-2" date="1586260800">- Update to 68.7.0 build3</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 68.7.0-3" date="1587643200">- Added fix for rhbz#1821418</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1588161600">- Update to 68.8.0 build1</changelog>
</package>
<package pkgid="c8492bbae72bdea59eb209ed09fdce0979d34a4510a76da61befda5fda11146d" name="firefox" arch="i686">
  <version epoch="0" ver="68.9.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1588161600">- Update to 68.8.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1589198400">- Added s390x specific patches</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1590753600">- Update to 68.9.0 build1
- Added patch for pipewire 0.3</changelog>
</package>
<package pkgid="9aa64152a903a27623425043682949073834c68188e5a2f177ad87cbafbc645c" name="firefox" arch="i686">
  <version epoch="0" ver="78.3.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1595592000">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.0-3" date="1597752000">- Update to 78.2.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1600430400">- Update to 78.3.0 build1</changelog>
</package>
<package pkgid="2ba2f4ee0d42c5c8f1f5814a9c6a21354292c95a1abf09b4ae6c91018cf49e0e" name="firefox" arch="i686">
  <version epoch="0" ver="78.4.0" rel="2.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.0-3" date="1597752000">- Update to 78.2.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1600430400">- Update to 78.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-2" date="1602849600">- Update to 78.4.0 build2</changelog>
</package>
<package pkgid="d7a694205e09cdeb988f2f1dda108aa3093beb84ee59a0f4561893f0fba1d5cd" name="firefox" arch="i686">
  <version epoch="0" ver="78.4.1" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-2" date="1603972800">- Enable addon sideloading</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-3" date="1605009600">- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading</changelog>
  <changelog author="erack@redhat.com - 78.4.1-1" date="1605009601">- Update to 78.4.1
- Filtering nss/nspr libs</changelog>
</package>
<package pkgid="1360465ffe212a59eec9eaaac5f0a255aa23eef3f5743794bc49bfb8683ad898" name="firefox" arch="i686">
  <version epoch="0" ver="78.5.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-3" date="1605009600">- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading</changelog>
  <changelog author="erack@redhat.com - 78.4.1-1" date="1605009601">- Update to 78.4.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build1</changelog>
</package>
<package pkgid="b8720d9c81122f98b936d7f7d660f9adbf3b5f45661a732b7d2a43c9d72ff855" name="foomatic" arch="i686">
  <version epoch="0" ver="4.0.4" rel="5.el6_7"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.4-3" date="1371211200">- Too few arguments for format in a debugging string (bug #726385).
- Fixed perl installation locations for build (bug #661770).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.4-4" date="1432900800">- Prevent foomatic-rip overrun (bug #1214534).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.4-5" date="1453464000">- Also consider back tick and semicolon as illegal shell escape characters.
- CVE-2015-8327, CVE-2015-8560</changelog>
</package>
<package pkgid="7732bc91aaaf11471ed954c0737113b93d7ef355fbc71ca4326048b69c94a653" name="freeradius" arch="i686">
  <version epoch="0" ver="2.2.6" rel="7.el6_9"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-5" date="1439812800">- Fix EAP client authentication with TLS 1.2
  Resolves: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-6" date="1441886400">- Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
  Related: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-7" date="1499774400">- Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                        rad_coalesce()
- Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                        due to improper output buffer size check in make_secret()
- Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv() 
- Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                        fr_dhcp_decode()
- Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                        fr_dhcp_decode_options()
- Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63</changelog>
</package>
<package pkgid="b909674e2c1d8c1ca636b4561e4c714c29191bbc31147a7af8d0c54bac2c9675" name="freeradius-krb5" arch="i686">
  <version epoch="0" ver="2.2.6" rel="7.el6_9"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-5" date="1439812800">- Fix EAP client authentication with TLS 1.2
  Resolves: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-6" date="1441886400">- Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
  Related: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-7" date="1499774400">- Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                        rad_coalesce()
- Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                        due to improper output buffer size check in make_secret()
- Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv() 
- Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                        fr_dhcp_decode()
- Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                        fr_dhcp_decode_options()
- Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63</changelog>
</package>
<package pkgid="9db1fa384493446e7ef6af217f7b949b6b116ddef4ac2c276ad8b9d38ab2df76" name="freeradius-ldap" arch="i686">
  <version epoch="0" ver="2.2.6" rel="7.el6_9"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-5" date="1439812800">- Fix EAP client authentication with TLS 1.2
  Resolves: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-6" date="1441886400">- Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
  Related: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-7" date="1499774400">- Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                        rad_coalesce()
- Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                        due to improper output buffer size check in make_secret()
- Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv() 
- Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                        fr_dhcp_decode()
- Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                        fr_dhcp_decode_options()
- Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63</changelog>
</package>
<package pkgid="e5352a6a8736a87b9b6bd796749ffee083a9242500a2a2210678611d0057b521" name="freeradius-mysql" arch="i686">
  <version epoch="0" ver="2.2.6" rel="7.el6_9"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-5" date="1439812800">- Fix EAP client authentication with TLS 1.2
  Resolves: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-6" date="1441886400">- Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
  Related: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-7" date="1499774400">- Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                        rad_coalesce()
- Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                        due to improper output buffer size check in make_secret()
- Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv() 
- Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                        fr_dhcp_decode()
- Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                        fr_dhcp_decode_options()
- Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63</changelog>
</package>
<package pkgid="1ed319fee60103013eb655d20696747ab16d17b18018bd67b7fa7817e3fa3db2" name="freeradius-perl" arch="i686">
  <version epoch="0" ver="2.2.6" rel="7.el6_9"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-5" date="1439812800">- Fix EAP client authentication with TLS 1.2
  Resolves: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-6" date="1441886400">- Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
  Related: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-7" date="1499774400">- Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                        rad_coalesce()
- Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                        due to improper output buffer size check in make_secret()
- Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv() 
- Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                        fr_dhcp_decode()
- Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                        fr_dhcp_decode_options()
- Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63</changelog>
</package>
<package pkgid="819d6d569ae175f15a218f0c22503c021c8588d01f5ad74c0aea26e9bfd3cc1c" name="freeradius-postgresql" arch="i686">
  <version epoch="0" ver="2.2.6" rel="7.el6_9"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-5" date="1439812800">- Fix EAP client authentication with TLS 1.2
  Resolves: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-6" date="1441886400">- Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
  Related: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-7" date="1499774400">- Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                        rad_coalesce()
- Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                        due to improper output buffer size check in make_secret()
- Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv() 
- Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                        fr_dhcp_decode()
- Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                        fr_dhcp_decode_options()
- Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63</changelog>
</package>
<package pkgid="407888fe6c67554ad0962e24fdf9a55bbad19bcd7e7afd1e1bb186dd76e175da" name="freeradius-python" arch="i686">
  <version epoch="0" ver="2.2.6" rel="7.el6_9"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-5" date="1439812800">- Fix EAP client authentication with TLS 1.2
  Resolves: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-6" date="1441886400">- Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
  Related: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-7" date="1499774400">- Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                        rad_coalesce()
- Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                        due to improper output buffer size check in make_secret()
- Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv() 
- Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                        fr_dhcp_decode()
- Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                        fr_dhcp_decode_options()
- Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63</changelog>
</package>
<package pkgid="4eb75ca5cbc241714e910607ad3ba57262dc6320c2d7f553678f00dc3a21d2ca" name="freeradius-unixODBC" arch="i686">
  <version epoch="0" ver="2.2.6" rel="7.el6_9"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-5" date="1439812800">- Fix EAP client authentication with TLS 1.2
  Resolves: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-6" date="1441886400">- Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
  Related: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-7" date="1499774400">- Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                        rad_coalesce()
- Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                        due to improper output buffer size check in make_secret()
- Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv() 
- Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                        fr_dhcp_decode()
- Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                        fr_dhcp_decode_options()
- Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63</changelog>
</package>
<package pkgid="9253defed9b20c2786ea4f90948204744059b15e15bde64a078e1d431cbee886" name="freeradius-utils" arch="i686">
  <version epoch="0" ver="2.2.6" rel="7.el6_9"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-5" date="1439812800">- Fix EAP client authentication with TLS 1.2
  Resolves: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-6" date="1441886400">- Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
  Related: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-7" date="1499774400">- Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                        rad_coalesce()
- Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                        due to improper output buffer size check in make_secret()
- Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv() 
- Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                        fr_dhcp_decode()
- Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                        fr_dhcp_decode_options()
- Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63</changelog>
</package>
<package pkgid="41b4e9d74d9563db5d64206664f105ff94cf79b306af69806f4901ced9094df2" name="freerdp" arch="i686">
  <version epoch="0" ver="1.0.2" rel="7.el6_10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-5" date="1457352000">- Fix crash if requested bitmap isn't in cache (#1311171)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-6" date="1517486400">- Add FIPS mode support (#1347920)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-7" date="1591012800">- CVE-2020-13398: Fix out-of-bounds write in crypto.c (#1841980)</changelog>
</package>
<package pkgid="eacfd27013b2bfdf41cd621abf469ac0aef2df7ad612db6da69bc6132b652730" name="freerdp-devel" arch="i686">
  <version epoch="0" ver="1.0.2" rel="7.el6_10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-5" date="1457352000">- Fix crash if requested bitmap isn't in cache (#1311171)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-6" date="1517486400">- Add FIPS mode support (#1347920)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-7" date="1591012800">- CVE-2020-13398: Fix out-of-bounds write in crypto.c (#1841980)</changelog>
</package>
<package pkgid="a5baa62e16352b5b2ecd546ee16daf3567c42ef094f83f7f466cc12fd2a8c4f9" name="freerdp-libs" arch="i686">
  <version epoch="0" ver="1.0.2" rel="7.el6_10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-5" date="1457352000">- Fix crash if requested bitmap isn't in cache (#1311171)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-6" date="1517486400">- Add FIPS mode support (#1347920)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-7" date="1591012800">- CVE-2020-13398: Fix out-of-bounds write in crypto.c (#1841980)</changelog>
</package>
<package pkgid="3eb480de66ea0e120ca561b2e5e65bbfc17ba3c4530c4101c4cdb7c07bafe763" name="freerdp-plugins" arch="i686">
  <version epoch="0" ver="1.0.2" rel="7.el6_10"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-5" date="1457352000">- Fix crash if requested bitmap isn't in cache (#1311171)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-6" date="1517486400">- Add FIPS mode support (#1347920)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-7" date="1591012800">- CVE-2020-13398: Fix out-of-bounds write in crypto.c (#1841980)</changelog>
</package>
<package pkgid="77703831c5562ac717a917552eea79e91f347d95dcb199859225515c94320c97" name="freetype" arch="i686">
  <version epoch="0" ver="2.3.11" rel="19.el6_10"/>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.3.11-17" date="1450180800">- Fix computation of size of rasterization buffer
- Resolves: #1154625</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.3.11-18" date="1574769600">- Fix potential buffer overflow
- Resolves: #1758402</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.3.11-19" date="1575460800">- Fix potential buffer overflow
- Resolves: #1767863</changelog>
</package>
<package pkgid="eb6b87edd988f7e1e7944864bdebb0113abc49f23995fb9d30ab29a16213daa9" name="freetype-demos" arch="i686">
  <version epoch="0" ver="2.3.11" rel="19.el6_10"/>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.3.11-17" date="1450180800">- Fix computation of size of rasterization buffer
- Resolves: #1154625</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.3.11-18" date="1574769600">- Fix potential buffer overflow
- Resolves: #1758402</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.3.11-19" date="1575460800">- Fix potential buffer overflow
- Resolves: #1767863</changelog>
</package>
<package pkgid="6d7fd44af78ce088694751c24e283bdd9341945079d176925056be232849226d" name="freetype-devel" arch="i686">
  <version epoch="0" ver="2.3.11" rel="19.el6_10"/>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.3.11-17" date="1450180800">- Fix computation of size of rasterization buffer
- Resolves: #1154625</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.3.11-18" date="1574769600">- Fix potential buffer overflow
- Resolves: #1758402</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.3.11-19" date="1575460800">- Fix potential buffer overflow
- Resolves: #1767863</changelog>
</package>
<package pkgid="1189d54bcf65fb05f5854c6b9743c56db70605c403201ea9bd1e6c7062e9914a" name="gdk-pixbuf2" arch="i686">
  <version epoch="0" ver="2.24.1" rel="6.el6_7"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.24.1-4" date="1403006400">- Use source archive with correct URL
- Resolves: #1103734</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.24.1-5" date="1406116800">- Don't list content of non-existing directories in update-gdk-pixbuf-loaders
- Resolves: #1119743</changelog>
  <changelog author="Benjamin Otte &lt;otte@redhat.com&gt; - 2.24.1-6" date="1439899200">- Fix CVE 2015-4491
- Resolves #1253210</changelog>
</package>
<package pkgid="b81de2e03e8c4620acde593ae42f5e73eb970a4aae8e229f80e3b17580295fd5" name="gdk-pixbuf2-devel" arch="i686">
  <version epoch="0" ver="2.24.1" rel="6.el6_7"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.24.1-4" date="1403006400">- Use source archive with correct URL
- Resolves: #1103734</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.24.1-5" date="1406116800">- Don't list content of non-existing directories in update-gdk-pixbuf-loaders
- Resolves: #1119743</changelog>
  <changelog author="Benjamin Otte &lt;otte@redhat.com&gt; - 2.24.1-6" date="1439899200">- Fix CVE 2015-4491
- Resolves #1253210</changelog>
</package>
<package pkgid="ba7ab42de9bd6463b1cb8ff35d0211533ce9c0618b2699cce0b4b5d0544ac452" name="ghostscript" arch="i686">
  <version epoch="0" ver="8.70" rel="21.el6_8.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-20" date="1424433600">- Applied patch from upstream to fix memory handling issue that could
  lead to crashes (bug #1105520).
- Improved support for PDF/A from upstream (bug #1060026).
- Back-ported patch to process embedded files as a portable collection
  only if there is a /Collection attribute (bug #1027534).
- Back-ported patch to preserve invisible PDF text in pdfwrite (bug #994452).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-21" date="1424433601">- Removed patch backup file from payload (bug #1027534).</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-21_1" date="1478520000">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
</package>
<package pkgid="edd23ed3c5c3160501c57a020fb028d50e6d96c10a9e6e99708696d5cd263edc" name="ghostscript" arch="i686">
  <version epoch="0" ver="8.70" rel="23.el6_9.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23" date="1485864000">- Fix for regression caused by previous CVE fixes (bug #1410260)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23.el6_9.1" date="1493899200">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23.el6_9.2" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
</package>
<package pkgid="19129067bd969ead4890e0d7385f09a971b91ca103df9f06c6250cfe105a0347" name="ghostscript" arch="i686">
  <version epoch="0" ver="8.70" rel="24.el6_10.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-24" date="1493899200">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 8.70-24.el6_10.1" date="1541678400">- Resolves: #1641124 - CVE-2018-16509 ghostscript: /invalidaccess bypass after failed restore</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 8.70-24.el6_10.2" date="1542974400">- It was found that the fix for CVE-2018-16509 was not complete, the missing
  pieces added into ghostscript-CVE-2018-16509.patch</changelog>
</package>
<package pkgid="a579cf7eb48b385dd1a0452b986086958d69c0c46973c1e41b02d8963c25d34b" name="ghostscript-devel" arch="i686">
  <version epoch="0" ver="8.70" rel="21.el6_8.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-20" date="1424433600">- Applied patch from upstream to fix memory handling issue that could
  lead to crashes (bug #1105520).
- Improved support for PDF/A from upstream (bug #1060026).
- Back-ported patch to process embedded files as a portable collection
  only if there is a /Collection attribute (bug #1027534).
- Back-ported patch to preserve invisible PDF text in pdfwrite (bug #994452).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-21" date="1424433601">- Removed patch backup file from payload (bug #1027534).</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-21_1" date="1478520000">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
</package>
<package pkgid="76c92134d302df9ecbb0d6b39a6d465823ddafbc64c785d4563eb4ded2a5e95a" name="ghostscript-devel" arch="i686">
  <version epoch="0" ver="8.70" rel="23.el6_9.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23" date="1485864000">- Fix for regression caused by previous CVE fixes (bug #1410260)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23.el6_9.1" date="1493899200">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23.el6_9.2" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
</package>
<package pkgid="e6d50f05d18c2768306b1daa02c4639bff52828e0954b9b359d92e8aa0771390" name="ghostscript-devel" arch="i686">
  <version epoch="0" ver="8.70" rel="24.el6_10.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-24" date="1493899200">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 8.70-24.el6_10.1" date="1541678400">- Resolves: #1641124 - CVE-2018-16509 ghostscript: /invalidaccess bypass after failed restore</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 8.70-24.el6_10.2" date="1542974400">- It was found that the fix for CVE-2018-16509 was not complete, the missing
  pieces added into ghostscript-CVE-2018-16509.patch</changelog>
</package>
<package pkgid="db56d4095dbf263e0b0e7ee4e7bccb99ed2ef0f8be3f4ef379dd2daecc2bf225" name="ghostscript-doc" arch="i686">
  <version epoch="0" ver="8.70" rel="21.el6_8.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-20" date="1424433600">- Applied patch from upstream to fix memory handling issue that could
  lead to crashes (bug #1105520).
- Improved support for PDF/A from upstream (bug #1060026).
- Back-ported patch to process embedded files as a portable collection
  only if there is a /Collection attribute (bug #1027534).
- Back-ported patch to preserve invisible PDF text in pdfwrite (bug #994452).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-21" date="1424433601">- Removed patch backup file from payload (bug #1027534).</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-21_1" date="1478520000">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
</package>
<package pkgid="dc6c15627a769c6e2e93d6df3a762eeace7a09bbb4c2ce21e4bcbc0c39f05de0" name="ghostscript-doc" arch="i686">
  <version epoch="0" ver="8.70" rel="23.el6_9.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23" date="1485864000">- Fix for regression caused by previous CVE fixes (bug #1410260)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23.el6_9.1" date="1493899200">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23.el6_9.2" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
</package>
<package pkgid="d6623d1e910f45b12d6902219879510e051c9660047ec6cff202617c0b3f249b" name="ghostscript-doc" arch="i686">
  <version epoch="0" ver="8.70" rel="24.el6_10.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-24" date="1493899200">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 8.70-24.el6_10.1" date="1541678400">- Resolves: #1641124 - CVE-2018-16509 ghostscript: /invalidaccess bypass after failed restore</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 8.70-24.el6_10.2" date="1542974400">- It was found that the fix for CVE-2018-16509 was not complete, the missing
  pieces added into ghostscript-CVE-2018-16509.patch</changelog>
</package>
<package pkgid="f8a22e9045481d82e23ed402abbbdbef2640acc5f04543b61f54c7d2c14085b8" name="ghostscript-gtk" arch="i686">
  <version epoch="0" ver="8.70" rel="21.el6_8.1"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-20" date="1424433600">- Applied patch from upstream to fix memory handling issue that could
  lead to crashes (bug #1105520).
- Improved support for PDF/A from upstream (bug #1060026).
- Back-ported patch to process embedded files as a portable collection
  only if there is a /Collection attribute (bug #1027534).
- Back-ported patch to preserve invisible PDF text in pdfwrite (bug #994452).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-21" date="1424433601">- Removed patch backup file from payload (bug #1027534).</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-21_1" date="1478520000">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
</package>
<package pkgid="68e50d81c6845d573e8fcdb7703d263d20028ad06a725a09058855aa282ca54e" name="ghostscript-gtk" arch="i686">
  <version epoch="0" ver="8.70" rel="23.el6_9.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23" date="1485864000">- Fix for regression caused by previous CVE fixes (bug #1410260)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23.el6_9.1" date="1493899200">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23.el6_9.2" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
</package>
<package pkgid="134e29149791bc6fb66574cdc78f2d63e2ecbc3fe9eee0eb2cc6d946809485de" name="ghostscript-gtk" arch="i686">
  <version epoch="0" ver="8.70" rel="24.el6_10.2"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-24" date="1493899200">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 8.70-24.el6_10.1" date="1541678400">- Resolves: #1641124 - CVE-2018-16509 ghostscript: /invalidaccess bypass after failed restore</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 8.70-24.el6_10.2" date="1542974400">- It was found that the fix for CVE-2018-16509 was not complete, the missing
  pieces added into ghostscript-CVE-2018-16509.patch</changelog>
</package>
<package pkgid="160ed2dd5170d07ddabf6a7fd7f06b74f4861a02c3565c06f1958fcca8c0b0d4" name="git" arch="i686">
  <version epoch="0" ver="1.7.1" rel="10.el6_10"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.7.1-10" date="1579176000">- fixes arbitrary code execution via .gitmodules
  Resolves: CVE-2018-17456</changelog>
</package>
<package pkgid="135e78e3fe16cd7b203062014ee5d20aeaff0474f4937001d367d35963515a04" name="git" arch="i686">
  <version epoch="0" ver="1.7.1" rel="4.el6_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-4" date="1361880000">- fix CVE-2013-0308</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-4.1" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318252</changelog>
</package>
<package pkgid="5d434593fee1e7074f853a9a48f0d2d2a1b9c7a534b7ef27bd19343d97c9b6c9" name="git" arch="i686">
  <version epoch="0" ver="1.7.1" rel="9.el6_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-7" date="1475236800">- fixes memory corruption on git shortlog
- add -f option for "git submodule add" to add files even when
  these are included in .gitignore
- improve performance of extremly slow http(s)
- fix cloning using http(s) protocol when redirection is requested
  Resolves: #874659 #1207253 #1237395 #1289984</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="3c2d43ecd8da11d50260f94bb334b0dc44d9457a30eed7ef6901791baa78b61e" name="git-all" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="10.el6_10"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.7.1-10" date="1579176000">- fixes arbitrary code execution via .gitmodules
  Resolves: CVE-2018-17456</changelog>
</package>
<package pkgid="f68b08935aa1c391cdb17597fd11199471383bdf6ad2b9ae96f3589529a62050" name="git-all" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el6_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-4" date="1361880000">- fix CVE-2013-0308</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-4.1" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318252</changelog>
</package>
<package pkgid="f57299c2664c0f172ac8c60ab6bb031f94aa4f0182a8597b997090fa5478ae4f" name="git-all" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="9.el6_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-7" date="1475236800">- fixes memory corruption on git shortlog
- add -f option for "git submodule add" to add files even when
  these are included in .gitignore
- improve performance of extremly slow http(s)
- fix cloning using http(s) protocol when redirection is requested
  Resolves: #874659 #1207253 #1237395 #1289984</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="b8e082a5c273a8340ff1d8ae92ab732a755e57da3cbd67e9d0d998a5a96f8e24" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="10.el6_10"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.7.1-10" date="1579176000">- fixes arbitrary code execution via .gitmodules
  Resolves: CVE-2018-17456</changelog>
</package>
<package pkgid="b535e8e8cfc94767a1311b87255ec69137bb773e581af25ae2b5cf985ea75b6c" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el6_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-4" date="1361880000">- fix CVE-2013-0308</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-4.1" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318252</changelog>
</package>
<package pkgid="7d523d7dae6efd912fbe112c2fb6c626db4c7de003e8385b2fcee10b64927288" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="9.el6_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-7" date="1475236800">- fixes memory corruption on git shortlog
- add -f option for "git submodule add" to add files even when
  these are included in .gitignore
- improve performance of extremly slow http(s)
- fix cloning using http(s) protocol when redirection is requested
  Resolves: #874659 #1207253 #1237395 #1289984</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="12f436992543d6daa2834ec7fd4f5a5a6d5670a044b86960f785ee787e311d2e" name="git-daemon" arch="i686">
  <version epoch="0" ver="1.7.1" rel="10.el6_10"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.7.1-10" date="1579176000">- fixes arbitrary code execution via .gitmodules
  Resolves: CVE-2018-17456</changelog>
</package>
<package pkgid="38213e378697facd629891357a1120fe5608d8413d4997803568aefec95f2d21" name="git-daemon" arch="i686">
  <version epoch="0" ver="1.7.1" rel="4.el6_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-4" date="1361880000">- fix CVE-2013-0308</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-4.1" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318252</changelog>
</package>
<package pkgid="80f136c28a3520bc453459829023c4ff1767dc031b25d87aaa38803f613d3730" name="git-daemon" arch="i686">
  <version epoch="0" ver="1.7.1" rel="9.el6_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-7" date="1475236800">- fixes memory corruption on git shortlog
- add -f option for "git submodule add" to add files even when
  these are included in .gitignore
- improve performance of extremly slow http(s)
- fix cloning using http(s) protocol when redirection is requested
  Resolves: #874659 #1207253 #1237395 #1289984</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="98bf71aa3ea11db0b4e173676775aca8fe26029da4b73fd9180d38be2827cb23" name="git-email" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="10.el6_10"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.7.1-10" date="1579176000">- fixes arbitrary code execution via .gitmodules
  Resolves: CVE-2018-17456</changelog>
</package>
<package pkgid="25fad0978331fb1899505014ac031cda2425574887c13affd7b8c0e7b318cac9" name="git-email" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el6_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-4" date="1361880000">- fix CVE-2013-0308</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-4.1" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318252</changelog>
</package>
<package pkgid="2f44f1162208c93efa13ca52caef5d27a33d3b5b022b02500983ed475831fa52" name="git-email" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="9.el6_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-7" date="1475236800">- fixes memory corruption on git shortlog
- add -f option for "git submodule add" to add files even when
  these are included in .gitignore
- improve performance of extremly slow http(s)
- fix cloning using http(s) protocol when redirection is requested
  Resolves: #874659 #1207253 #1237395 #1289984</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="a2d8cc8bb16834ee5002b88443b5546f636beb65b8c5d1a2fb024aa065b875b4" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="10.el6_10"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.7.1-10" date="1579176000">- fixes arbitrary code execution via .gitmodules
  Resolves: CVE-2018-17456</changelog>
</package>
<package pkgid="9d1dc58b40b9f1f15376cf5f3a2c6365d14ce32c4ef15d247c982dc8ea42c203" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el6_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-4" date="1361880000">- fix CVE-2013-0308</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-4.1" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318252</changelog>
</package>
<package pkgid="ff376cf7dc5f042c35046d308767d7454f2e146741eb7a5e1c4add5600ffc1f3" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="9.el6_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-7" date="1475236800">- fixes memory corruption on git shortlog
- add -f option for "git submodule add" to add files even when
  these are included in .gitignore
- improve performance of extremly slow http(s)
- fix cloning using http(s) protocol when redirection is requested
  Resolves: #874659 #1207253 #1237395 #1289984</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="0f507a011aad8db7cff3e86620b31781d5e519481e518437a185f766dade76cc" name="git-svn" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="10.el6_10"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.7.1-10" date="1579176000">- fixes arbitrary code execution via .gitmodules
  Resolves: CVE-2018-17456</changelog>
</package>
<package pkgid="17042bcbc95db1ab43c93fd042ab5ecdd2f0450984b9eb73417ff725dfcf7688" name="git-svn" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el6_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-4" date="1361880000">- fix CVE-2013-0308</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-4.1" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318252</changelog>
</package>
<package pkgid="0ba3f49eabcf16e124bdec19b0744826068ef26b4f28fab8725551ed564c0745" name="git-svn" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="9.el6_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-7" date="1475236800">- fixes memory corruption on git shortlog
- add -f option for "git submodule add" to add files even when
  these are included in .gitignore
- improve performance of extremly slow http(s)
- fix cloning using http(s) protocol when redirection is requested
  Resolves: #874659 #1207253 #1237395 #1289984</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="4e820bf7c778b4bdebc67ac640a42ebc6fd2a4a06f29e06082f20a5404a1a415" name="gitk" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="10.el6_10"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.7.1-10" date="1579176000">- fixes arbitrary code execution via .gitmodules
  Resolves: CVE-2018-17456</changelog>
</package>
<package pkgid="7b1a4abfb2e2582d9247b50d49bf21d84f534beb138c2c6d01acfe975eabfe97" name="gitk" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el6_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-4" date="1361880000">- fix CVE-2013-0308</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-4.1" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318252</changelog>
</package>
<package pkgid="0816ee686d718b9a5c815cb3c562d16912734e395cdcfb1bc3cc05bfa30f065d" name="gitk" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="9.el6_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-7" date="1475236800">- fixes memory corruption on git shortlog
- add -f option for "git submodule add" to add files even when
  these are included in .gitignore
- improve performance of extremly slow http(s)
- fix cloning using http(s) protocol when redirection is requested
  Resolves: #874659 #1207253 #1237395 #1289984</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="b7cdad0226d27a3422b16c2ba5d6ad38a1d41456fd9f278a5404966ed0edc0a0" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="10.el6_10"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.7.1-10" date="1579176000">- fixes arbitrary code execution via .gitmodules
  Resolves: CVE-2018-17456</changelog>
</package>
<package pkgid="697bd280ecfa7752d0b91b5f675a90762b605be45cdc18c56e7b7fdad9917417" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el6_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-4" date="1361880000">- fix CVE-2013-0308</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-4.1" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318252</changelog>
</package>
<package pkgid="156ee25ee26379f29336ae5169ac2eb6325953c7c644daaac89be7995925059c" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="9.el6_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-7" date="1475236800">- fixes memory corruption on git shortlog
- add -f option for "git submodule add" to add files even when
  these are included in .gitignore
- improve performance of extremly slow http(s)
- fix cloning using http(s) protocol when redirection is requested
  Resolves: #874659 #1207253 #1237395 #1289984</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="c016e9e823937d38c70d2fec46be2fb77950583507f25d24c61207290f3d93c7" name="glibc" arch="i686">
  <version epoch="0" ver="2.12" rel="1.166.el6_7.7"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.5" date="1452772800">- Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296028).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.6" date="1453723200">- Create helper threads with enough stack for POSIX AIO and timers (#1301625).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.7" date="1453982400">- Update fix for CVE-2015-7547 (#1296028).</changelog>
</package>
<package pkgid="19ee5487de898c28918b5c2f782361ae7241736c8d98303510008c956ea0fe68" name="glibc" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6"/>
  <changelog author="Martin Sebor &lt;msebor@redhat.com&gt; - 2.12-1.207" date="1476705600">- Use FL_CLOEXEC in internal calls to fopen (#1012343).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.208" date="1476792000">- Update tests for struct sockaddr_storage changes (#1338673)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
</package>
<package pkgid="2879a6d162ef5ee2ad14c6d2efd95e7bc52cecb037f2d5f49d9f20f61fdd3868" name="glibc" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6_9.2"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.209.1" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437618).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209.2" date="1495800000">- Avoid large allocas in the dynamic linker (#1452711)</changelog>
</package>
<package pkgid="b3a917a07554eeecfdba21b178d1065641520d2344fe959531764f4dd7c6b212" name="glibc" arch="i686">
  <version epoch="0" ver="2.12" rel="1.212.el6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.210" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437147).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.211" date="1497873600">- Avoid large allocas in the dynamic linker (#1452717)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.212" date="1510920000">- CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504810)
- CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504810)</changelog>
</package>
<package pkgid="8d8adaedbf60facec25fd12db65b77a4b6f3e52c46be6bcf2110a6a9df4f7067" name="glibc-common" arch="i686">
  <version epoch="0" ver="2.12" rel="1.166.el6_7.7"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.5" date="1452772800">- Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296028).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.6" date="1453723200">- Create helper threads with enough stack for POSIX AIO and timers (#1301625).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.7" date="1453982400">- Update fix for CVE-2015-7547 (#1296028).</changelog>
</package>
<package pkgid="9fbed42b3d6ea3cf837d8c9e56ea18c305edef29a282e9b0f53f32e22bd728a4" name="glibc-common" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6"/>
  <changelog author="Martin Sebor &lt;msebor@redhat.com&gt; - 2.12-1.207" date="1476705600">- Use FL_CLOEXEC in internal calls to fopen (#1012343).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.208" date="1476792000">- Update tests for struct sockaddr_storage changes (#1338673)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
</package>
<package pkgid="fef03c1d3efa043ec082f122500ca97247e2f52538a3ab4526bb09c012c31d73" name="glibc-common" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6_9.2"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.209.1" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437618).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209.2" date="1495800000">- Avoid large allocas in the dynamic linker (#1452711)</changelog>
</package>
<package pkgid="4e546935f424e433dd76ad1db46429b16fbf74381a0389de10f5c03c4107cde4" name="glibc-common" arch="i686">
  <version epoch="0" ver="2.12" rel="1.212.el6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.210" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437147).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.211" date="1497873600">- Avoid large allocas in the dynamic linker (#1452717)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.212" date="1510920000">- CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504810)
- CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504810)</changelog>
</package>
<package pkgid="0458034ba5664e53a5cc137f57e560703917782b7856e8d08b71e0b8bb142ee7" name="glibc-devel" arch="i686">
  <version epoch="0" ver="2.12" rel="1.166.el6_7.7"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.5" date="1452772800">- Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296028).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.6" date="1453723200">- Create helper threads with enough stack for POSIX AIO and timers (#1301625).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.7" date="1453982400">- Update fix for CVE-2015-7547 (#1296028).</changelog>
</package>
<package pkgid="e7b5e0b047ce56d4ca7a8b6e208df8e68a07a5663c543b3178ac6138559783bf" name="glibc-devel" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6"/>
  <changelog author="Martin Sebor &lt;msebor@redhat.com&gt; - 2.12-1.207" date="1476705600">- Use FL_CLOEXEC in internal calls to fopen (#1012343).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.208" date="1476792000">- Update tests for struct sockaddr_storage changes (#1338673)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
</package>
<package pkgid="649668f2da4e931cc2faedfe0d2ec69dc6ce7ff4c752f74e794f97a8de066bbb" name="glibc-devel" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6_9.2"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.209.1" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437618).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209.2" date="1495800000">- Avoid large allocas in the dynamic linker (#1452711)</changelog>
</package>
<package pkgid="ddce190c61321dd829b9ebd171d1c1da4ac0302162de96c44853ca793b48aaa7" name="glibc-devel" arch="i686">
  <version epoch="0" ver="2.12" rel="1.212.el6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.210" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437147).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.211" date="1497873600">- Avoid large allocas in the dynamic linker (#1452717)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.212" date="1510920000">- CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504810)
- CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504810)</changelog>
</package>
<package pkgid="7a559a51cb2b8d1ee02158ac27224680f202fe13c3bf4e134f13abc0cc2ad3e8" name="glibc-headers" arch="i686">
  <version epoch="0" ver="2.12" rel="1.166.el6_7.7"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.5" date="1452772800">- Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296028).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.6" date="1453723200">- Create helper threads with enough stack for POSIX AIO and timers (#1301625).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.7" date="1453982400">- Update fix for CVE-2015-7547 (#1296028).</changelog>
</package>
<package pkgid="c19eab8393235c906c1d6fbbbc36397f6d697850a543a35a1034fd70fa225dbc" name="glibc-headers" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6"/>
  <changelog author="Martin Sebor &lt;msebor@redhat.com&gt; - 2.12-1.207" date="1476705600">- Use FL_CLOEXEC in internal calls to fopen (#1012343).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.208" date="1476792000">- Update tests for struct sockaddr_storage changes (#1338673)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
</package>
<package pkgid="86ade572b37d736164b78a465b9e574692d5d7f963d3e426eef19f6491a303a7" name="glibc-headers" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6_9.2"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.209.1" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437618).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209.2" date="1495800000">- Avoid large allocas in the dynamic linker (#1452711)</changelog>
</package>
<package pkgid="5944467e1b2048b2929ec5ef4f3c7993d2172d3285568ce0b884000a4fcfb4b7" name="glibc-headers" arch="i686">
  <version epoch="0" ver="2.12" rel="1.212.el6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.210" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437147).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.211" date="1497873600">- Avoid large allocas in the dynamic linker (#1452717)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.212" date="1510920000">- CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504810)
- CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504810)</changelog>
</package>
<package pkgid="60f9605ec867ad83c4cf4d106e0214139a089be71f1d80470a9181e901bfae31" name="glibc-static" arch="i686">
  <version epoch="0" ver="2.12" rel="1.166.el6_7.7"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.5" date="1452772800">- Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296028).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.6" date="1453723200">- Create helper threads with enough stack for POSIX AIO and timers (#1301625).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.7" date="1453982400">- Update fix for CVE-2015-7547 (#1296028).</changelog>
</package>
<package pkgid="dcd5c6984fa68879783e0c99970ace2b6054cfec8f300d65aeee865799ee4ecb" name="glibc-static" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6"/>
  <changelog author="Martin Sebor &lt;msebor@redhat.com&gt; - 2.12-1.207" date="1476705600">- Use FL_CLOEXEC in internal calls to fopen (#1012343).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.208" date="1476792000">- Update tests for struct sockaddr_storage changes (#1338673)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
</package>
<package pkgid="5600e76f459cbe3e393ae7a2c65ec1ca71135b4668f2f6245c45d1bf36987c85" name="glibc-static" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6_9.2"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.209.1" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437618).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209.2" date="1495800000">- Avoid large allocas in the dynamic linker (#1452711)</changelog>
</package>
<package pkgid="8ff061c5b0f08f533149e6b5865b3e4c757937bb2ca452cd5a442e1ff8ea746c" name="glibc-static" arch="i686">
  <version epoch="0" ver="2.12" rel="1.212.el6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.210" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437147).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.211" date="1497873600">- Avoid large allocas in the dynamic linker (#1452717)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.212" date="1510920000">- CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504810)
- CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504810)</changelog>
</package>
<package pkgid="d939a9a7108c80dff35b56cf635e5a8859293588bc45a6bb54eaeeceed204722" name="glibc-utils" arch="i686">
  <version epoch="0" ver="2.12" rel="1.166.el6_7.7"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.5" date="1452772800">- Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296028).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.6" date="1453723200">- Create helper threads with enough stack for POSIX AIO and timers (#1301625).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.7" date="1453982400">- Update fix for CVE-2015-7547 (#1296028).</changelog>
</package>
<package pkgid="e501bd487e34eeca513943f4145f3023c9e0cf7dc5093127b8b366dd2d482ac4" name="glibc-utils" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6"/>
  <changelog author="Martin Sebor &lt;msebor@redhat.com&gt; - 2.12-1.207" date="1476705600">- Use FL_CLOEXEC in internal calls to fopen (#1012343).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.208" date="1476792000">- Update tests for struct sockaddr_storage changes (#1338673)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
</package>
<package pkgid="e91fb65fd6727f8136f7861131fb6fb81cf03aedf355b2de11e8503a047def41" name="glibc-utils" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6_9.2"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.209.1" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437618).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209.2" date="1495800000">- Avoid large allocas in the dynamic linker (#1452711)</changelog>
</package>
<package pkgid="1f015301e7fa8a744a8a65239287ceb0466083adedbf8da12936da63341eae1d" name="glibc-utils" arch="i686">
  <version epoch="0" ver="2.12" rel="1.212.el6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.210" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437147).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.211" date="1497873600">- Avoid large allocas in the dynamic linker (#1452717)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.212" date="1510920000">- CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504810)
- CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504810)</changelog>
</package>
<package pkgid="7c6d8d7dbe1dbbbe1ea65a3102dc05182dfdc46613186c4171a24e4a18ad878b" name="glx-utils" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="ab713e68d1dc5bbed95843f8bdf414a31e3cfda4a706111f9efe93481b3219ea" name="gnupg2" arch="i686">
  <version epoch="0" ver="2.0.14" rel="9.el6_10"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.14-6" date="1381492800">- fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.14-8" date="1399464000">- fix aborts and default algorithms when running in FIPS mode (#1078957, #966493)
- add missing initialization of libgcrypt in gpgv
- properly encode s2k iteration count in gpg-agent (#638635)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.14-9" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="65e9884996d2de4808ea5b85b1b2ed17361e2785ab11e9ae942581a6ec47d9d3" name="gnupg2-smime" arch="i686">
  <version epoch="0" ver="2.0.14" rel="9.el6_10"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.14-6" date="1381492800">- fix CVE-2013-4351 gpg treats no-usage-permitted keys as all-usages-permitted</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.14-8" date="1399464000">- fix aborts and default algorithms when running in FIPS mode (#1078957, #966493)
- add missing initialization of libgcrypt in gpgv
- properly encode s2k iteration count in gpg-agent (#638635)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.14-9" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="f9b79851ccdbb61f7279a79ea398de57be9129ad14645802717cecb233c3a2d1" name="gnutls" arch="i686">
  <version epoch="0" ver="2.12.23" rel="21.el6"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-18" date="1425384000">- fix CVE-2015-0282 (#1198159)
- fix CVE-2015-0294 (#1198159)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-19" date="1449662400">- Prevent downgrade attack to RSA-MD5 in TLS 1.2 server key exchange (#1289885)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.12.23-21" date="1486987200">- Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes
  (#1326389, #1326073, #1323215, #1320982, #1328205, #1321112)
- Modified gnutls-serv to accept --sni-hostname (#1333521)
- Modified gnutls-serv to always reply with an alert message (#1327656)
- Removed support for DSA2 as it causes interoperability issues (#1321112)
- Allow sending and receiving certificates which were not in the
  signature algorithms extension (#1328205)
- Removed support for EXPORT ciphersuites (#1337460)
- Raised the minimum acceptable DH size to 1024 (#1335924)
- Restricted the number of alert that can be received during handshake (#1388730)
- Added fixes for OpenPGP parsing issues (CVE-2017-5337, CVE-2017-5336, CVE-2017-5335)
- The exposed (but internal) crypto back-end registration API is deprecated and no
  longer functional. The ABI is kept compatible (#1415682)</changelog>
</package>
<package pkgid="9a6467a0e55463080d8489a7d916f62889f57d09e8f5d7a786f04903f0a513af" name="gnutls" arch="i686">
  <version epoch="0" ver="2.8.5" rel="19.el6_7"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-17" date="1422532800">- Corrected value initialization in mpi printing (#1129241)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-18" date="1425384000">- fix CVE-2015-0282 (#1198159)
- fix CVE-2015-0294 (#1198159)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-19" date="1449662400">- Prevent downgrade attack to RSA-MD5 in TLS 1.2 server key exchange (#1289885)</changelog>
</package>
<package pkgid="58ad8689a956cffd92e6ecbf798190a140fe9d66a473bb1d08251f949fc17778" name="gnutls-devel" arch="i686">
  <version epoch="0" ver="2.12.23" rel="21.el6"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-18" date="1425384000">- fix CVE-2015-0282 (#1198159)
- fix CVE-2015-0294 (#1198159)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-19" date="1449662400">- Prevent downgrade attack to RSA-MD5 in TLS 1.2 server key exchange (#1289885)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.12.23-21" date="1486987200">- Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes
  (#1326389, #1326073, #1323215, #1320982, #1328205, #1321112)
- Modified gnutls-serv to accept --sni-hostname (#1333521)
- Modified gnutls-serv to always reply with an alert message (#1327656)
- Removed support for DSA2 as it causes interoperability issues (#1321112)
- Allow sending and receiving certificates which were not in the
  signature algorithms extension (#1328205)
- Removed support for EXPORT ciphersuites (#1337460)
- Raised the minimum acceptable DH size to 1024 (#1335924)
- Restricted the number of alert that can be received during handshake (#1388730)
- Added fixes for OpenPGP parsing issues (CVE-2017-5337, CVE-2017-5336, CVE-2017-5335)
- The exposed (but internal) crypto back-end registration API is deprecated and no
  longer functional. The ABI is kept compatible (#1415682)</changelog>
</package>
<package pkgid="e333f5b5295895c36e015f0203cbacca684efa597e4359c4a88ffcea04f4e48d" name="gnutls-devel" arch="i686">
  <version epoch="0" ver="2.8.5" rel="19.el6_7"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-17" date="1422532800">- Corrected value initialization in mpi printing (#1129241)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-18" date="1425384000">- fix CVE-2015-0282 (#1198159)
- fix CVE-2015-0294 (#1198159)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-19" date="1449662400">- Prevent downgrade attack to RSA-MD5 in TLS 1.2 server key exchange (#1289885)</changelog>
</package>
<package pkgid="e2f7bb53da9778cb790fae9dd22a7a4357f2ae344f475aa4e32aa861ee0e1e55" name="gnutls-guile" arch="i686">
  <version epoch="0" ver="2.12.23" rel="21.el6"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-18" date="1425384000">- fix CVE-2015-0282 (#1198159)
- fix CVE-2015-0294 (#1198159)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-19" date="1449662400">- Prevent downgrade attack to RSA-MD5 in TLS 1.2 server key exchange (#1289885)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.12.23-21" date="1486987200">- Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes
  (#1326389, #1326073, #1323215, #1320982, #1328205, #1321112)
- Modified gnutls-serv to accept --sni-hostname (#1333521)
- Modified gnutls-serv to always reply with an alert message (#1327656)
- Removed support for DSA2 as it causes interoperability issues (#1321112)
- Allow sending and receiving certificates which were not in the
  signature algorithms extension (#1328205)
- Removed support for EXPORT ciphersuites (#1337460)
- Raised the minimum acceptable DH size to 1024 (#1335924)
- Restricted the number of alert that can be received during handshake (#1388730)
- Added fixes for OpenPGP parsing issues (CVE-2017-5337, CVE-2017-5336, CVE-2017-5335)
- The exposed (but internal) crypto back-end registration API is deprecated and no
  longer functional. The ABI is kept compatible (#1415682)</changelog>
</package>
<package pkgid="6b531da5e540a007fff1efb9e93688c558c6c76375253937b1481f59f187b115" name="gnutls-guile" arch="i686">
  <version epoch="0" ver="2.8.5" rel="19.el6_7"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-17" date="1422532800">- Corrected value initialization in mpi printing (#1129241)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-18" date="1425384000">- fix CVE-2015-0282 (#1198159)
- fix CVE-2015-0294 (#1198159)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-19" date="1449662400">- Prevent downgrade attack to RSA-MD5 in TLS 1.2 server key exchange (#1289885)</changelog>
</package>
<package pkgid="328ebfe5c82fed638bae3dfe9bc14d7ff56ef781d3997af5ec1c9a86524c2828" name="gnutls-utils" arch="i686">
  <version epoch="0" ver="2.12.23" rel="21.el6"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-18" date="1425384000">- fix CVE-2015-0282 (#1198159)
- fix CVE-2015-0294 (#1198159)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-19" date="1449662400">- Prevent downgrade attack to RSA-MD5 in TLS 1.2 server key exchange (#1289885)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.12.23-21" date="1486987200">- Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes
  (#1326389, #1326073, #1323215, #1320982, #1328205, #1321112)
- Modified gnutls-serv to accept --sni-hostname (#1333521)
- Modified gnutls-serv to always reply with an alert message (#1327656)
- Removed support for DSA2 as it causes interoperability issues (#1321112)
- Allow sending and receiving certificates which were not in the
  signature algorithms extension (#1328205)
- Removed support for EXPORT ciphersuites (#1337460)
- Raised the minimum acceptable DH size to 1024 (#1335924)
- Restricted the number of alert that can be received during handshake (#1388730)
- Added fixes for OpenPGP parsing issues (CVE-2017-5337, CVE-2017-5336, CVE-2017-5335)
- The exposed (but internal) crypto back-end registration API is deprecated and no
  longer functional. The ABI is kept compatible (#1415682)</changelog>
</package>
<package pkgid="e2645d86e7eb44f5398094890ad88b9435848cfbc69928b6eb4a17c039e42cef" name="gnutls-utils" arch="i686">
  <version epoch="0" ver="2.8.5" rel="19.el6_7"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-17" date="1422532800">- Corrected value initialization in mpi printing (#1129241)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-18" date="1425384000">- fix CVE-2015-0282 (#1198159)
- fix CVE-2015-0294 (#1198159)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; 2.8.5-19" date="1449662400">- Prevent downgrade attack to RSA-MD5 in TLS 1.2 server key exchange (#1289885)</changelog>
</package>
<package pkgid="fc2bf51e98dee113c79514423f4406cad455ce94ced094b0f3669809a5773ec2" name="gstreamer-plugins-bad-free" arch="i686">
  <version epoch="0" ver="0.10.19" rel="5.el6_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 0.10.19-3" date="1408622400">- Rebuilt for new libvpx</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.10.19-4" date="1481025600">- Remove insecure NSF decoder
Resolves: rhbz#1400820</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.10.19-5" date="1481025601">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400820</changelog>
</package>
<package pkgid="c0033ff162bee6c56ab075d94081b70d8b0bbab385400b1258758b0ca618fd86" name="gstreamer-plugins-bad-free-devel" arch="i686">
  <version epoch="0" ver="0.10.19" rel="5.el6_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 0.10.19-3" date="1408622400">- Rebuilt for new libvpx</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.10.19-4" date="1481025600">- Remove insecure NSF decoder
Resolves: rhbz#1400820</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.10.19-5" date="1481025601">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400820</changelog>
</package>
<package pkgid="257505a39182642ae509ad7fbbc3b91c13719e6747d82e23c7eb035f8c98acc1" name="gstreamer-plugins-bad-free-devel-docs" arch="i686">
  <version epoch="0" ver="0.10.19" rel="5.el6_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 0.10.19-3" date="1408622400">- Rebuilt for new libvpx</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.10.19-4" date="1481025600">- Remove insecure NSF decoder
Resolves: rhbz#1400820</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.10.19-5" date="1481025601">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400820</changelog>
</package>
<package pkgid="b65cb71d3aa7b9651be42750d675f2b7d80075ae4891b0976277c023a8a324e0" name="gstreamer-plugins-bad-free-extras" arch="i686">
  <version epoch="0" ver="0.10.19" rel="5.el6_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; 0.10.19-3" date="1408622400">- Rebuilt for new libvpx</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.10.19-4" date="1481025600">- Remove insecure NSF decoder
Resolves: rhbz#1400820</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.10.19-5" date="1481025601">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400820</changelog>
</package>
<package pkgid="8bc4dedf738fc2398e740a11d420863167b67e436f616ae7eeb79047b94bf19d" name="gstreamer-plugins-good" arch="i686">
  <version epoch="0" ver="0.10.23" rel="4.el6_8"/>
  <changelog author="Benjamin Otte &lt;otte@redhat.com&gt; 0.10.23-1" date="1276776000">- Update to 0.10.23
- Sync with Fedora packages
Resolves: rhbz#603108</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.10.23-2" date="1416398400">- add patch to post provide-clock message to fix a major regression
  in 0.10.23
- bump version to rebuild for fastrack
Resolves: rhbz#622776</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.10.23-4" date="1481025600">- Remove insecure FLX plugin
Resolves: rhbz#1400835</changelog>
</package>
<package pkgid="33844c31d90cfcf245f0abf778b9d84ba7a5fc666075c46cf0903eab0280dbcf" name="gstreamer-plugins-good-devel" arch="i686">
  <version epoch="0" ver="0.10.23" rel="4.el6_8"/>
  <changelog author="Benjamin Otte &lt;otte@redhat.com&gt; 0.10.23-1" date="1276776000">- Update to 0.10.23
- Sync with Fedora packages
Resolves: rhbz#603108</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.10.23-2" date="1416398400">- add patch to post provide-clock message to fix a major regression
  in 0.10.23
- bump version to rebuild for fastrack
Resolves: rhbz#622776</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.10.23-4" date="1481025600">- Remove insecure FLX plugin
Resolves: rhbz#1400835</changelog>
</package>
<package pkgid="aaebfd5f95846cc8099c9e179ed2acddf77aaa65ed6d05221d8d06f4aaa2ede5" name="haproxy" arch="i686">
  <version epoch="0" ver="1.5.4" rel="2.el6_7.1"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.4-1" date="1415707200">- Rebase to upstream version 1.5.4
  Resolves: rhbz#1136550</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.4-2" date="1425384000">- Read sysconfig file for extra options
  Resolves: rhbz#1166497</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.4-2.1" date="1438084800">- Fix buffer_slow_realign() function to respect output data
  Resolves: CVE-2015-3281</changelog>
</package>
<package pkgid="6d97763d7afa042ec41cf6b2fe08ad01c172a2926fa4fefcdbad4602e921fe0c" name="httpd" arch="i686">
  <version epoch="0" ver="2.2.15" rel="47.sl6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-46" date="1439208000">- core: fix chunk header parsing defect (CVE-2015-3183)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-47" date="1439899200">- fix regressions caused by fix for CVE-2015-3183</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1440417600">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="0e327f038ac31cb42fde037f3aaa9e76ecf5d30c9e599a770d4ad522f6f43bcb" name="httpd" arch="i686">
  <version epoch="0" ver="2.2.15" rel="54.sl6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-53" date="1454587200">- core: fix possible long graceful restart caused by race condition between
  httpd children processes (#1301758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.15-54" date="1468324800">- add security fix for CVE-2016-5387</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1468843200">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="ae1bedb870abf3ba91f78c4175cbc3d9cc112cd49c02aa69c155b2b51697be7e" name="httpd" arch="i686">
  <version epoch="0" ver="2.2.15" rel="60.sl6.4"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.3" date="1498737600">- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.4" date="1499428800">- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1499774400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="40e6718daf1f000809a290586fb10a1e4018ac125d7fe957533d60aaf2f7dbd4" name="httpd" arch="i686">
  <version epoch="0" ver="2.2.15" rel="60.sl6.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.4" date="1499428800">- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.5" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1502798400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="a18a00e17af52e08bf8da96872337d3927d0662ea8b20f3246976e9a9f9a57cc" name="httpd" arch="i686">
  <version epoch="0" ver="2.2.15" rel="60.sl6.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.5" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.6" date="1505822400">- Resolves: #1493061 - CVE-2017-9798 httpd: various flaws</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1508414400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="aaac898d26cc97615d43d3d28b7b32f8d1f7f377ef03bdf6f93e68a10e45382c" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.2.15" rel="47.sl6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-46" date="1439208000">- core: fix chunk header parsing defect (CVE-2015-3183)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-47" date="1439899200">- fix regressions caused by fix for CVE-2015-3183</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1440417600">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="6eefc715b2077d07d769c3a5b8c944bb024b05ad5bd6b37a1eca67b496a9ceb8" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.2.15" rel="54.sl6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-53" date="1454587200">- core: fix possible long graceful restart caused by race condition between
  httpd children processes (#1301758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.15-54" date="1468324800">- add security fix for CVE-2016-5387</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1468843200">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="03fa344fe3f011171803b6c899275a6f4e6b232b8dd4a78f346361a34ce90651" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.2.15" rel="60.sl6.4"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.3" date="1498737600">- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.4" date="1499428800">- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1499774400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="137c1093c87f3de665495ed007f85252257201e99dc9ebb20f62c3f0ae11cc51" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.2.15" rel="60.sl6.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.4" date="1499428800">- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.5" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1502798400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="a941364a85c9e9019cd612d4a201a9673ffc1102d71195db9cb7c4a22db27654" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.2.15" rel="60.sl6.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.5" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.6" date="1505822400">- Resolves: #1493061 - CVE-2017-9798 httpd: various flaws</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1508414400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="18db703d8732e0e731ca18a752b62768a70410426cdf075d0a5806ba7e02a69d" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.2.15" rel="47.sl6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-46" date="1439208000">- core: fix chunk header parsing defect (CVE-2015-3183)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-47" date="1439899200">- fix regressions caused by fix for CVE-2015-3183</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1440417600">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="d492472e8cbafcea13d63554152f84304c241f7f5768e641322285863f55f41e" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.2.15" rel="54.sl6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-53" date="1454587200">- core: fix possible long graceful restart caused by race condition between
  httpd children processes (#1301758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.15-54" date="1468324800">- add security fix for CVE-2016-5387</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1468843200">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="7b92fb6e1e3f4c3c243d028da0aa8412d23b4dfcadc2c3ce6dc8b2aa328ff0df" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.2.15" rel="60.sl6.4"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.3" date="1498737600">- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.4" date="1499428800">- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1499774400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="d03ca4fc6e03e40ea424387af2958d6ad01ef200f9436a9b5477c955c2caebc0" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.2.15" rel="60.sl6.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.4" date="1499428800">- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.5" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1502798400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="f6a98b36d518261d39834d10f98d2d9b8c712ddeab2254d101807779104914a7" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.2.15" rel="60.sl6.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.5" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.6" date="1505822400">- Resolves: #1493061 - CVE-2017-9798 httpd: various flaws</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1508414400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="7c425b90c695ad3c920aa9493714b5b955ababbcd37a2dde0c45cb67c96ed456" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.2.15" rel="47.sl6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-46" date="1439208000">- core: fix chunk header parsing defect (CVE-2015-3183)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-47" date="1439899200">- fix regressions caused by fix for CVE-2015-3183</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1440417600">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="087cfcb4fbcec197561bdbd66482594a58074f3d4f542713f2fc5250420b3be0" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.2.15" rel="54.sl6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-53" date="1454587200">- core: fix possible long graceful restart caused by race condition between
  httpd children processes (#1301758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.15-54" date="1468324800">- add security fix for CVE-2016-5387</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1468843200">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="eb74e0283ea84d04ebf76976e6e5c6359fea49c91157a53ba870fb8b091f18f0" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.2.15" rel="60.sl6.4"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.3" date="1498737600">- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.4" date="1499428800">- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1499774400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="5cdb65835dac3b685bd8c687ae9522cee454e21d9c646de5fbabf56bb64a3282" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.2.15" rel="60.sl6.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.4" date="1499428800">- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.5" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1502798400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="ee0022c666f4648a60e84ab846debacb9cfebb4aec4e93e2c23263ed9c8caf9e" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.2.15" rel="60.sl6.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.5" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.6" date="1505822400">- Resolves: #1493061 - CVE-2017-9798 httpd: various flaws</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1508414400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="4e88bafd655f85b74fa390594244b1041e549d56f3a149651faed5ad4b25e803" name="icedtea-web" arch="i686">
  <version epoch="0" ver="1.6.2" rel="1.el6"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.5.1-1" date="1408363200">- fixed obsolates to any jdk6 plugin
- Resolves: rhbz#1075790</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.1-4" date="1447934400">- updated to 1.6.1
- Resolves: rhbz#1275523</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-1" date="1454500800">- updated to 1.6.2
- fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
- Resolves: rhbz#1275523</changelog>
</package>
<package pkgid="11a8bea0827180653c4f4106665513d8f2a44e4ee700dfd1ea2cab75acbdde10" name="icedtea-web-javadoc" arch="noarch">
  <version epoch="0" ver="1.6.2" rel="1.el6"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.5.1-1" date="1408363200">- fixed obsolates to any jdk6 plugin
- Resolves: rhbz#1075790</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.1-4" date="1447934400">- updated to 1.6.1
- Resolves: rhbz#1275523</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-1" date="1454500800">- updated to 1.6.2
- fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
- Resolves: rhbz#1275523</changelog>
</package>
<package pkgid="aae26cc6d13bfb6fd5d555802987184f416ef7f6105bcc171d172f74271cf745" name="icu" arch="i686">
  <version epoch="0" ver="4.2.1" rel="15.el6_10"/>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 4.2.1-13" date="1448020800">- Resolves: rhbz#674328 fix freeserif crash</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 4.2.1-14" date="1456920000">- Resolves: rhbz#1247977 add (x86-32) to Requires for multi-arch systems</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.2.1-15" date="1583928000">- Apply icu.13634.integer.overflow.patch
- Apply icu.20958.segv.mapper.patch
- Resolves: rhbz#1809876</changelog>
</package>
<package pkgid="18568d20ec932c59d6a8629f9ca322a270e3ced5fbe4e85659a8395570ba418e" name="ipa-admintools" arch="i686">
  <version epoch="0" ver="3.0.0" rel="47.el6_7.2"/>
  <changelog author="Petr Vobornik &lt;pvoborni@redhat.com&gt; - 3.0.0-47.el6" date="1431518400">- Resolves: #1220788 - Some IPA schema files are not RFC 4512 compliant</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 3.0.0-47.el6.1" date="1447329600">- Resolves: #1280207 Unable to resolve group memberships for AD users when
  using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with
  ipa-server-3.0.0-42.el6.x86_64 with AD Trust
  - Do not lookup up the domain too early if only the SID is known
  - Do not store SID string in a local buffer
  - Allow ID-to-SID mappings in the extdom plugin
- Resolves: #1280208 ipa-server-install with externally signed CA fails with
  NSS error (SEC_ERROR_BUSY)
  - Free NSS objects in --external-ca scenario</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 3.0.0-47.el6.2" date="1459944000">- Update IPA code to support Samba 4.2
- Related: #1322688</changelog>
</package>
<package pkgid="b159a17230f9c9445276a2033216677de4cb6b91805ab200258d62dc6507b7df" name="ipa-admintools" arch="i686">
  <version epoch="0" ver="3.0.0" rel="50.el6_8.2"/>
  <changelog author="Jan Cholasta &lt;mbasti@redhat.com&gt; - 3.0.0-50.el6" date="1452168000">- Resolves: #1225868 display browser config options that apply to the browser -
  Chrome
  - Remove ico files from Makefile
- Resolves: #1232843 ipa-client-install errors out if client and server time
  are not in sync or unreachable
  - Skip time sync during client install when using --no-ntp
- Resolves: #1288495 Add userCertificate index used in Smart Card
  authentication
  - add DS index for userCertificate attribute
- Resolves: #1293588 JavaScript error in ssbrowser.html - TypeError: Cannot
  read property 'mozilla' of undefined
  - webui: fix browser detection in browserconfig.html and ssbrowser.html
- Resolves: #1296124 Adjust Firefox configuration to new extension signing
  policy
  - webui: use manual Firefox configuration for Firefox &gt;= 40
- Remove binary patching from patch 0140</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 3.0.0-50.el6.1" date="1460462400">- Update IPA code to support Samba 4.2
- Related: #1322689</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 3.0.0-50.el6.2" date="1471867200">- Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
  certificate revocation
  - cert-revoke: fix permission check bypass (CVE-2016-5404)</changelog>
</package>
<package pkgid="0c188fee921240bb89c0b727fd6aedd51461d2f66a29c7be6750762032123819" name="ipa-client" arch="i686">
  <version epoch="0" ver="3.0.0" rel="47.el6_7.2"/>
  <changelog author="Petr Vobornik &lt;pvoborni@redhat.com&gt; - 3.0.0-47.el6" date="1431518400">- Resolves: #1220788 - Some IPA schema files are not RFC 4512 compliant</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 3.0.0-47.el6.1" date="1447329600">- Resolves: #1280207 Unable to resolve group memberships for AD users when
  using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with
  ipa-server-3.0.0-42.el6.x86_64 with AD Trust
  - Do not lookup up the domain too early if only the SID is known
  - Do not store SID string in a local buffer
  - Allow ID-to-SID mappings in the extdom plugin
- Resolves: #1280208 ipa-server-install with externally signed CA fails with
  NSS error (SEC_ERROR_BUSY)
  - Free NSS objects in --external-ca scenario</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 3.0.0-47.el6.2" date="1459944000">- Update IPA code to support Samba 4.2
- Related: #1322688</changelog>
</package>
<package pkgid="a6e579152f4776a0c5ffceb42141b7868054e9bb707288d607c596c08f358b9d" name="ipa-client" arch="i686">
  <version epoch="0" ver="3.0.0" rel="50.el6_8.2"/>
  <changelog author="Jan Cholasta &lt;mbasti@redhat.com&gt; - 3.0.0-50.el6" date="1452168000">- Resolves: #1225868 display browser config options that apply to the browser -
  Chrome
  - Remove ico files from Makefile
- Resolves: #1232843 ipa-client-install errors out if client and server time
  are not in sync or unreachable
  - Skip time sync during client install when using --no-ntp
- Resolves: #1288495 Add userCertificate index used in Smart Card
  authentication
  - add DS index for userCertificate attribute
- Resolves: #1293588 JavaScript error in ssbrowser.html - TypeError: Cannot
  read property 'mozilla' of undefined
  - webui: fix browser detection in browserconfig.html and ssbrowser.html
- Resolves: #1296124 Adjust Firefox configuration to new extension signing
  policy
  - webui: use manual Firefox configuration for Firefox &gt;= 40
- Remove binary patching from patch 0140</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 3.0.0-50.el6.1" date="1460462400">- Update IPA code to support Samba 4.2
- Related: #1322689</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 3.0.0-50.el6.2" date="1471867200">- Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
  certificate revocation
  - cert-revoke: fix permission check bypass (CVE-2016-5404)</changelog>
</package>
<package pkgid="079e3e3a442b318bc84ca834563e888a20605c5477464862b3d6d72056ca6fdb" name="ipa-python" arch="i686">
  <version epoch="0" ver="3.0.0" rel="47.el6_7.2"/>
  <changelog author="Petr Vobornik &lt;pvoborni@redhat.com&gt; - 3.0.0-47.el6" date="1431518400">- Resolves: #1220788 - Some IPA schema files are not RFC 4512 compliant</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 3.0.0-47.el6.1" date="1447329600">- Resolves: #1280207 Unable to resolve group memberships for AD users when
  using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with
  ipa-server-3.0.0-42.el6.x86_64 with AD Trust
  - Do not lookup up the domain too early if only the SID is known
  - Do not store SID string in a local buffer
  - Allow ID-to-SID mappings in the extdom plugin
- Resolves: #1280208 ipa-server-install with externally signed CA fails with
  NSS error (SEC_ERROR_BUSY)
  - Free NSS objects in --external-ca scenario</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 3.0.0-47.el6.2" date="1459944000">- Update IPA code to support Samba 4.2
- Related: #1322688</changelog>
</package>
<package pkgid="0ed6eb7863a8d8d685c34ffbf7fd842406eb7ad9a600a8a65182a7f904ca43dd" name="ipa-python" arch="i686">
  <version epoch="0" ver="3.0.0" rel="50.el6_8.2"/>
  <changelog author="Jan Cholasta &lt;mbasti@redhat.com&gt; - 3.0.0-50.el6" date="1452168000">- Resolves: #1225868 display browser config options that apply to the browser -
  Chrome
  - Remove ico files from Makefile
- Resolves: #1232843 ipa-client-install errors out if client and server time
  are not in sync or unreachable
  - Skip time sync during client install when using --no-ntp
- Resolves: #1288495 Add userCertificate index used in Smart Card
  authentication
  - add DS index for userCertificate attribute
- Resolves: #1293588 JavaScript error in ssbrowser.html - TypeError: Cannot
  read property 'mozilla' of undefined
  - webui: fix browser detection in browserconfig.html and ssbrowser.html
- Resolves: #1296124 Adjust Firefox configuration to new extension signing
  policy
  - webui: use manual Firefox configuration for Firefox &gt;= 40
- Remove binary patching from patch 0140</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 3.0.0-50.el6.1" date="1460462400">- Update IPA code to support Samba 4.2
- Related: #1322689</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 3.0.0-50.el6.2" date="1471867200">- Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
  certificate revocation
  - cert-revoke: fix permission check bypass (CVE-2016-5404)</changelog>
</package>
<package pkgid="5923491cc843c3155c0cc3b5dc37f59cdd8d91ccf0d75e9d1f7a18d7b4a57924" name="ipa-server" arch="i686">
  <version epoch="0" ver="3.0.0" rel="47.el6_7.2"/>
  <changelog author="Petr Vobornik &lt;pvoborni@redhat.com&gt; - 3.0.0-47.el6" date="1431518400">- Resolves: #1220788 - Some IPA schema files are not RFC 4512 compliant</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 3.0.0-47.el6.1" date="1447329600">- Resolves: #1280207 Unable to resolve group memberships for AD users when
  using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with
  ipa-server-3.0.0-42.el6.x86_64 with AD Trust
  - Do not lookup up the domain too early if only the SID is known
  - Do not store SID string in a local buffer
  - Allow ID-to-SID mappings in the extdom plugin
- Resolves: #1280208 ipa-server-install with externally signed CA fails with
  NSS error (SEC_ERROR_BUSY)
  - Free NSS objects in --external-ca scenario</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 3.0.0-47.el6.2" date="1459944000">- Update IPA code to support Samba 4.2
- Related: #1322688</changelog>
</package>
<package pkgid="d9bc36d3984dc86d5ba2b75648d9f4e9cfc0a95e2bce103711465aeeac6879f3" name="ipa-server" arch="i686">
  <version epoch="0" ver="3.0.0" rel="50.el6_8.2"/>
  <changelog author="Jan Cholasta &lt;mbasti@redhat.com&gt; - 3.0.0-50.el6" date="1452168000">- Resolves: #1225868 display browser config options that apply to the browser -
  Chrome
  - Remove ico files from Makefile
- Resolves: #1232843 ipa-client-install errors out if client and server time
  are not in sync or unreachable
  - Skip time sync during client install when using --no-ntp
- Resolves: #1288495 Add userCertificate index used in Smart Card
  authentication
  - add DS index for userCertificate attribute
- Resolves: #1293588 JavaScript error in ssbrowser.html - TypeError: Cannot
  read property 'mozilla' of undefined
  - webui: fix browser detection in browserconfig.html and ssbrowser.html
- Resolves: #1296124 Adjust Firefox configuration to new extension signing
  policy
  - webui: use manual Firefox configuration for Firefox &gt;= 40
- Remove binary patching from patch 0140</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 3.0.0-50.el6.1" date="1460462400">- Update IPA code to support Samba 4.2
- Related: #1322689</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 3.0.0-50.el6.2" date="1471867200">- Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
  certificate revocation
  - cert-revoke: fix permission check bypass (CVE-2016-5404)</changelog>
</package>
<package pkgid="8eb1286adeb82393f62e0f511b05fd50cdf42e71f0043007a729a569d7f91315" name="ipa-server-selinux" arch="i686">
  <version epoch="0" ver="3.0.0" rel="47.el6_7.2"/>
  <changelog author="Petr Vobornik &lt;pvoborni@redhat.com&gt; - 3.0.0-47.el6" date="1431518400">- Resolves: #1220788 - Some IPA schema files are not RFC 4512 compliant</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 3.0.0-47.el6.1" date="1447329600">- Resolves: #1280207 Unable to resolve group memberships for AD users when
  using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with
  ipa-server-3.0.0-42.el6.x86_64 with AD Trust
  - Do not lookup up the domain too early if only the SID is known
  - Do not store SID string in a local buffer
  - Allow ID-to-SID mappings in the extdom plugin
- Resolves: #1280208 ipa-server-install with externally signed CA fails with
  NSS error (SEC_ERROR_BUSY)
  - Free NSS objects in --external-ca scenario</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 3.0.0-47.el6.2" date="1459944000">- Update IPA code to support Samba 4.2
- Related: #1322688</changelog>
</package>
<package pkgid="268f9c27b9329ce0412320686c72c097f7e7e7c406f475ea24d8f1572e09de8c" name="ipa-server-selinux" arch="i686">
  <version epoch="0" ver="3.0.0" rel="50.el6_8.2"/>
  <changelog author="Jan Cholasta &lt;mbasti@redhat.com&gt; - 3.0.0-50.el6" date="1452168000">- Resolves: #1225868 display browser config options that apply to the browser -
  Chrome
  - Remove ico files from Makefile
- Resolves: #1232843 ipa-client-install errors out if client and server time
  are not in sync or unreachable
  - Skip time sync during client install when using --no-ntp
- Resolves: #1288495 Add userCertificate index used in Smart Card
  authentication
  - add DS index for userCertificate attribute
- Resolves: #1293588 JavaScript error in ssbrowser.html - TypeError: Cannot
  read property 'mozilla' of undefined
  - webui: fix browser detection in browserconfig.html and ssbrowser.html
- Resolves: #1296124 Adjust Firefox configuration to new extension signing
  policy
  - webui: use manual Firefox configuration for Firefox &gt;= 40
- Remove binary patching from patch 0140</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 3.0.0-50.el6.1" date="1460462400">- Update IPA code to support Samba 4.2
- Related: #1322689</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 3.0.0-50.el6.2" date="1471867200">- Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
  certificate revocation
  - cert-revoke: fix permission check bypass (CVE-2016-5404)</changelog>
</package>
<package pkgid="ef94d7ea68dfa26279085701b59be96be9338b87a1a02e470de47ec7437ce5a2" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="3.0.0" rel="47.el6_7.2"/>
  <changelog author="Petr Vobornik &lt;pvoborni@redhat.com&gt; - 3.0.0-47.el6" date="1431518400">- Resolves: #1220788 - Some IPA schema files are not RFC 4512 compliant</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 3.0.0-47.el6.1" date="1447329600">- Resolves: #1280207 Unable to resolve group memberships for AD users when
  using sssd-1.12.2-58.el7_1.6.x86_64 client in combination with
  ipa-server-3.0.0-42.el6.x86_64 with AD Trust
  - Do not lookup up the domain too early if only the SID is known
  - Do not store SID string in a local buffer
  - Allow ID-to-SID mappings in the extdom plugin
- Resolves: #1280208 ipa-server-install with externally signed CA fails with
  NSS error (SEC_ERROR_BUSY)
  - Free NSS objects in --external-ca scenario</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 3.0.0-47.el6.2" date="1459944000">- Update IPA code to support Samba 4.2
- Related: #1322688</changelog>
</package>
<package pkgid="b63efee6bd541a523eac8f67f8f47c5e7254754b7078141246e6a464e22f5283" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="3.0.0" rel="50.el6_8.2"/>
  <changelog author="Jan Cholasta &lt;mbasti@redhat.com&gt; - 3.0.0-50.el6" date="1452168000">- Resolves: #1225868 display browser config options that apply to the browser -
  Chrome
  - Remove ico files from Makefile
- Resolves: #1232843 ipa-client-install errors out if client and server time
  are not in sync or unreachable
  - Skip time sync during client install when using --no-ntp
- Resolves: #1288495 Add userCertificate index used in Smart Card
  authentication
  - add DS index for userCertificate attribute
- Resolves: #1293588 JavaScript error in ssbrowser.html - TypeError: Cannot
  read property 'mozilla' of undefined
  - webui: fix browser detection in browserconfig.html and ssbrowser.html
- Resolves: #1296124 Adjust Firefox configuration to new extension signing
  policy
  - webui: use manual Firefox configuration for Firefox &gt;= 40
- Remove binary patching from patch 0140</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 3.0.0-50.el6.1" date="1460462400">- Update IPA code to support Samba 4.2
- Related: #1322689</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 3.0.0-50.el6.2" date="1471867200">- Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
  certificate revocation
  - cert-revoke: fix permission check bypass (CVE-2016-5404)</changelog>
</package>
<package pkgid="ea1a33b9fa4c4c2aa724528aa35e92fabc4bd6e4c186b0677cc4ba9f2c7f83b9" name="ipmitool" arch="i686">
  <version epoch="0" ver="1.8.15" rel="3.el6_10"/>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 1.8.15-1" date="1447243200">- rebase to latest stable upstream version
- resolves: rhbz#1253416</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 1.8.15-2" date="1457438400">- Fix missing return in ipmi_kontronoem_main() - CID#1261317</changelog>
  <changelog author="Vaclav Dolezal &lt;vdolezal@redhat.com&gt; - 1.8.15-3" date="1583150400">- Backport fix for CVE-2020-5208</changelog>
</package>
<package pkgid="5fb947ea6da65104c417d10fb5e45e9bf18847adcfab8d08dc418cb246b1eb08" name="jakarta-commons-collections" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="3.5.el6_7"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:3.2.1-3.3" date="1262865600">- Remove maven build. It was maven1.</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:3.2.1-3.4" date="1265803200">- BR openjdk to fix OOM.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:3.2.1-3.5" date="1448020800">- Fix Java object de-serialization vulnerability
- Resolves: CVE-2015-7501</changelog>
</package>
<package pkgid="e49d28348fbe4332f2e7db80fcc50c59d45a0c44b5e47da67c0da5a05243fc49" name="jakarta-commons-collections-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="3.5.el6_7"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:3.2.1-3.3" date="1262865600">- Remove maven build. It was maven1.</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:3.2.1-3.4" date="1265803200">- BR openjdk to fix OOM.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:3.2.1-3.5" date="1448020800">- Fix Java object de-serialization vulnerability
- Resolves: CVE-2015-7501</changelog>
</package>
<package pkgid="2fa06f5e9b751cb77077fcdc048ee4f9b729fb854338c6783706ccd6769c992b" name="jakarta-commons-collections-testframework" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="3.5.el6_7"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:3.2.1-3.3" date="1262865600">- Remove maven build. It was maven1.</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:3.2.1-3.4" date="1265803200">- BR openjdk to fix OOM.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:3.2.1-3.5" date="1448020800">- Fix Java object de-serialization vulnerability
- Resolves: CVE-2015-7501</changelog>
</package>
<package pkgid="2e4efc06d6c8d8b09615da15a592974c2ba766769478ac4480efecabce1084eb" name="jakarta-commons-collections-testframework-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="3.5.el6_7"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:3.2.1-3.3" date="1262865600">- Remove maven build. It was maven1.</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:3.2.1-3.4" date="1265803200">- BR openjdk to fix OOM.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:3.2.1-3.5" date="1448020800">- Fix Java object de-serialization vulnerability
- Resolves: CVE-2015-7501</changelog>
</package>
<package pkgid="eb4a978b10e6906c10c064d8c7a989c4cba38c2f1001823659b4b1c0e3224b63" name="jakarta-commons-collections-tomcat5" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="3.5.el6_7"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:3.2.1-3.3" date="1262865600">- Remove maven build. It was maven1.</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:3.2.1-3.4" date="1265803200">- BR openjdk to fix OOM.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:3.2.1-3.5" date="1448020800">- Fix Java object de-serialization vulnerability
- Resolves: CVE-2015-7501</changelog>
</package>
<package pkgid="616756046fea79357db5b9ba7e6a051150d4ee156efe210276201ee5c7eb0655" name="jakarta-taglibs-standard" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="11.7.el6_7"/>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.1.1-11.5" date="1438171200">- Prevent XXE and RCE in JSTL XML tags
- Resolves: CVE-2015-0254</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.1.1-11.6" date="1439812800">- Prevent XXE and RCE in JSTL XML tags
- Apply correction for previous CVE-2015-0254 patch (prevent XXE in &lt;x:transform&gt;)
- Resolves: CVE-2015-0254</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.1.1-11.7" date="1440158400">- Gracefully handle parsers without FSP support (e.g. Java 5 GCJ)
- Resolves: CVE-2015-0254</changelog>
</package>
<package pkgid="2223007eea20c9e2aac11d95dfee25fd5a103878f6b3d7131ea271922ed4c8d8" name="jakarta-taglibs-standard-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="11.7.el6_7"/>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.1.1-11.5" date="1438171200">- Prevent XXE and RCE in JSTL XML tags
- Resolves: CVE-2015-0254</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.1.1-11.6" date="1439812800">- Prevent XXE and RCE in JSTL XML tags
- Apply correction for previous CVE-2015-0254 patch (prevent XXE in &lt;x:transform&gt;)
- Resolves: CVE-2015-0254</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.1.1-11.7" date="1440158400">- Gracefully handle parsers without FSP support (e.g. Java 5 GCJ)
- Resolves: CVE-2015-0254</changelog>
</package>
<package pkgid="dd61590de97cdb910f7a797a86db00ebb675ec8ad927dcbcf5231d3d71e44266" name="jasper" arch="i686">
  <version epoch="0" ver="1.900.1" rel="21.el6_9"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.900.1-19" date="1421668800">- CVE-2014-8157 - dec-&gt;numtiles off-by-one check in jpc_dec_process_sot() (#1183672)
- CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183680)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.900.1-20" date="1493035200">- Multiple security fixes (fixed by thoger):
  CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
  CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
  CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
  CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
  CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
  CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
- Fix implicit declaration warning caused by security fixes above</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.900.1-21" date="1493121600">- Bump release</changelog>
</package>
<package pkgid="65b167d8fc691b4a23358e74b4293733a7f713e6f490eb964281358ee83b21a7" name="jasper-devel" arch="i686">
  <version epoch="0" ver="1.900.1" rel="21.el6_9"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.900.1-19" date="1421668800">- CVE-2014-8157 - dec-&gt;numtiles off-by-one check in jpc_dec_process_sot() (#1183672)
- CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183680)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.900.1-20" date="1493035200">- Multiple security fixes (fixed by thoger):
  CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
  CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
  CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
  CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
  CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
  CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
- Fix implicit declaration warning caused by security fixes above</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.900.1-21" date="1493121600">- Bump release</changelog>
</package>
<package pkgid="c0ee5699ea0363145c3c19a02b99d78b065e0d56a6089038977efc3b78d4d1bd" name="jasper-libs" arch="i686">
  <version epoch="0" ver="1.900.1" rel="21.el6_9"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.900.1-19" date="1421668800">- CVE-2014-8157 - dec-&gt;numtiles off-by-one check in jpc_dec_process_sot() (#1183672)
- CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183680)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.900.1-20" date="1493035200">- Multiple security fixes (fixed by thoger):
  CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
  CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
  CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
  CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
  CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
  CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
- Fix implicit declaration warning caused by security fixes above</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.900.1-21" date="1493121600">- Bump release</changelog>
</package>
<package pkgid="a903b19e73d265815d3a4826bf903c1ab86c73cf2d3492f86cff5491d63511d0" name="jasper-utils" arch="i686">
  <version epoch="0" ver="1.900.1" rel="21.el6_9"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.900.1-19" date="1421668800">- CVE-2014-8157 - dec-&gt;numtiles off-by-one check in jpc_dec_process_sot() (#1183672)
- CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183680)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.900.1-20" date="1493035200">- Multiple security fixes (fixed by thoger):
  CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
  CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
  CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
  CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
  CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
  CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
- Fix implicit declaration warning caused by security fixes above</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.900.1-21" date="1493121600">- Bump release</changelog>
</package>
<package pkgid="32f9dc88de5410aaecfcaa9dd854ef37b7b304ee53565f697dd148cd4173b5a3" name="java-1.6.0-openjdk" arch="i686">
  <version epoch="1" ver="1.6.0.36" rel="1.13.8.1.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.2" date="1430222400">- Bump release to avoid conflict with version in 6.6.z
- Resolves: rhbz#1209066</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.0" date="1437566400">- Update to IcedTea 1.13.8
- Update no_pr2125.patch to work against new version.
- Resolves: rhbz#1235150</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.1" date="1438084800">- Update tarball to fix TCK regression (PR2565)
- Resolves: rhbz#1235150</changelog>
</package>
<package pkgid="471305c7845a029645883148dc00fcdf0c84f70cd82ee1cee0b08f592ce294de" name="java-1.6.0-openjdk" arch="i686">
  <version epoch="1" ver="1.6.0.37" rel="1.13.9.4.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.2" date="1446638400">- Update with new IcedTea &amp; b37 tarballs, including Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447156800">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
</package>
<package pkgid="4ec2bee0a5d151edbd106d77a94a06b615d360c35409c79be3a94a208901ce75" name="java-1.6.0-openjdk" arch="i686">
  <version epoch="1" ver="1.6.0.38" rel="1.13.10.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447156800">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453377600">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295773</changelog>
</package>
<package pkgid="35a00b208d979a9d47fa97111943c4b385916ef450386ed1480257354e25fec3" name="java-1.6.0-openjdk" arch="i686">
  <version epoch="1" ver="1.6.0.39" rel="1.13.11.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453377600">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295773</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462363200">- Update to IcedTea 1.13.11 &amp; OpenJDK 6 b39.
- Resolves: rhbz#1325430</changelog>
</package>
<package pkgid="1cb86e60c918777994768791c539b86b06b39cc4dc460c5f226420c6cc18b9ca" name="java-1.6.0-openjdk" arch="i686">
  <version epoch="1" ver="1.6.0.40" rel="1.13.12.6.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.4" date="1471608000">- Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
- Resolves: rhbz#1350044</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.5" date="1471867200">- Bump source tarballs to missing -DNDEBUG on JDK native code.
- Resolves: rhbz#1350044</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.6" date="1471867201">- Bump source tarballs to try and really fix TCK failures this time.
- Resolves: rhbz#1350044</changelog>
</package>
<package pkgid="f0d08c12422ab8e81a46a6ef7006422fddfd7dc0f7a34230c9c3305ea491851e" name="java-1.6.0-openjdk" arch="i686">
  <version epoch="1" ver="1.6.0.41" rel="1.13.13.1.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483444800">- Update to IcedTea 1.13.13 &amp; OpenJDK 6 b41.
- Fix context for rpath patch following PR3213.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483444801">- Update to new 1.13.13 tarball with PR3275 and PR3276 fixes.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.1" date="1483531200">- Update to new 1.13.13 and b41 tarballs to correct TCK failure.
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="1b223f5fc3a2a94cffdaea399b5c4b5797c2713a19dce9fe1623fb8556c58359" name="java-1.6.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.6.0.36" rel="1.13.8.1.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.2" date="1430222400">- Bump release to avoid conflict with version in 6.6.z
- Resolves: rhbz#1209066</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.0" date="1437566400">- Update to IcedTea 1.13.8
- Update no_pr2125.patch to work against new version.
- Resolves: rhbz#1235150</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.1" date="1438084800">- Update tarball to fix TCK regression (PR2565)
- Resolves: rhbz#1235150</changelog>
</package>
<package pkgid="a1f01f1596bd5c4fb264dbd5a2885dc668e23c07b830ec0bd567f60caba176f2" name="java-1.6.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.6.0.37" rel="1.13.9.4.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.2" date="1446638400">- Update with new IcedTea &amp; b37 tarballs, including Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447156800">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
</package>
<package pkgid="6156062dfa160f6c3c47db6d109f9d147d0105f9e61df522c686dd20d58eb557" name="java-1.6.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.6.0.38" rel="1.13.10.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447156800">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453377600">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295773</changelog>
</package>
<package pkgid="8135fd8809b84dfcdfe5b17fc3412f3728c5f337f99e074b991d1ecbae3dc2c2" name="java-1.6.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.6.0.39" rel="1.13.11.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453377600">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295773</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462363200">- Update to IcedTea 1.13.11 &amp; OpenJDK 6 b39.
- Resolves: rhbz#1325430</changelog>
</package>
<package pkgid="240a249dd5309d9812531fd2bffbdaa11e7a5e33118b11c01600af3fa1802324" name="java-1.6.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.6.0.40" rel="1.13.12.6.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.4" date="1471608000">- Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
- Resolves: rhbz#1350044</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.5" date="1471867200">- Bump source tarballs to missing -DNDEBUG on JDK native code.
- Resolves: rhbz#1350044</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.6" date="1471867201">- Bump source tarballs to try and really fix TCK failures this time.
- Resolves: rhbz#1350044</changelog>
</package>
<package pkgid="839bd6b13076530228c2892b28a763710acb289f84d8f84dc5c013388f7bb25b" name="java-1.6.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.6.0.41" rel="1.13.13.1.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483444800">- Update to IcedTea 1.13.13 &amp; OpenJDK 6 b41.
- Fix context for rpath patch following PR3213.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483444801">- Update to new 1.13.13 tarball with PR3275 and PR3276 fixes.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.1" date="1483531200">- Update to new 1.13.13 and b41 tarballs to correct TCK failure.
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="6d9f7b78ef4b80443229ceade0d7a652c1a7e1a687aa12cd16bcafc9e3fe3241" name="java-1.6.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.6.0.36" rel="1.13.8.1.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.2" date="1430222400">- Bump release to avoid conflict with version in 6.6.z
- Resolves: rhbz#1209066</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.0" date="1437566400">- Update to IcedTea 1.13.8
- Update no_pr2125.patch to work against new version.
- Resolves: rhbz#1235150</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.1" date="1438084800">- Update tarball to fix TCK regression (PR2565)
- Resolves: rhbz#1235150</changelog>
</package>
<package pkgid="1d6e10ad9e7ac173104742f5454e51643b76627cb461c36c1524ffa08841cb7c" name="java-1.6.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.6.0.37" rel="1.13.9.4.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.2" date="1446638400">- Update with new IcedTea &amp; b37 tarballs, including Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447156800">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
</package>
<package pkgid="b1a9ab0680ef2314a203e8a1db00175a1192edac3a18684a3d506beb1c5df0a4" name="java-1.6.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.6.0.38" rel="1.13.10.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447156800">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453377600">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295773</changelog>
</package>
<package pkgid="6ba3c203f6c859edd7371b4666ccb36d49a643263137eef99e015218af132115" name="java-1.6.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.6.0.39" rel="1.13.11.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453377600">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295773</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462363200">- Update to IcedTea 1.13.11 &amp; OpenJDK 6 b39.
- Resolves: rhbz#1325430</changelog>
</package>
<package pkgid="8cdf2a0a1798e5f330dddc21efce2ed11485954dd57a0058ec73e3372f598375" name="java-1.6.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.6.0.40" rel="1.13.12.6.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.4" date="1471608000">- Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
- Resolves: rhbz#1350044</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.5" date="1471867200">- Bump source tarballs to missing -DNDEBUG on JDK native code.
- Resolves: rhbz#1350044</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.6" date="1471867201">- Bump source tarballs to try and really fix TCK failures this time.
- Resolves: rhbz#1350044</changelog>
</package>
<package pkgid="075dc0b490c664ae9f2e4bf0eeb2d8acf15626898a2f021c0fe01870651e4472" name="java-1.6.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.6.0.41" rel="1.13.13.1.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483444800">- Update to IcedTea 1.13.13 &amp; OpenJDK 6 b41.
- Fix context for rpath patch following PR3213.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483444801">- Update to new 1.13.13 tarball with PR3275 and PR3276 fixes.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.1" date="1483531200">- Update to new 1.13.13 and b41 tarballs to correct TCK failure.
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="d1c619cd95afaa023b4c6d69e35b6b76841d4d295951337b138024a4b6c41e67" name="java-1.6.0-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="1.6.0.36" rel="1.13.8.1.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.2" date="1430222400">- Bump release to avoid conflict with version in 6.6.z
- Resolves: rhbz#1209066</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.0" date="1437566400">- Update to IcedTea 1.13.8
- Update no_pr2125.patch to work against new version.
- Resolves: rhbz#1235150</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.1" date="1438084800">- Update tarball to fix TCK regression (PR2565)
- Resolves: rhbz#1235150</changelog>
</package>
<package pkgid="97fbb827f29ebb3b4e30ce37b4572f427855308a27ccf298f9b9d919f9b738b1" name="java-1.6.0-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="1.6.0.37" rel="1.13.9.4.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.2" date="1446638400">- Update with new IcedTea &amp; b37 tarballs, including Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447156800">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
</package>
<package pkgid="f6c8e467874700db37018eb943d04255ccf10b21317acaea433c53ebaa7fb207" name="java-1.6.0-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="1.6.0.38" rel="1.13.10.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447156800">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453377600">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295773</changelog>
</package>
<package pkgid="7a92bfa1cecd0ff8ea10dea8556e3f39a5c301ef765487adc024d8802225e238" name="java-1.6.0-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="1.6.0.39" rel="1.13.11.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453377600">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295773</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462363200">- Update to IcedTea 1.13.11 &amp; OpenJDK 6 b39.
- Resolves: rhbz#1325430</changelog>
</package>
<package pkgid="4e35cfbbc1de94198e39471a53fb5f4f4dbf73e0074dbefde2f0e2d6d9e5326c" name="java-1.6.0-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="1.6.0.40" rel="1.13.12.6.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.4" date="1471608000">- Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
- Resolves: rhbz#1350044</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.5" date="1471867200">- Bump source tarballs to missing -DNDEBUG on JDK native code.
- Resolves: rhbz#1350044</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.6" date="1471867201">- Bump source tarballs to try and really fix TCK failures this time.
- Resolves: rhbz#1350044</changelog>
</package>
<package pkgid="0c46a4ea05b607acc03d503ed39132785e77e3614611d7c286b30c925b765e1c" name="java-1.6.0-openjdk-javadoc" arch="i686">
  <version epoch="1" ver="1.6.0.41" rel="1.13.13.1.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483444800">- Update to IcedTea 1.13.13 &amp; OpenJDK 6 b41.
- Fix context for rpath patch following PR3213.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483444801">- Update to new 1.13.13 tarball with PR3275 and PR3276 fixes.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.1" date="1483531200">- Update to new 1.13.13 and b41 tarballs to correct TCK failure.
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="8201841634ccc6c320868cab8b2b862ad2b6e0f00fc5682e0f7e3b040ab9fd7f" name="java-1.6.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.6.0.36" rel="1.13.8.1.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.35-1.13.7.2" date="1430222400">- Bump release to avoid conflict with version in 6.6.z
- Resolves: rhbz#1209066</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.0" date="1437566400">- Update to IcedTea 1.13.8
- Update no_pr2125.patch to work against new version.
- Resolves: rhbz#1235150</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.36-1.13.8.1" date="1438084800">- Update tarball to fix TCK regression (PR2565)
- Resolves: rhbz#1235150</changelog>
</package>
<package pkgid="31fef60cde1ab3712bc24576dc7ca93b1ec9c807e9eeb479db40495e0f7a4808" name="java-1.6.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.6.0.37" rel="1.13.9.4.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.2" date="1446638400">- Update with new IcedTea &amp; b37 tarballs, including Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447156800">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
</package>
<package pkgid="a3db74f68a1087d8c2ad599ae224a690a929184121118944a2a8fed01d57c1f1" name="java-1.6.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.6.0.38" rel="1.13.10.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.3" date="1447156800">- Update with new IcedTea &amp; b37 tarballs, including more Kerberos fixes for TCK regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453377600">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295773</changelog>
</package>
<package pkgid="1847acff60f2c2d82260d9b94415f446b2ce849d0bbb619fc090bd4e004a05c4" name="java-1.6.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.6.0.39" rel="1.13.11.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.37-1.13.9.4" date="1447243200">- Update with new IcedTea &amp; b37 tarballs, including fix for appletviewer regression.
- Resolves: rhbz#1271927</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.38-1.13.10.0" date="1453377600">- Update to IcedTea 1.13.10 &amp; OpenJDK 6 b38.
- Resolves: rhbz#1295773</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.39-1.13.11.0" date="1462363200">- Update to IcedTea 1.13.11 &amp; OpenJDK 6 b39.
- Resolves: rhbz#1325430</changelog>
</package>
<package pkgid="61ddb8dbc015813e98c1d3a7fd5bd7e3e142fd0f1cd14e55594c8feae1dff819" name="java-1.6.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.6.0.40" rel="1.13.12.6.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.4" date="1471608000">- Non-JIT architectures have not been bootstrapping, due to RPM reading commented macros
- Resolves: rhbz#1350044</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.5" date="1471867200">- Bump source tarballs to missing -DNDEBUG on JDK native code.
- Resolves: rhbz#1350044</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.40-1.13.12.6" date="1471867201">- Bump source tarballs to try and really fix TCK failures this time.
- Resolves: rhbz#1350044</changelog>
</package>
<package pkgid="550bdac16b9246e99a5e35d8a9a67b1fc2d32b1c1142e5eb9aa115869c13b6d1" name="java-1.6.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.6.0.41" rel="1.13.13.1.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483444800">- Update to IcedTea 1.13.13 &amp; OpenJDK 6 b41.
- Fix context for rpath patch following PR3213.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.0" date="1483444801">- Update to new 1.13.13 tarball with PR3275 and PR3276 fixes.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.6.0.41-1.13.13.1" date="1483531200">- Update to new 1.13.13 and b41 tarballs to correct TCK failure.
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="fe9408db1c397f5a633cb93528f24b3cadeead82c4b6d5aaa8106e674971b30d" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.101" rel="2.6.6.1.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1460980800">- Bump to 2.6.6 and u101b00.
- Drop a leading zero from the priority as the update version is now three digits
- Resolves: rhbz#1325425</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1460980801">- Fix ztos handling in templateTable_ppc_64.cpp to be same as others in 7.
- Resolves: rhbz#1325425</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461067200">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325425</changelog>
</package>
<package pkgid="d9424ebc38831f913d44a706e76a94a3662064fd4261d3558900da471e6feec6" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.111" rel="2.6.7.2.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.0" date="1469016000">- Bump to 2.6.7 and u111b00.
- Update SystemTap bundle with fix for PR3091/RH1204159
- Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
- Resolves: rhbz#1350039</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.1" date="1469102400">- Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
- Resolves: rhbz#1350039</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.2" date="1469188800">- Bump to jdk7u111 b01 to fix TCK regressions (7081817 &amp; 8162344)
- Resolves: rhbz#1350039</changelog>
</package>
<package pkgid="fb5e39b8b6559d21900cc258427b50ccbecc6a7fc7bd0bb6eeb9798178034fac" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.121" rel="2.6.8.1.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.0" date="1477656000">- Bump to 2.6.8 and u121b00.
- Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
- Require at least the build-time version of NSS at run-time due to static linking.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001600">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001601">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="75b03f968163bed9281c10c90f7f6052ccb2b5e741b2ddb083173be1bcd9735e" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.131" rel="2.6.9.0.el6_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001600">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486468801">- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="65da98b6e133da9df3e7a279032cc6ccc7308919822d637b30be8861783d1f6f" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.141" rel="2.6.10.1.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.1" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="254aa72830114eb329985c9a47c92eb8cebdbbac1c27e18fefc7a44029e805d2" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.0" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="dc2ab82e067e0d1f47ceeeec7087aaa6ae3f03ed8f25dcc83eaf2e4cfacc0f74" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="082c1725e06a33b796b3491229e2681c0802d8151f3dd9dc203889f61f3ec6bd" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="f25a3b20a16e987256351ad9e4f4f99377ac3dd71c912453c76d2df8a3b0bc21" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.1.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="32a05c8941b5fe9cb3f9e1dd5b557ee77fd4156ff05fa135f001f721e23ca7a6" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578550</changelog>
</package>
<package pkgid="4ff5d2e4d1290c3d8f66304dea20240712363cf0842b7795d54c90294db11f61" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="82348ed91dc5f19783a498db48562486c3277492e2dc36d673c8a2da054ab146" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.0" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="613354b149b68e9aa5cfe4b84163c02d27f0412e86f0305b6369b7ef3eed74aa" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="a3a08f8835de724760d09325ca15e3dbe22935b5a798c5a50675d17cb5e251d7" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="ec8d8b808e972348e4f9a59030333e30cbe6ee8db4fe0e56f26347fe2556060e" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset name in patch.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="fe3953771bb0aa20098466f301e2f93b8a811c0081f959790f8249ef1c5bdf86" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1566561600">- Fix crash in Class.forName0
- Resolves: rhbz#1698274</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Drop JDK-8226318/RH1738637 which is now included upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="53c8ed344688680d5689a0ed27e8ae8b53f552d169d5e648fdd78d75a95263a4" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.251" rel="2.6.21.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1566561600">- Fix crash in Class.forName0
- Resolves: rhbz#1698274</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Drop JDK-8226318/RH1738637 which is now included upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.251-2.6.21.0" date="1580990400">- Bump to 2.6.21 and OpenJDK 7u251-b02.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="9444c4f88cb0815d03f46b1f0cd647ba9fb929dce24a951e81e0c8394cac7732" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.261" rel="2.6.22.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.251-2.6.21.0" date="1580990400">- Bump to 2.6.21 and OpenJDK 7u251-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.261-2.6.22.0" date="1586779200">- Bump to 2.6.22 and OpenJDK 7u261-b02.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.261-2.6.22.1" date="1586865600">- Add release notes from IcedTea.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="56ca41f63ca1006aebd25985ed1e85c1086d1100f82e9338b870130451e9da0c" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.91" rel="2.6.2.2.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.3" date="1436788800">- libsctp is not available on all versions of RHEL 6.
- Resolves: rhbz#1235157</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.1" date="1445256000">- Bump to 2.6.2 and u91b00.
- Resolves: rhbz#1271919</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.2" date="1445342400">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271919</changelog>
</package>
<package pkgid="cabc5ca83cc7be56977993d499578e697e0638e2730e6ea239b01faa5506eddb" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.95" rel="2.6.4.0.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.2" date="1445342400">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271919</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204800">- Bump to 2.6.4 and u95b00.
- Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
- Drop 8072932or8074489 patch as applied upstream in u91b01.
- Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204801">- Remove reference to jre/lib/audio.
- Resolves: rhbz#1295765</changelog>
</package>
<package pkgid="312ad54a46a8ff979af4a857688aba74555dae60442f293a9dfcecfc8183a71c" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.99" rel="2.6.5.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204800">- Bump to 2.6.4 and u95b00.
- Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
- Drop 8072932or8074489 patch as applied upstream in u91b01.
- Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204801">- Remove reference to jre/lib/audio.
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458820800">- Bump to 2.6.5 and u99b00.
- Correct check for fsg.sh in tarball creation script
- Resolves: rhbz#1320656</changelog>
</package>
<package pkgid="a417074a66e3fd1cb7ae3c4bce5362205f37fa3f7e311fcb8357f13b5069e351" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.101" rel="2.6.6.1.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1460980800">- Bump to 2.6.6 and u101b00.
- Drop a leading zero from the priority as the update version is now three digits
- Resolves: rhbz#1325425</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1460980801">- Fix ztos handling in templateTable_ppc_64.cpp to be same as others in 7.
- Resolves: rhbz#1325425</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461067200">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325425</changelog>
</package>
<package pkgid="f342970d534eacc76b38a54612507651fb38a242af3557e2f78df7f6b7d9795f" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.111" rel="2.6.7.2.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.0" date="1469016000">- Bump to 2.6.7 and u111b00.
- Update SystemTap bundle with fix for PR3091/RH1204159
- Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
- Resolves: rhbz#1350039</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.1" date="1469102400">- Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
- Resolves: rhbz#1350039</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.2" date="1469188800">- Bump to jdk7u111 b01 to fix TCK regressions (7081817 &amp; 8162344)
- Resolves: rhbz#1350039</changelog>
</package>
<package pkgid="478624d26041f94872977a20769ea877f9ee161218fc472950506fa9deced520" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.121" rel="2.6.8.1.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.0" date="1477656000">- Bump to 2.6.8 and u121b00.
- Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
- Require at least the build-time version of NSS at run-time due to static linking.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001600">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001601">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="03721a8b88a1242607de0db47b63cf18e07d56a8cf04e397c6b7ccf1142f146e" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.131" rel="2.6.9.0.el6_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001600">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486468801">- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="bcbb50cf5f8b8152b9a49c8644fae8dc2426d9c9710b34ee466f662fb88f54d8" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.141" rel="2.6.10.1.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.1" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="ac82aa057cec00b6e1b6a17ef8c73c551581425d8f4efa0fae9a4285b95e6dbd" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.0" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="d499e30193daec1933b6b6cc60f849c0f1a70f5603b90ecb4ee54fd37ec804b5" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="1d1b9c824c4a90d2cd43ef463b0692a65f2217e0b97c006b17a410cd23c09b6e" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="bf8c85e168297d4e560f38243f7dcbda527964e6d7f45af4d9f49e0e225dc78f" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.1.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="1dc582f7817231e97d8a2e393f011597ffa33203e9f10fe90c409f87e3201720" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578550</changelog>
</package>
<package pkgid="48f5af48c5381630e09350b844f7336d20f4e3a60902b99142a66280ef5495b7" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="c4a07d817a7d4b11154163d727267be47760ceede25d0c995aa9a7adc4e6c1c7" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.0" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="0c37435953b36a7859ec2f38e034c2708730bd19a18007ba2bd04e4798596dc8" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="c5bee6fe0823b638b5482764099d1d77e930ead6fbb1a042c7c5efda44db9c8e" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="f4ba1538b17e259fd1e0a4d9c89ad82cccde3c7943382bd24534f2fbbb0f2a3e" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset name in patch.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="895d609e7c10ec7303795c5a56847dcb3d1817848b95929d8841131a2564be1b" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1566561600">- Fix crash in Class.forName0
- Resolves: rhbz#1698274</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Drop JDK-8226318/RH1738637 which is now included upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="af419a2c02991a045c55337485f140f6d2142a3a150f195eb808d238eb0e70ff" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.251" rel="2.6.21.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1566561600">- Fix crash in Class.forName0
- Resolves: rhbz#1698274</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Drop JDK-8226318/RH1738637 which is now included upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.251-2.6.21.0" date="1580990400">- Bump to 2.6.21 and OpenJDK 7u251-b02.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="97a630c706bb2d5d37e48a5300cc7ea735ecd4ca10c517602a7ef5240233607a" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.261" rel="2.6.22.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.251-2.6.21.0" date="1580990400">- Bump to 2.6.21 and OpenJDK 7u251-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.261-2.6.22.0" date="1586779200">- Bump to 2.6.22 and OpenJDK 7u261-b02.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.261-2.6.22.1" date="1586865600">- Add release notes from IcedTea.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="dadcc87391840c7a4a8b7260a0b2f80d2b5a4d45621e4212f2d39074d0348fec" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.91" rel="2.6.2.2.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.3" date="1436788800">- libsctp is not available on all versions of RHEL 6.
- Resolves: rhbz#1235157</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.1" date="1445256000">- Bump to 2.6.2 and u91b00.
- Resolves: rhbz#1271919</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.2" date="1445342400">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271919</changelog>
</package>
<package pkgid="5bad36c308541ae73bb624ccd7e5dd93c57b28885a7edb893bf56b5e6e96f814" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.95" rel="2.6.4.0.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.2" date="1445342400">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271919</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204800">- Bump to 2.6.4 and u95b00.
- Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
- Drop 8072932or8074489 patch as applied upstream in u91b01.
- Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204801">- Remove reference to jre/lib/audio.
- Resolves: rhbz#1295765</changelog>
</package>
<package pkgid="d1fe5a436347ed12476d85faad8551d1d5dbc03260c5c1720fed7bf0102e6ebc" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.99" rel="2.6.5.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204800">- Bump to 2.6.4 and u95b00.
- Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
- Drop 8072932or8074489 patch as applied upstream in u91b01.
- Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204801">- Remove reference to jre/lib/audio.
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458820800">- Bump to 2.6.5 and u99b00.
- Correct check for fsg.sh in tarball creation script
- Resolves: rhbz#1320656</changelog>
</package>
<package pkgid="2d99792cbb58e064e94fe1cbf0103ca69ba916c5adef500e5d4064eaaa2c63b3" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.101" rel="2.6.6.1.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1460980800">- Bump to 2.6.6 and u101b00.
- Drop a leading zero from the priority as the update version is now three digits
- Resolves: rhbz#1325425</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1460980801">- Fix ztos handling in templateTable_ppc_64.cpp to be same as others in 7.
- Resolves: rhbz#1325425</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461067200">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325425</changelog>
</package>
<package pkgid="6ed5d20373a0500f70e1fc4f14788a7b28b696b2b2f4205704de9f43f377e555" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.111" rel="2.6.7.2.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.0" date="1469016000">- Bump to 2.6.7 and u111b00.
- Update SystemTap bundle with fix for PR3091/RH1204159
- Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
- Resolves: rhbz#1350039</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.1" date="1469102400">- Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
- Resolves: rhbz#1350039</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.2" date="1469188800">- Bump to jdk7u111 b01 to fix TCK regressions (7081817 &amp; 8162344)
- Resolves: rhbz#1350039</changelog>
</package>
<package pkgid="917e0e0879cca3565132b02bfd8821a38c9ebc8e3639f96c080e8da951d34902" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.121" rel="2.6.8.1.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.0" date="1477656000">- Bump to 2.6.8 and u121b00.
- Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
- Require at least the build-time version of NSS at run-time due to static linking.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001600">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001601">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="48af5f15f07c5cd481e568bda5cfc4b7eab2c8a109eab01f5cfb4dddcfe46d86" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.131" rel="2.6.9.0.el6_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001600">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486468801">- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="4fe521cd9af0c0f23c2dab0ee0342053917b78c69ce5b669506d1f44b3b9f8f7" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.141" rel="2.6.10.1.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.1" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="84a31728426441081d0c3b85746d99311e76dd96a8dece58e88fc552fc2cd89d" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.0" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="096e4e15785da91b48383f4350114509ac6094243d952c71a9070a60ae945624" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="da10a92d2fbc9cb7be9a2b512ccd7ffe65b06dc374cf655b875bf97d6553848f" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="8ef53cdedae667bb6112b15e841e5e74c7ea86024a1e8e65e205a6ff949da1fe" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.1.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="b4a3a2c5803388d24bcf1dd446538ae952d9c412ff9dee5bcde3d6d301c384b6" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578550</changelog>
</package>
<package pkgid="f347fdf19cef4e14dceaaad0360d7fbca6e6db33e80efd529c14c2a1cc93be85" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="1e46c05eab97512f40f138c296c916db29e0f0071b56d2693c76a8f6e1eca80d" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.0" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="44b13aec0af6fc44e7fc8e98b705592165c7327f821714ceb19e8cbe68012f19" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="1701547f1fa59ba1095077383400fb76932e4e7171a52c89f0d64509c0269664" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="981a285c171ffaea4c02506d98175dfa93fd1fe7f3be30e3e15bcfca7890f9ce" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset name in patch.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="fd8e3b0d507c4db699df40b2a35324bd1bf627ed5e1c0d07ec049e26b1a92835" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1566561600">- Fix crash in Class.forName0
- Resolves: rhbz#1698274</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Drop JDK-8226318/RH1738637 which is now included upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="62615675de16c7aa87e357a5dca9d83db0dfdd9173e6a1a9ff15416dbd9a124f" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.251" rel="2.6.21.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1566561600">- Fix crash in Class.forName0
- Resolves: rhbz#1698274</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Drop JDK-8226318/RH1738637 which is now included upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.251-2.6.21.0" date="1580990400">- Bump to 2.6.21 and OpenJDK 7u251-b02.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="9354144a59e73c1737c53da9984f4cb8de09cffe0a281755f5d0abd878755f52" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.261" rel="2.6.22.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.251-2.6.21.0" date="1580990400">- Bump to 2.6.21 and OpenJDK 7u251-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.261-2.6.22.0" date="1586779200">- Bump to 2.6.22 and OpenJDK 7u261-b02.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.261-2.6.22.1" date="1586865600">- Add release notes from IcedTea.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="b6fa4c9a99b1939e5b25c1edb99c4a053c349ebb35eb174f0e500f91da491615" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.91" rel="2.6.2.2.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.3" date="1436788800">- libsctp is not available on all versions of RHEL 6.
- Resolves: rhbz#1235157</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.1" date="1445256000">- Bump to 2.6.2 and u91b00.
- Resolves: rhbz#1271919</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.2" date="1445342400">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271919</changelog>
</package>
<package pkgid="203005f1e7d5201a28109d818b2cc1cb64e843c9b7f8c2c93a8cd913fe9a8e56" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.95" rel="2.6.4.0.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.2" date="1445342400">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271919</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204800">- Bump to 2.6.4 and u95b00.
- Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
- Drop 8072932or8074489 patch as applied upstream in u91b01.
- Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204801">- Remove reference to jre/lib/audio.
- Resolves: rhbz#1295765</changelog>
</package>
<package pkgid="65508e6168e1a3e775746a3f40e8d65dfb90cf78b6449e765fd66026138c780b" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.99" rel="2.6.5.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204800">- Bump to 2.6.4 and u95b00.
- Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
- Drop 8072932or8074489 patch as applied upstream in u91b01.
- Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204801">- Remove reference to jre/lib/audio.
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458820800">- Bump to 2.6.5 and u99b00.
- Correct check for fsg.sh in tarball creation script
- Resolves: rhbz#1320656</changelog>
</package>
<package pkgid="3030c2513883d0cd33a7362b2acd90698987e4f1e3bd4ee604dad51ea97f0bd5" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.101" rel="2.6.6.1.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1460980800">- Bump to 2.6.6 and u101b00.
- Drop a leading zero from the priority as the update version is now three digits
- Resolves: rhbz#1325425</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1460980801">- Fix ztos handling in templateTable_ppc_64.cpp to be same as others in 7.
- Resolves: rhbz#1325425</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461067200">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325425</changelog>
</package>
<package pkgid="fbcadfaa7ceac5cfdc4677a48acbfa6323e7f13b971e3bf9277116356f89f9c8" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.111" rel="2.6.7.2.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.0" date="1469016000">- Bump to 2.6.7 and u111b00.
- Update SystemTap bundle with fix for PR3091/RH1204159
- Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
- Resolves: rhbz#1350039</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.1" date="1469102400">- Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
- Resolves: rhbz#1350039</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.2" date="1469188800">- Bump to jdk7u111 b01 to fix TCK regressions (7081817 &amp; 8162344)
- Resolves: rhbz#1350039</changelog>
</package>
<package pkgid="506a38abfa34a5070a2014a09236e699a6812c1586c6a1b819a708a8bb573b82" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.121" rel="2.6.8.1.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.0" date="1477656000">- Bump to 2.6.8 and u121b00.
- Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
- Require at least the build-time version of NSS at run-time due to static linking.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001600">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001601">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="cec52da5b4651e98942f333978cc8e2adf6706b747e796c6a442642658caa563" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.131" rel="2.6.9.0.el6_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001600">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486468801">- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="a93ef7cabb7ebfbce94b8018fadf4524e08de64d9b6ef3026e1d25e9f3b7a3b5" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.141" rel="2.6.10.1.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.1" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="d4d32441041b1eac71510bd2b9ad86ca681654ff613c2adfac682744786f4f18" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.0" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="0546099399c7a1e7f1a31e39884d901b09a424aa4cfe1c778714a9e6e527e7b2" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="5c27343a2890e6dec0a67673878033699d26c2463f0b0cc8012219c70256ff31" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="a6fc3f473c1ba129b72cb00bfcd1763fe1ffa88a14cc68f030a8d1ab3bed5684" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.1.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="d618206ce0642907785f6d04977208dfc0ddf89ce50e08f2a1dc8d4171de651a" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578550</changelog>
</package>
<package pkgid="1413de66858fffd7be69dd4f496177c1ee21b8875cc20df1bcf3a99c75a5c83a" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="3a7a1024d765008366cde1ecbd58089d9d79f3bbe478ee161bf79d239f7f0cd4" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.0" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="0d7fc07ee894fd26c35ae8e74cc26708df8cf01a326b86efd7806193b8a60f67" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="f1a9617fd9bfb764a9f48d351d70fe472c97c42d4bca1f9708466c2fc5302605" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="1deac5b3b6d3b2b55bdcb848981c61d8f4196eb01b23fdb2de3e5ee47e7a10f5" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset name in patch.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="f11b5f289c40d212ad78b789e0c87076e9f30223cbe579418314a29139678cbb" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1566561600">- Fix crash in Class.forName0
- Resolves: rhbz#1698274</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Drop JDK-8226318/RH1738637 which is now included upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="a4fa4151a35710d667b1c09c3d00684f8d3c200b74e9075cfd08ddd15585e850" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.251" rel="2.6.21.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1566561600">- Fix crash in Class.forName0
- Resolves: rhbz#1698274</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Drop JDK-8226318/RH1738637 which is now included upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.251-2.6.21.0" date="1580990400">- Bump to 2.6.21 and OpenJDK 7u251-b02.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="5b9f02ba2ad600fb3499389613ac77dc9176a41a7d9876768a59ed01fed443b1" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.261" rel="2.6.22.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.251-2.6.21.0" date="1580990400">- Bump to 2.6.21 and OpenJDK 7u251-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.261-2.6.22.0" date="1586779200">- Bump to 2.6.22 and OpenJDK 7u261-b02.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.261-2.6.22.1" date="1586865600">- Add release notes from IcedTea.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="1f97a870919146bb9c758922b20528d790247d77eeaf7e3a2d49f781ef2f0e74" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.91" rel="2.6.2.2.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.3" date="1436788800">- libsctp is not available on all versions of RHEL 6.
- Resolves: rhbz#1235157</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.1" date="1445256000">- Bump to 2.6.2 and u91b00.
- Resolves: rhbz#1271919</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.2" date="1445342400">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271919</changelog>
</package>
<package pkgid="b92229e59b53b81a0c10d5650e353f60ce3166cb16c883951b6d606c90797e3c" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.95" rel="2.6.4.0.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.2" date="1445342400">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271919</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204800">- Bump to 2.6.4 and u95b00.
- Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
- Drop 8072932or8074489 patch as applied upstream in u91b01.
- Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204801">- Remove reference to jre/lib/audio.
- Resolves: rhbz#1295765</changelog>
</package>
<package pkgid="795f8fbd634d99376e14a78b88d9300dc906e9cd531dafd8125e8dcc0b852985" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.99" rel="2.6.5.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204800">- Bump to 2.6.4 and u95b00.
- Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
- Drop 8072932or8074489 patch as applied upstream in u91b01.
- Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204801">- Remove reference to jre/lib/audio.
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458820800">- Bump to 2.6.5 and u99b00.
- Correct check for fsg.sh in tarball creation script
- Resolves: rhbz#1320656</changelog>
</package>
<package pkgid="c33059dac2b0fe01872e963d66e465181a82b8add7756683925d7572471e1a13" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.101" rel="2.6.6.1.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1460980800">- Bump to 2.6.6 and u101b00.
- Drop a leading zero from the priority as the update version is now three digits
- Resolves: rhbz#1325425</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.101-2.6.6.0" date="1460980801">- Fix ztos handling in templateTable_ppc_64.cpp to be same as others in 7.
- Resolves: rhbz#1325425</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461067200">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325425</changelog>
</package>
<package pkgid="7ced403bd12bd2c9dc33eb243120d3c90dd617a6663f23b0b7cc9bead8983014" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.111" rel="2.6.7.2.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.0" date="1469016000">- Bump to 2.6.7 and u111b00.
- Update SystemTap bundle with fix for PR3091/RH1204159
- Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
- Resolves: rhbz#1350039</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.1" date="1469102400">- Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
- Resolves: rhbz#1350039</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.2" date="1469188800">- Bump to jdk7u111 b01 to fix TCK regressions (7081817 &amp; 8162344)
- Resolves: rhbz#1350039</changelog>
</package>
<package pkgid="8050af534d1f41964d8687da5dcd7c8f4baa155256f2cd545f6035c05705e659" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.121" rel="2.6.8.1.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.0" date="1477656000">- Bump to 2.6.8 and u121b00.
- Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
- Require at least the build-time version of NSS at run-time due to static linking.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001600">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001601">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="a845fbadfc671146d55fdd1c2bad94fbaf2a2580ca15fa5bec340897c93d66aa" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.131" rel="2.6.9.0.el6_8"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1478001600">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.0" date="1486468801">- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="01b494851673e415901f52fd8ab1fb640172874b5ef9796c2f84d09620962c0e" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.141" rel="2.6.10.1.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.1" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="7e0a8460601daa5b35073e96bcbff3cf77af456be802543bbfaa7de8ebfa7818" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.0" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="515ac72a5bde1be2d109f2c59e6d3bdd49bec5913df546dd682960a3f8a6c6d7" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="98862eff8089afd21f8157e3688e4a5ebf8766219fdc2411822c3b1943848dda" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="dad7428b6958bb1289c031fb3828397237ceed86fd0537968bfd85be3e28d62d" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.1.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="fea07046db1f3df49578f67e9785046989e3a1379e811e887145378ddf1aafd0" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578550</changelog>
</package>
<package pkgid="5efb45dd9343b65f2b96b3ec56a2036898d6b4328fd38884a1443d1a044cf4cc" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="2023cae8abc619369126ae22052a08f967c630f8056b492b8a34d9f2951c8cff" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.201" rel="2.6.16.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.16.0" date="1540209600">- Bump to 2.6.16 and u201b00.
- Update 8076221/PR2809 (disable RC4) to apply after 8208350 (disable DES)
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="4f27be557451956eb552fb98706203f7f2d83aaa65077758aa030bb5900d7feb" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.211" rel="2.6.17.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.201-2.6.17pre01.0" date="1550750400">- Bump to 2.6.17pre01.
- Add support for icedtea_snapshot so we can build pre-releases.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="1b1a87d44481db1a881e66e46409a250883ab49e3a95fcfba94c55448794f776" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.221" rel="2.6.18.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.211-2.6.17.0" date="1551096000">- Bump to 2.6.17.
- Adjust jdk8076221-pr2809-disable_rc4_cipher_suites.patch to apply after 8211883
- Resolves: rhbz#1661577</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.211-2.6.17.1" date="1551268800">- Produce debug symbols for libpulse-java.so
- Set IT_CFLAGS=-g so that debug symbols for the pulse audio
- native library are being produced. This is needed to fix
- rpmdiff errors of missing .debug_info in pulse-java.so.debug.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.221-2.6.18.0" date="1555416000">- Bump to 2.6.18 and OpenJDK 7u221-b02.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="59565f0a4868c52f39609ba1fb68eb1656bfa1f8c4c4a98efc069439b129a27c" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.231" rel="2.6.19.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278400">- Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
- Fix fsg.sh to fail if patching fails.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.0" date="1563278401">- Update tapset name in patch.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278402">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="ea26a1e526355d46ec29e4531670dac4142555a92ea4443f6b55b9baa120afeb" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.241" rel="2.6.20.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.1" date="1563278400">- Add missing hyphen in tapset filename.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1566561600">- Fix crash in Class.forName0
- Resolves: rhbz#1698274</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Drop JDK-8226318/RH1738637 which is now included upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="95ce07c10622460032e590743934c04718a190bf58afa5efb48e28cee90fad78" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.251" rel="2.6.21.0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.231-2.6.19.2" date="1566561600">- Fix crash in Class.forName0
- Resolves: rhbz#1698274</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.241-2.6.20.0" date="1571140800">- Bump to 2.6.20 and OpenJDK 7u241-b01.
- Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Drop JDK-8226318/RH1738637 which is now included upstream.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.251-2.6.21.0" date="1580990400">- Bump to 2.6.21 and OpenJDK 7u251-b02.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="3ef2a31eca98086606607b07e38759d8f64f6d287732f2cbcbd9e7f7384fb974" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.261" rel="2.6.22.1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.251-2.6.21.0" date="1580990400">- Bump to 2.6.21 and OpenJDK 7u251-b02.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.261-2.6.22.0" date="1586779200">- Bump to 2.6.22 and OpenJDK 7u261-b02.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.261-2.6.22.1" date="1586865600">- Add release notes from IcedTea.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="0dae0d67ccabcc03b8ad6c75b24333bcdb9e204154f78fc339efda4298837ef5" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.91" rel="2.6.2.2.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.85-2.6.1.3" date="1436788800">- libsctp is not available on all versions of RHEL 6.
- Resolves: rhbz#1235157</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.91-2.6.2.1" date="1445256000">- Bump to 2.6.2 and u91b00.
- Resolves: rhbz#1271919</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.2" date="1445342400">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271919</changelog>
</package>
<package pkgid="7cc08ab5f9eae911e06e02534e67eda83824dbe32df4d2f16abd962c8102050c" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.95" rel="2.6.4.0.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.91-2.6.2.2" date="1445342400">- added and applied patch500 8072932or8074489.patch to fix tck failure
- Resolves: rhbz#1271919</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204800">- Bump to 2.6.4 and u95b00.
- Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
- Drop 8072932or8074489 patch as applied upstream in u91b01.
- Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204801">- Remove reference to jre/lib/audio.
- Resolves: rhbz#1295765</changelog>
</package>
<package pkgid="08606567b454f70a9559344d06d6a37d0d6c0e8403d2380f73185727d4cb34cb" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.99" rel="2.6.5.0.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204800">- Bump to 2.6.4 and u95b00.
- Backport tarball creation script from OpenJDK 8 RPMs and update fsg.sh to work with it.
- Drop 8072932or8074489 patch as applied upstream in u91b01.
- Drop installation of soundfont symlink following inclusion of 8140620/PR2710 in 2.6.3
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.95-2.6.4.0" date="1453204801">- Remove reference to jre/lib/audio.
- Resolves: rhbz#1295765</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.99-2.6.5.0" date="1458820800">- Bump to 2.6.5 and u99b00.
- Correct check for fsg.sh in tarball creation script
- Resolves: rhbz#1320656</changelog>
</package>
<package pkgid="9d1f64999d19e5e4ce39ee656f67a045a1732fa0bb868d53054ac31288888d15" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.101" rel="3.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-1.b13" date="1467633600">- Add workaround for a typo in the CORBA security fix, 8079718
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-2.b13" date="1468152000">- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-3.b13" date="1468238400">- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
- Resolves: rhbz#1350034</changelog>
</package>
<package pkgid="50a10f378f336f88be201c3b4c937c67b4aa451193ceb515cbd98246a4f5c604" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.111" rel="0.b15.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1475841600">- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100800">- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100801">- added nss restricting requires
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="4ba00a9c1a7199faa6d9e40f67bd21cb0c1e12748541055d1096c83310a365db" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.121" rel="0.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-3.b14" date="1484568000">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-0.b16" date="1484568001">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-0.b13" date="1484568002">- Update to aarch64-jdk8u121-b13.
- Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
- Re-generate RH1393047 ObjectInputStream patch against u121.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="fba0a20c7de9529338be08d2aee126a38beed097201eef779b11dfe7f938fad2" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.131" rel="0.b11.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568000">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="b088af38fa3f68a6a3fa048891d8716a8f5a34ec29526ee5ccb782474e90ac58" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="ff24600f03a627ec25fa8b9df6673940390bd403dbc2204265a5492f581465be" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="75c27a4325c23f932d5e1e55897728832784acc7d104a49c8af6acaa4a674216" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="3.b14.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="f2ae7769e64035a501ea0814d5bc505ed076230c3fca3a8a03e5140acb16b58f" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="3.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="e577073c1777c451f4a525cca618b323253c3c74b25b5622f7fa5fefe4586e4a" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el6_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578545</changelog>
</package>
<package pkgid="6ad4b5b151ab7deccd5f67055b1f5ebe9c8f772b1aa99bd8ae06321c9808b734" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742402">- Update to aarch64-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="10da244516b66ada115e244044a4b932880b774f6bf294c0471ad78820aff0a1" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.191.b12" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-0" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="6f7232080a975cc500633d4c6ea9c7c388fd56270190a9fca05f9d741579e93b" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.201.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - PR3548/RH1540242
  - JDK-6260348/PR3066
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8205104/PR3539/RH1548475
  - JDK-8206406/PR3610/RH1597825
  - JDK-8201495/PR2415
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
  - RH1649731
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-1" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640002">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="23ff2c4076e5012c65e1b342a4dbab9cf0b337cb3f7023f6ed723a4979f6f76d" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-1" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="8feda1829202c84b91c6591f97fa4e58cce69b8f4fa92e21b2b4e52318cd942e" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="2007cad8efe37311e983ee987dd861b47d2934b278a4f3b0f13b3cf0871c71f6" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="40131a4374ebdc03084c87a5a7a87f681e9be5761a7eecb7f330f35a6a8dae37" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.242.b07" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="f32e6265854ef86415f1f2802fbdae64e922f7e44813549058b49f5654ac3f06" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.252.b09" rel="2.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-0" date="1586174400">- Update to aarch64-shenandoah-jdk8u242-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-1" date="1586692800">- Make use of --with-extra-asflags introduced in jdk8u252-b01.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-2" date="1586865600">- Add release notes.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="37343f2f5374544fde41c18a3fc67e5c5c37e2cf6091ed5ad88591920b9b12e8" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.262.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.0.ea" date="1594468800">- Update to aarch64-shenandoah-jdk8u262-b09.
- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.1.ea" date="1594555200">- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b10-0" date="1594555201">- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811</changelog>
</package>
<package pkgid="1fbb2d15316d9c7a1ef0e75726fefb7c074cb53d3a7fb3c3d5a0d2b140746648" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="0.el6_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1603281600">- Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="2879b4a1978a21f0ab50a2a62b90d3c3f4ba49db8d0519452a88b520779d613b" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.65" rel="0.b17.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.60-4.b27" date="1441368000">- updated to u60 (1255352)
- Resolves: rhbz#1257654</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.51-4.b16" date="1441800000">- bumped release to do an build, so test whether 1251560 was really fixed
- Resolves: rhbz#1254197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-0.b17" date="1444910400">- October 2015 security update to u65b17.
- Add script for generating OpenJDK tarballs from a local Mercurial tree.
- Update RH1191652 patch to build against current AArch64 tree.
- Use appropriate source ID to avoid unpacking both tarballs on AArch64.
- Fix library removal script so jpeg, giflib and png sources are removed.
- Update system-lcms.patch to regenerated upstream (8042159) version.
- Drop LCMS update from rhel6-built.patch
- Resolves: rhbz#1257654</changelog>
</package>
<package pkgid="6ef1ba94ba6915485f70c9fddf3f4f48af05b82e9520d31f727c586cb3cadc76" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.71" rel="1.b15.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-4.b17" date="1452686400">- Add flag logic back to spec file but disable for now.
- Restore system-lcms.patch as used in October CPU.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-0.b15" date="1452686401">- January 2016 security update to u71b15.
- Improve verbosity and helpfulness of tarball generation script.
- Update patch documentation using version originally written for Fedora.
- Drop prelink requirement as we no longer use execstack.
- Drop ifdefbugfix patch as this is fixed upstream.
- Provide optional boostrap build and turn it off by default.
- Add patch for size_t formatting on s390 as size_t != intptr_t there.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
</package>
<package pkgid="d9963026966d0207d8252da3ba9453de29d828805a0889717011c717b2136388" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.77" rel="0.b03.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
</package>
<package pkgid="bf18a00debdf7b779f23a902ea59f4f9faf7dff5b546a223aa2a84141c1a4fc2" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.91" rel="0.b14.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.91-1.b03" date="1460289600">- Update to u91b14.
- Resolves: rhbz#1325420</changelog>
</package>
<package pkgid="ae0ec969e10cd4e3ca634a6086dd032c6366e0f9f63e4c177429c00a1ddfff41" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.101" rel="3.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-1.b13" date="1467633600">- Add workaround for a typo in the CORBA security fix, 8079718
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-2.b13" date="1468152000">- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-3.b13" date="1468238400">- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
- Resolves: rhbz#1350034</changelog>
</package>
<package pkgid="6088bb59e776a3dd5a065534d6567475cce702d7c9ff9b359f495ddb59242d8d" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.111" rel="0.b15.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1475841600">- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100800">- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100801">- added nss restricting requires
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="ab91bbd72096de9ff9c1ae292c8f1c47fcb32a5bca75c423f2b8644b4500d835" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.121" rel="0.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-3.b14" date="1484568000">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-0.b16" date="1484568001">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-0.b13" date="1484568002">- Update to aarch64-jdk8u121-b13.
- Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
- Re-generate RH1393047 ObjectInputStream patch against u121.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="467b4d64e1a2c9dbe9e953988d37935e0afb4c4d115515bae294bc6357b4e7f7" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.131" rel="0.b11.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568000">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="1173ecc14be7e918c001f7b1862b85a1d52d0c165792043d486c2fd152475025" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="904cb03cdbcd05038aa7437cbfa2807af7fd00c2150db9460d81e602e31bf412" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="b2418fa8d02f22732f268dcad8f117693ad772ed25a80fe579c850cdc599b10f" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="3.b14.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="80042ae7cceef019b44a388104d0fa9a04f97ad83f5f2dafdb7c72df7e574818" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="3.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="319b3022fc9ffedce416f8300be65d90aea948552db81c48c1509b5757253cb5" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el6_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578545</changelog>
</package>
<package pkgid="a4db9ad2b549d666e8b03203b045f26021bce14f810f576e3d0a33d54c37e68b" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742402">- Update to aarch64-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="9f22b948ea7b369cd14d1e12c3e4d08f4c0e7337eac916370d6e21daedb483a8" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.191.b12" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-0" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="d672da50aee63b45d677a7829bc42b3950feccf17722d93567f0234e4426e9ec" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.201.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - PR3548/RH1540242
  - JDK-6260348/PR3066
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8205104/PR3539/RH1548475
  - JDK-8206406/PR3610/RH1597825
  - JDK-8201495/PR2415
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
  - RH1649731
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-1" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640002">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="ff3f57c38cdfa99a6f5250e0bc204f54bdb7eb3f13ee3f0e5d3a9f208efdeee0" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-1" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="8d28cf2d20ca5380e083529a1c8cdd2d8d7486537303835de59d7ba12efe3f74" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="3924ec110310bb56cbbe0b3544e942ae476ddfc769175bdc3a3ce578f5a94633" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="08ccbe02f249367e84bfe9d4670bc8e6dca28446d6e455c8e2fd2f7b611f8073" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.242.b07" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="d7d1b71531d39de5ac508b165da20c45a3d2a32beffa28079deeb0174358fbe7" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.252.b09" rel="2.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-0" date="1586174400">- Update to aarch64-shenandoah-jdk8u242-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-1" date="1586692800">- Make use of --with-extra-asflags introduced in jdk8u252-b01.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-2" date="1586865600">- Add release notes.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="5207a1282a0dc55be458421408bf0cb7c40f2a5f51593a4a9f676a0371d3b869" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.262.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.0.ea" date="1594468800">- Update to aarch64-shenandoah-jdk8u262-b09.
- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.1.ea" date="1594555200">- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b10-0" date="1594555201">- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811</changelog>
</package>
<package pkgid="3e0f240d762b8848a767b68df2a5bf02b148a8222374021e332a970684de5d4b" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="0.el6_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1603281600">- Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="053d5f66afd27466a0830c8b9d2a27648e976dc07921174b92e7ff4eda22c131" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.65" rel="0.b17.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.60-4.b27" date="1441368000">- updated to u60 (1255352)
- Resolves: rhbz#1257654</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.51-4.b16" date="1441800000">- bumped release to do an build, so test whether 1251560 was really fixed
- Resolves: rhbz#1254197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-0.b17" date="1444910400">- October 2015 security update to u65b17.
- Add script for generating OpenJDK tarballs from a local Mercurial tree.
- Update RH1191652 patch to build against current AArch64 tree.
- Use appropriate source ID to avoid unpacking both tarballs on AArch64.
- Fix library removal script so jpeg, giflib and png sources are removed.
- Update system-lcms.patch to regenerated upstream (8042159) version.
- Drop LCMS update from rhel6-built.patch
- Resolves: rhbz#1257654</changelog>
</package>
<package pkgid="067c3f6afc937b621a32d650715d61f0240391b4155b8264e9d2e5007b8f9ba7" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.71" rel="1.b15.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-4.b17" date="1452686400">- Add flag logic back to spec file but disable for now.
- Restore system-lcms.patch as used in October CPU.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-0.b15" date="1452686401">- January 2016 security update to u71b15.
- Improve verbosity and helpfulness of tarball generation script.
- Update patch documentation using version originally written for Fedora.
- Drop prelink requirement as we no longer use execstack.
- Drop ifdefbugfix patch as this is fixed upstream.
- Provide optional boostrap build and turn it off by default.
- Add patch for size_t formatting on s390 as size_t != intptr_t there.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
</package>
<package pkgid="9b39db177250c282e1af0f0ad0da7eb6584d5913d2db620dc30621980c344c1d" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.77" rel="0.b03.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
</package>
<package pkgid="fcb421528e09d3ad5aba2f1d0bbe061fa33c93e725a509c968eeaebe2d6b7fa8" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.91" rel="0.b14.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.91-1.b03" date="1460289600">- Update to u91b14.
- Resolves: rhbz#1325420</changelog>
</package>
<package pkgid="af05db5c4a0cc684a664dd3c6f232fdaf3b36795fde211de33071ad2a37c27db" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.101" rel="3.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-1.b13" date="1467633600">- Add workaround for a typo in the CORBA security fix, 8079718
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-2.b13" date="1468152000">- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-3.b13" date="1468238400">- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
- Resolves: rhbz#1350034</changelog>
</package>
<package pkgid="17714d5f6fcb41eb16aaaaadf8d1735d9f136e44e0922ac257990299daf307e4" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.111" rel="0.b15.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1475841600">- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100800">- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100801">- added nss restricting requires
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="ff434104ef76c1dbae3ec62364ab37e6d91494156cb8ce1eb4b013573c06292b" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.121" rel="0.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-3.b14" date="1484568000">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-0.b16" date="1484568001">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-0.b13" date="1484568002">- Update to aarch64-jdk8u121-b13.
- Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
- Re-generate RH1393047 ObjectInputStream patch against u121.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="3af5575655df5104e7e603e04c6a91ef54d5f95a357e9c88124bf21ecefa26c0" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.131" rel="0.b11.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568000">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="e3687536e4fb80e82f43cd0c112741360fa30506a41634b3e75c99f6496f81ca" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="6be117ded0f561f1a29e6676900daa47e6b640f98c0712280bbb1087424762ad" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="057ee2984904346d3b0f14c954073804deb8bb8b691bfd996cb071aaa45ae8cc" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="3.b14.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="1e7d80ba45b7f095600c18c1213b212ed6b8c1505646236b8aff7ffe1dccee22" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="3.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="79bfa61eddd8de803fb82d60de4a926f340224b936c8cae45f43716228852e3a" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el6_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578545</changelog>
</package>
<package pkgid="3278a4573468a458a41401274b652b0816e571f87278e0169188ee31a8bde442" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742402">- Update to aarch64-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="41977a5638c8c8925df1d25eb2f32ec6962da23a009da1ed043b9aaec7726613" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.191.b12" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-0" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="4da90a03f97d920766257b1c83ab2a37bc733435294edee44a12c735c7c3ae28" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.201.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - PR3548/RH1540242
  - JDK-6260348/PR3066
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8205104/PR3539/RH1548475
  - JDK-8206406/PR3610/RH1597825
  - JDK-8201495/PR2415
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
  - RH1649731
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-1" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640002">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="1b0408e9c4c2c179f71622d939235acefed4efc280007708f98d8fede9a3cda5" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-1" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="9fa34cdf6fb9e5cd25aaad6d8609e07030e947b3b46fb524d6eb163a2a53e206" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="0f82488406606cf9f6bc40b8f8c82e538dac5e971b7cd8e72fa81c39cc70657b" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="d3d6ec7097fee68e007e8118ca862b8275d00f9f25b2f9c9700942a6dcaac065" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.242.b07" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="f682886302c8b4ac9abef5894ce93f3db480f6966065fc6d178f8cb773e2c741" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.252.b09" rel="2.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-0" date="1586174400">- Update to aarch64-shenandoah-jdk8u242-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-1" date="1586692800">- Make use of --with-extra-asflags introduced in jdk8u252-b01.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-2" date="1586865600">- Add release notes.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="ec82aae1ff72c99a759104dd639d1d7f7839b8274f458240dff7707ac3b10cfb" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.262.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.0.ea" date="1594468800">- Update to aarch64-shenandoah-jdk8u262-b09.
- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.1.ea" date="1594555200">- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b10-0" date="1594555201">- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811</changelog>
</package>
<package pkgid="bba8f56fed90539a23b5a413d4f8a52fd475e51d395437b94e22154a0d730dce" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="0.el6_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1603281600">- Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="60d29ffec71f90ce515799f5def7489812b5ce14d148dca53075459379e9f36b" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.65" rel="0.b17.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.60-4.b27" date="1441368000">- updated to u60 (1255352)
- Resolves: rhbz#1257654</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.51-4.b16" date="1441800000">- bumped release to do an build, so test whether 1251560 was really fixed
- Resolves: rhbz#1254197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-0.b17" date="1444910400">- October 2015 security update to u65b17.
- Add script for generating OpenJDK tarballs from a local Mercurial tree.
- Update RH1191652 patch to build against current AArch64 tree.
- Use appropriate source ID to avoid unpacking both tarballs on AArch64.
- Fix library removal script so jpeg, giflib and png sources are removed.
- Update system-lcms.patch to regenerated upstream (8042159) version.
- Drop LCMS update from rhel6-built.patch
- Resolves: rhbz#1257654</changelog>
</package>
<package pkgid="90660e8bc2138c1df081214cba2d25e7c55d99b934e8efa960941fb244ae7d6a" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.71" rel="1.b15.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-4.b17" date="1452686400">- Add flag logic back to spec file but disable for now.
- Restore system-lcms.patch as used in October CPU.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-0.b15" date="1452686401">- January 2016 security update to u71b15.
- Improve verbosity and helpfulness of tarball generation script.
- Update patch documentation using version originally written for Fedora.
- Drop prelink requirement as we no longer use execstack.
- Drop ifdefbugfix patch as this is fixed upstream.
- Provide optional boostrap build and turn it off by default.
- Add patch for size_t formatting on s390 as size_t != intptr_t there.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
</package>
<package pkgid="2fa349f60d55d837855df76e2690b0fe130a66e6a54d013f4d6ed29576306d16" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.77" rel="0.b03.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
</package>
<package pkgid="605ab4dc9be36bf4a055c0cd257684ac5d34b8235a201f8d910208485ff56384" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.91" rel="0.b14.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.91-1.b03" date="1460289600">- Update to u91b14.
- Resolves: rhbz#1325420</changelog>
</package>
<package pkgid="982708c2a9928d84cdbb1bf72e2f2298dccbe99de5e24a624b782d43dac13ac9" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.101" rel="3.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-1.b13" date="1467633600">- Add workaround for a typo in the CORBA security fix, 8079718
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-2.b13" date="1468152000">- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-3.b13" date="1468238400">- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
- Resolves: rhbz#1350034</changelog>
</package>
<package pkgid="1e123ed731a1ff19fc554ae3dc06b836a3d7b1ec59b6ec631c47366e013691d6" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.111" rel="0.b15.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1475841600">- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100800">- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100801">- added nss restricting requires
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="117b64d3c47e0a59516de70460fd1e12b1052628c2bd36ab03cc0911e0ec4240" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.121" rel="0.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-3.b14" date="1484568000">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-0.b16" date="1484568001">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-0.b13" date="1484568002">- Update to aarch64-jdk8u121-b13.
- Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
- Re-generate RH1393047 ObjectInputStream patch against u121.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="8b3822aa200da0a4e1a83a59cc9ee1dbfe625e76561d8bebdba7670f02530ad3" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.131" rel="0.b11.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568000">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="daf9fc45b2d445e05f9c5ec9517151478cf4dbf07b9c70b06f6d5f5bacc20bec" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="60b9e207adcc91eb88fc588dc5af376efdc5d7bf8faf4a23d0d0ec3ae1b9f110" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="e88c47edfef8392972976cff41332c0dc0221e8e9c0e7e2c8689c5876509e157" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="3.b14.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="baa4f738535049c5bda5ed7f69d347157d20f9b3bd219ba4ccdf67b5c12c4dfe" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="3.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="6afc4361d8d34ad8199eb6a743add68d28d3a7ce287175babb3e29764f20255a" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el6_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578545</changelog>
</package>
<package pkgid="7fc6d4e5df0de3d13a2d056b5d6481395b638b6cf9845a4b5dc78297ce2175bd" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742402">- Update to aarch64-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="e752ce84ad7d8039dbd663aa127131270841e02ef10a11b30d51db501b26da71" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.191.b12" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-0" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="a9a7477383d76ad09c090bbc8466f74832993ac3de518f5adb11f82e13a04348" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.201.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - PR3548/RH1540242
  - JDK-6260348/PR3066
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8205104/PR3539/RH1548475
  - JDK-8206406/PR3610/RH1597825
  - JDK-8201495/PR2415
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
  - RH1649731
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-1" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640002">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="c1fd6528591bac578a94b60ec49fbd9025a9955c0667cea8b806c49deea358d2" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-1" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="6552dac4588c66183c10d44d4a6cb295be0ff52dc774118b4416b4e216efec40" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="59fa924b04cc05ff9b171eb76d2ffb636026a81077a996d5e40a16597695092e" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="8de54400d69d703ffa5486f599c56e57e96021c5abf7ee865ea6d8ecf93e4b8c" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.242.b07" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="143ba3d79fc10d85bee00cf4bab529cfde435cd0f56b7f7f8525797ca88a5c01" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.252.b09" rel="2.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-0" date="1586174400">- Update to aarch64-shenandoah-jdk8u242-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-1" date="1586692800">- Make use of --with-extra-asflags introduced in jdk8u252-b01.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-2" date="1586865600">- Add release notes.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="24edab90a5bc79a21656be1aadba722c8c00e819deb08e1469950879bb2f6027" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.262.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.0.ea" date="1594468800">- Update to aarch64-shenandoah-jdk8u262-b09.
- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.1.ea" date="1594555200">- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b10-0" date="1594555201">- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811</changelog>
</package>
<package pkgid="8c99ae391cd937e1c063bddfcc5d910d5c9f8b6cd8be2f6fd18d5f97ce528ee1" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="0.el6_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1603281600">- Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="32ad653c96ce74f47974a59031745d023480d0bf754622df3171b6016c59bf28" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.65" rel="0.b17.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.60-4.b27" date="1441368000">- updated to u60 (1255352)
- Resolves: rhbz#1257654</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.51-4.b16" date="1441800000">- bumped release to do an build, so test whether 1251560 was really fixed
- Resolves: rhbz#1254197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-0.b17" date="1444910400">- October 2015 security update to u65b17.
- Add script for generating OpenJDK tarballs from a local Mercurial tree.
- Update RH1191652 patch to build against current AArch64 tree.
- Use appropriate source ID to avoid unpacking both tarballs on AArch64.
- Fix library removal script so jpeg, giflib and png sources are removed.
- Update system-lcms.patch to regenerated upstream (8042159) version.
- Drop LCMS update from rhel6-built.patch
- Resolves: rhbz#1257654</changelog>
</package>
<package pkgid="2edba7cad8687978e90212340ebaeeaa84e069795cf072b6e0ea9a6a8e95001c" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.71" rel="1.b15.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-4.b17" date="1452686400">- Add flag logic back to spec file but disable for now.
- Restore system-lcms.patch as used in October CPU.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-0.b15" date="1452686401">- January 2016 security update to u71b15.
- Improve verbosity and helpfulness of tarball generation script.
- Update patch documentation using version originally written for Fedora.
- Drop prelink requirement as we no longer use execstack.
- Drop ifdefbugfix patch as this is fixed upstream.
- Provide optional boostrap build and turn it off by default.
- Add patch for size_t formatting on s390 as size_t != intptr_t there.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
</package>
<package pkgid="f6f9c0ce8fa07f126006f28d0d6f943ef439de05984975e7f50e5d78e20f412a" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.77" rel="0.b03.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
</package>
<package pkgid="b8ef384508f1f7d19012b5afb3325ee3da73f77f84822f9ff6b280a04be23e96" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.91" rel="0.b14.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.91-1.b03" date="1460289600">- Update to u91b14.
- Resolves: rhbz#1325420</changelog>
</package>
<package pkgid="aa46c0ad7601ebf89816d3c7f10c59344677f03e40eab15019c227dd37a46dbf" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.101" rel="3.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-1.b13" date="1467633600">- Add workaround for a typo in the CORBA security fix, 8079718
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-2.b13" date="1468152000">- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-3.b13" date="1468238400">- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
- Resolves: rhbz#1350034</changelog>
</package>
<package pkgid="ca8dde73d80ddff88e29f954d362184d85881ebb77d332a56589637db240de01" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.111" rel="0.b15.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1475841600">- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100800">- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100801">- added nss restricting requires
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="daf38411bb56e2c6c484a21fbd08274de470afca2de856c81adc747135999f4d" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.121" rel="0.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-3.b14" date="1484568000">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-0.b16" date="1484568001">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-0.b13" date="1484568002">- Update to aarch64-jdk8u121-b13.
- Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
- Re-generate RH1393047 ObjectInputStream patch against u121.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="a6d6bc6b9b25c5c3956e2eba20864fa01e593fcd63f2f04db5fde9538054147b" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.131" rel="0.b11.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568000">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="db2bf017b1b932002949939d83f36fe814eeb13c2feb1c01122c974a17ff9a30" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="1fb857fd974d60a0d7c2cfd9b83ab6fd8b78fbe0ded03050b0a58a23f91aa0c9" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="27859694f8a022017ea7a2ff46e3627d4baefe3bd1137582df8faa725b3a7c2b" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="3.b14.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="957979891f83331f8c5b77d46406ea656c1dc4f058b812c0c4aa45612df6d111" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="3.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="0ac136cf9569a2decb49cba52882c5074876ce80a8bc4bc2347a25d685b28865" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el6_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578545</changelog>
</package>
<package pkgid="0298968352e5180b9ada35c7a1b8f806ca82f37cd8015f5b08c71f55ff09afb5" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742402">- Update to aarch64-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="a05c5ee8ab7d4e62488ceadb4c1f4cfe1ec2ba627bbfff3c7e0d8dce0133e117" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.191.b12" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-0" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="d78834b06e5b1486eb894d0e284a2263038e686810c1d8e22e5f109b6bd302d5" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.201.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - PR3548/RH1540242
  - JDK-6260348/PR3066
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8205104/PR3539/RH1548475
  - JDK-8206406/PR3610/RH1597825
  - JDK-8201495/PR2415
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
  - RH1649731
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-1" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640002">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="c8f1c52c412115cba9eacb38445f22e10a25107a96c04bf85377d95a4c8a9347" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-1" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="d960a2f0da30118157de0f98b3bd0b83bf1edb7e3b63fc781fea67e0301b0470" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="737c8caec905172aeba999cdf551472f3225288715856d14dd218ce81504ef8a" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="658061bda1165b972c47063508e925a76da7fc4e301a0c0fa7251ae44d0bf327" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.242.b07" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="53be25fd0626e72c50e7d16bc3c8fffa707b559ad08260427dd702e250b27866" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.252.b09" rel="2.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-0" date="1586174400">- Update to aarch64-shenandoah-jdk8u242-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-1" date="1586692800">- Make use of --with-extra-asflags introduced in jdk8u252-b01.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-2" date="1586865600">- Add release notes.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="0e82ed94cb3557e38ab98cef3091102d05a4e15ec280bc6ca30eddf27c0e3cdb" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.262.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.0.ea" date="1594468800">- Update to aarch64-shenandoah-jdk8u262-b09.
- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.1.ea" date="1594555200">- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b10-0" date="1594555201">- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811</changelog>
</package>
<package pkgid="96acc9d0abbb13e238ed3f0460dfac535a85ec9d961fc98c10a6c95cdc642ba6" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="0.el6_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1603281600">- Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="6fdae3eab753b9f5fcacfec78ec8471061d6882ed8c5462bae81671fb1362104" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.65" rel="0.b17.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.60-4.b27" date="1441368000">- updated to u60 (1255352)
- Resolves: rhbz#1257654</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.51-4.b16" date="1441800000">- bumped release to do an build, so test whether 1251560 was really fixed
- Resolves: rhbz#1254197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-0.b17" date="1444910400">- October 2015 security update to u65b17.
- Add script for generating OpenJDK tarballs from a local Mercurial tree.
- Update RH1191652 patch to build against current AArch64 tree.
- Use appropriate source ID to avoid unpacking both tarballs on AArch64.
- Fix library removal script so jpeg, giflib and png sources are removed.
- Update system-lcms.patch to regenerated upstream (8042159) version.
- Drop LCMS update from rhel6-built.patch
- Resolves: rhbz#1257654</changelog>
</package>
<package pkgid="34d59e8f08f4dbdcf65e6d6d5edc0664708b207ff0f0b0c119897262731c9db3" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.71" rel="1.b15.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-4.b17" date="1452686400">- Add flag logic back to spec file but disable for now.
- Restore system-lcms.patch as used in October CPU.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-0.b15" date="1452686401">- January 2016 security update to u71b15.
- Improve verbosity and helpfulness of tarball generation script.
- Update patch documentation using version originally written for Fedora.
- Drop prelink requirement as we no longer use execstack.
- Drop ifdefbugfix patch as this is fixed upstream.
- Provide optional boostrap build and turn it off by default.
- Add patch for size_t formatting on s390 as size_t != intptr_t there.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
</package>
<package pkgid="bb0fb6b65e86a8eea733ef54cecf14a3b8258d3939506dc97c5433a9103ff14b" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.77" rel="0.b03.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
</package>
<package pkgid="3538baab837e79bb7ff79fbdbf4e12e66b2994ae527bbaa1749174e376a283fb" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.91" rel="0.b14.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.91-1.b03" date="1460289600">- Update to u91b14.
- Resolves: rhbz#1325420</changelog>
</package>
<package pkgid="f270e545f9fcbc2d56afb1f974674e2a55c1608249943b16288fcc7c85440844" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.101" rel="3.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-1.b13" date="1467633600">- Add workaround for a typo in the CORBA security fix, 8079718
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-2.b13" date="1468152000">- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-3.b13" date="1468238400">- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
- Resolves: rhbz#1350034</changelog>
</package>
<package pkgid="384d00b319ab09c3d332184f4fc4faaa69afa30e1092d16b75f22db402d539c1" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.111" rel="0.b15.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1475841600">- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100800">- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100801">- added nss restricting requires
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="46eaed39d06863f9b32dec425dd52c0681355239c1e42f7f56c1154c28ef15de" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.121" rel="0.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-3.b14" date="1484568000">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-0.b16" date="1484568001">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-0.b13" date="1484568002">- Update to aarch64-jdk8u121-b13.
- Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
- Re-generate RH1393047 ObjectInputStream patch against u121.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="3d702b0e8a51cedfe93fb93ca33f288027dba99c97c200dbc29cc7b300b3dbc5" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.131" rel="0.b11.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568000">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="26a5786482b63bcb228185d77ce59413917ca13410094f3cc56a882d9d911261" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="a43ac61be5fb3aa41870592d1227dc70b2f64097dc2d95d1c79ee68fb9bc2765" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="ed6378e0750aadd21b412960a55a6ffeba0a1a06120e4a2e5c4b67f56e9156bb" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="3.b14.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="1d23011ca87122cc6a54cf1f299bcc82d653a9ecce163b88314844050e92af3e" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="3.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="72bec5e7a69d42637f62aaf8dfa31da9856b0c8a79f523059b1716a29d8b8999" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el6_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578545</changelog>
</package>
<package pkgid="2012625afc27f05fce42afdfadaea8bb52e63d771fe618b4c4832e1ed2451bbe" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742402">- Update to aarch64-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="3270bf39b011b8acd601840bef672e6f0de538e9d9d0b4c5932cc4d2959f9362" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.191.b12" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-0" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="72f9a9a48e0716b5b45b279e0eabe99e480f064cf6a31a63e0f7107cb5f9fda6" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.201.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - PR3548/RH1540242
  - JDK-6260348/PR3066
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8205104/PR3539/RH1548475
  - JDK-8206406/PR3610/RH1597825
  - JDK-8201495/PR2415
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
  - RH1649731
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-1" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640002">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="887a20657bf7b75edb423b9272b0f7f8e11839f9a1d938dcb0d5c4e33c027a85" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-1" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="4c4391b51db4987d83787eebe464d3136c477db7bf1f32412dc3a1293372e628" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="045a099afba1e44eb6d42c6dbb98455b692ea72c4fd79a4dd34847013c5df0f1" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="3ff14db3c1af7a9213b921c1b75d5bfdfceb59fa198a6063615a9898c58d48b8" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.242.b07" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="0814bfe44d825a9c24f15971f33d9443edfb248b8f1df1c6cf2795b78107f441" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.252.b09" rel="2.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-0" date="1586174400">- Update to aarch64-shenandoah-jdk8u242-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-1" date="1586692800">- Make use of --with-extra-asflags introduced in jdk8u252-b01.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-2" date="1586865600">- Add release notes.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="8d31850fbd38536174b747f0a73da165b3522e2488643d627f1d2ce614db7272" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.262.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.0.ea" date="1594468800">- Update to aarch64-shenandoah-jdk8u262-b09.
- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.1.ea" date="1594555200">- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b10-0" date="1594555201">- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811</changelog>
</package>
<package pkgid="7868832e53708921fabd2a3f5bfb0e40e33bb5b1a485011f55beb340c90d28d1" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="0.el6_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1603281600">- Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="7bcd69e9c2ba5b731dd69bd5adb152832104b7cd4e87b2469bcd3d42dfece05e" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.65" rel="0.b17.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.60-4.b27" date="1441368000">- updated to u60 (1255352)
- Resolves: rhbz#1257654</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.51-4.b16" date="1441800000">- bumped release to do an build, so test whether 1251560 was really fixed
- Resolves: rhbz#1254197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-0.b17" date="1444910400">- October 2015 security update to u65b17.
- Add script for generating OpenJDK tarballs from a local Mercurial tree.
- Update RH1191652 patch to build against current AArch64 tree.
- Use appropriate source ID to avoid unpacking both tarballs on AArch64.
- Fix library removal script so jpeg, giflib and png sources are removed.
- Update system-lcms.patch to regenerated upstream (8042159) version.
- Drop LCMS update from rhel6-built.patch
- Resolves: rhbz#1257654</changelog>
</package>
<package pkgid="5e2406178d65110da7ff2cd0c307931bb6dd8eccb7ba14c9863359845a59b40d" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.71" rel="1.b15.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-4.b17" date="1452686400">- Add flag logic back to spec file but disable for now.
- Restore system-lcms.patch as used in October CPU.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-0.b15" date="1452686401">- January 2016 security update to u71b15.
- Improve verbosity and helpfulness of tarball generation script.
- Update patch documentation using version originally written for Fedora.
- Drop prelink requirement as we no longer use execstack.
- Drop ifdefbugfix patch as this is fixed upstream.
- Provide optional boostrap build and turn it off by default.
- Add patch for size_t formatting on s390 as size_t != intptr_t there.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
</package>
<package pkgid="7a6c93b59b8ebc652a2990f1c2817a84dbd88977c087e430e7f31629a1b3b186" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.77" rel="0.b03.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
</package>
<package pkgid="a1db30a9fd902ae54a69f64bd3f026e65db998dcd52b2545c0f705c8b2de4140" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.91" rel="0.b14.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.91-1.b03" date="1460289600">- Update to u91b14.
- Resolves: rhbz#1325420</changelog>
</package>
<package pkgid="edffa6259a2d8ea05acd8dcc74d11368a2c36c0ee752dd0f763304d0a78f48aa" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.101" rel="3.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-1.b13" date="1467633600">- Add workaround for a typo in the CORBA security fix, 8079718
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-2.b13" date="1468152000">- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-3.b13" date="1468238400">- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
- Resolves: rhbz#1350034</changelog>
</package>
<package pkgid="33914826259614da1919649db48a8820819ca702f0403279dae2288db71c6163" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.111" rel="0.b15.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1475841600">- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100800">- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100801">- added nss restricting requires
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="cfe6b619c7ab4a236fd974ca6c357f0a80d7b4e7dabbf58b9329a8f5796f3071" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.121" rel="0.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-3.b14" date="1484568000">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-0.b16" date="1484568001">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-0.b13" date="1484568002">- Update to aarch64-jdk8u121-b13.
- Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
- Re-generate RH1393047 ObjectInputStream patch against u121.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="1fde1b4287ed70209bd7581404b92c9616e294e2acb81b1eea09b2183b6efac9" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.131" rel="0.b11.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568000">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="5e85bf7ba0ca9166e68c1801de726a6a70d9ff6a2b3fe28d8fd2f1fe251ee823" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="b36b3f65a059ddcc38b446de7c51039c2fd49ccc51252ca7bffb45f4f2cc92c2" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="c75f4aa55d43fba2afa110813555520918a30d64cac2ad10d6e2fe8a0a9334f7" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="3.b14.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="bf24fe03ad69b7d5b2ec943aaa0b2dd63433d80ef1ad708f31a20896f97d56f0" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="3.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="8b81d2a5640a3055d8e97492d902b67e2625c45f505e3ae9cb0b94df93c63dc4" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el6_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578545</changelog>
</package>
<package pkgid="4c81cbd3d0adc142d29177b338ce13d7c597c6048f8c9bbb8b1d15e70f46ad0b" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742402">- Update to aarch64-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="8bbe4f53347fcece0ddb06db5765e2a3c8758c5afba93383c3595dea0829cdb3" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.191.b12" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-0" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="effba4f2e783adb9ea01cb3905a9c27927d11337b86acefda346fc697ef18936" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.201.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - PR3548/RH1540242
  - JDK-6260348/PR3066
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8205104/PR3539/RH1548475
  - JDK-8206406/PR3610/RH1597825
  - JDK-8201495/PR2415
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
  - RH1649731
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-1" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640002">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="e2c455f18289c7bb1bdadd4c14ed8a8cd732c7111169a0c2ccc7d38d9c04a4e8" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-1" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="6a53d989ad01f56c77a9be31427289868164482a9cbcefd0ec5934f1da86027a" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="b531763c1de2719a8c83559ba8e58382a58467500598b692c776305e105669dd" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="01965804c7b98cd2ef1da1d25d62cf590137794c2e84f04883b77f301a3a7a07" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.242.b07" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="0b5a6f4e19fce4cdd9fc10d9d83a0a8170b87507e29474187ee0fb530acdcc75" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.252.b09" rel="2.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-0" date="1586174400">- Update to aarch64-shenandoah-jdk8u242-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-1" date="1586692800">- Make use of --with-extra-asflags introduced in jdk8u252-b01.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-2" date="1586865600">- Add release notes.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="1c7205be5c8b27dbce0cdfc9d5bc7504c96344c6b9b332f48b01f4b77759dc4e" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.262.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.0.ea" date="1594468800">- Update to aarch64-shenandoah-jdk8u262-b09.
- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.1.ea" date="1594555200">- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b10-0" date="1594555201">- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811</changelog>
</package>
<package pkgid="80f7d43c37ad3653f3550a583438162053432cace64b28e7b0b8281f3056e7e5" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="0.el6_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1603281600">- Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="3bfcd6e418341ee9850831db4c779ce981da28d47506f2c22f4095a5a810650f" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.65" rel="0.b17.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.60-4.b27" date="1441368000">- updated to u60 (1255352)
- Resolves: rhbz#1257654</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.51-4.b16" date="1441800000">- bumped release to do an build, so test whether 1251560 was really fixed
- Resolves: rhbz#1254197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-0.b17" date="1444910400">- October 2015 security update to u65b17.
- Add script for generating OpenJDK tarballs from a local Mercurial tree.
- Update RH1191652 patch to build against current AArch64 tree.
- Use appropriate source ID to avoid unpacking both tarballs on AArch64.
- Fix library removal script so jpeg, giflib and png sources are removed.
- Update system-lcms.patch to regenerated upstream (8042159) version.
- Drop LCMS update from rhel6-built.patch
- Resolves: rhbz#1257654</changelog>
</package>
<package pkgid="85e9db2368b4fab5d212363220f4a3fe8fd4b4e78be56856956a321bb58463bb" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.71" rel="1.b15.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-4.b17" date="1452686400">- Add flag logic back to spec file but disable for now.
- Restore system-lcms.patch as used in October CPU.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-0.b15" date="1452686401">- January 2016 security update to u71b15.
- Improve verbosity and helpfulness of tarball generation script.
- Update patch documentation using version originally written for Fedora.
- Drop prelink requirement as we no longer use execstack.
- Drop ifdefbugfix patch as this is fixed upstream.
- Provide optional boostrap build and turn it off by default.
- Add patch for size_t formatting on s390 as size_t != intptr_t there.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
</package>
<package pkgid="5dce416fabaa5f4913f854792acc46623bbe6b2103d7f55885e83dbc6cc2fe88" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.77" rel="0.b03.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
</package>
<package pkgid="1ba12c69b72e2490fb412134742bd480d170e9165460cbe657516e47432b06e4" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.91" rel="0.b14.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.91-1.b03" date="1460289600">- Update to u91b14.
- Resolves: rhbz#1325420</changelog>
</package>
<package pkgid="8aa5ac8859242939267c1064ebd7ec59b3de81d9ca4b68c562be4906eccf4237" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.101" rel="3.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-1.b13" date="1467633600">- Add workaround for a typo in the CORBA security fix, 8079718
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-2.b13" date="1468152000">- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-3.b13" date="1468238400">- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
- Resolves: rhbz#1350034</changelog>
</package>
<package pkgid="f696024cd0fbf1f58b2dc67077359cf63f127aafbc50fc8d097421dd1d46e9e3" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.111" rel="0.b15.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1475841600">- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100800">- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100801">- added nss restricting requires
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="39c1c9e0f9dccdcaec08d2822a59a5488fb07769345209b09e85e27963acfbfe" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.121" rel="0.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-3.b14" date="1484568000">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-0.b16" date="1484568001">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-0.b13" date="1484568002">- Update to aarch64-jdk8u121-b13.
- Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
- Re-generate RH1393047 ObjectInputStream patch against u121.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="f30ccd6770b2474262bde472a2b429e07ca9fc9efb79832b7abc21d626d2c8b5" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.131" rel="0.b11.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568000">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="e5a9d4f35b616f8e7373b30898e4851e589d3025d2915c3e78b83680d5ee4b18" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="a599262687aa327621cbcec8874d9c15b384d9b3c3678d846bd43dacbcf9dfdf" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="c87b152efa4ffde04a04d47dbbbc4f267c3d4de0af4b68b39c5a7ddbe9a8e02b" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="3.b14.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="7714ba4d195eee065a4bf38c87b4f4c6f56e293ba3f59d146ad14ed3cfad160a" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="3.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="5484f0db8c19c5121c104ff3bf506cf55da92d568efe12e974a7d22065f9492b" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el6_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578545</changelog>
</package>
<package pkgid="fabba38e04fcf91464f296f4cdcee7cbf3fd1b81f1617f4a5ed565b27fa97841" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742402">- Update to aarch64-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="d1f676fc3fc5c06248e021f349715b9e3ec47254e5f9028015afe9c4d10d5672" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.191.b12" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-0" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="9c76abb89a3863d4faa65c06f42cafdc7d3f6fcdb86451890bf452bc9a40ca69" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.201.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - PR3548/RH1540242
  - JDK-6260348/PR3066
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8205104/PR3539/RH1548475
  - JDK-8206406/PR3610/RH1597825
  - JDK-8201495/PR2415
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
  - RH1649731
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-1" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640002">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="301a8eacb6c2db51ac90354cbe4535ab9f69715acf93a7dd414dc2fbcadfeab3" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-1" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="ae8542b128a63974c4c8329cfca1f7de4c42f87e32e06fb016a9e74095ff7e24" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="acf6e02aa153a0d701688d54dc3af6e194f7d6c3e71354d3653cee08243221b5" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="b537b5ccf4643e75f3d98b25f4933b4bd3ed2e3e4127f929beb29058c349f046" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.242.b07" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="6b7dbf93fe3989884843244c5ccce890faf6e787495e707476dbfbe92f800d2a" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.252.b09" rel="2.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-0" date="1586174400">- Update to aarch64-shenandoah-jdk8u242-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-1" date="1586692800">- Make use of --with-extra-asflags introduced in jdk8u252-b01.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-2" date="1586865600">- Add release notes.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="0020cd1b9d979b42953c8462d6d8e1c317c6f735d5fb9cc1fb2248f72d0ab745" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.262.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.0.ea" date="1594468800">- Update to aarch64-shenandoah-jdk8u262-b09.
- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.1.ea" date="1594555200">- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b10-0" date="1594555201">- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811</changelog>
</package>
<package pkgid="e1c4ad048405e160b29f472339b4a40eb50ad7edff8f5eb11a36e91d0155d834" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="0.el6_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1603281600">- Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="b9288b97e9d6e7622f53dc173ebbeaba7ae006b69493000c3c1a7fdaffb3075e" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.65" rel="0.b17.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.60-4.b27" date="1441368000">- updated to u60 (1255352)
- Resolves: rhbz#1257654</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.51-4.b16" date="1441800000">- bumped release to do an build, so test whether 1251560 was really fixed
- Resolves: rhbz#1254197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-0.b17" date="1444910400">- October 2015 security update to u65b17.
- Add script for generating OpenJDK tarballs from a local Mercurial tree.
- Update RH1191652 patch to build against current AArch64 tree.
- Use appropriate source ID to avoid unpacking both tarballs on AArch64.
- Fix library removal script so jpeg, giflib and png sources are removed.
- Update system-lcms.patch to regenerated upstream (8042159) version.
- Drop LCMS update from rhel6-built.patch
- Resolves: rhbz#1257654</changelog>
</package>
<package pkgid="9c749b9bf220e5d13f0e1e3fc55141a786db3830eb64a59309e3839ed6e1eda4" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.71" rel="1.b15.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-4.b17" date="1452686400">- Add flag logic back to spec file but disable for now.
- Restore system-lcms.patch as used in October CPU.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-0.b15" date="1452686401">- January 2016 security update to u71b15.
- Improve verbosity and helpfulness of tarball generation script.
- Update patch documentation using version originally written for Fedora.
- Drop prelink requirement as we no longer use execstack.
- Drop ifdefbugfix patch as this is fixed upstream.
- Provide optional boostrap build and turn it off by default.
- Add patch for size_t formatting on s390 as size_t != intptr_t there.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
</package>
<package pkgid="0b7a67b397ff308b95f0e6a55f6dc8dd3d616e0c7afc6f3f37dfb7fa20dc33ad" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.77" rel="0.b03.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
</package>
<package pkgid="d2bbc16f831b4937dad4f0081a5ea6dbdb9dfff26b14798cd0ebf2b102fa5179" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.91" rel="0.b14.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.91-1.b03" date="1460289600">- Update to u91b14.
- Resolves: rhbz#1325420</changelog>
</package>
<package pkgid="2d729363cc783d1de062aee0dfec759fe589169a96ae700e8e9f16db45049342" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.101" rel="3.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-1.b13" date="1467633600">- Add workaround for a typo in the CORBA security fix, 8079718
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-2.b13" date="1468152000">- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-3.b13" date="1468238400">- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
- Resolves: rhbz#1350034</changelog>
</package>
<package pkgid="dcb22f1e1a35c38c16b833e15a8c155935fcd31f73cdd1cfc09ee27bc02da6ce" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.111" rel="0.b15.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1475841600">- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100800">- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100801">- added nss restricting requires
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="74fe19d2464fd21fda7d5477235c2c7576a05bcff7a7c3ff9b410691de5cfe3c" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.121" rel="0.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-3.b14" date="1484568000">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-0.b16" date="1484568001">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-0.b13" date="1484568002">- Update to aarch64-jdk8u121-b13.
- Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
- Re-generate RH1393047 ObjectInputStream patch against u121.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="ce541104c6e4a6030f161c2d0ed33e3ff9ab496b53bd53cb24a2b42d1197a437" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.131" rel="0.b11.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568000">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="f5276bae78af56c2eadfde442ab3f5f2859aac229815e8e7c507b381517a8eac" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="8db9cf01a9cf2b418d088b04ea6a5077a3be113b7cd1c4e77e6caf34c5e599e1" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="fcd6546b6a231dc626409c62df1f3ae0c9342ae9429f77162e7feb191b5f445c" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="3.b14.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="24b3f44d102792a3d5e5da9911924e5260175376124f67e6a2824271e01159d6" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="3.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="b4635c1643c713287a9f1402e2a49489414ac01cb9114f8395e5636e9709499a" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el6_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578545</changelog>
</package>
<package pkgid="62b560057b715e4ce12cf994734a899432bbc8cfc32a1f9f015c2c7777c38ad9" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742402">- Update to aarch64-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="b07a7e71ec39b7739030e24ab6ca6fae8f952e55307db94146ce31b6da7ccfea" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.191.b12" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-0" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="b8a63a9bfb16fdf95ea239b84718079685034acb094344208834a3920928c079" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.201.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - PR3548/RH1540242
  - JDK-6260348/PR3066
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8205104/PR3539/RH1548475
  - JDK-8206406/PR3610/RH1597825
  - JDK-8201495/PR2415
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
  - RH1649731
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-1" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640002">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="b9e34add24aa6012a59e8fa5445fc73fb62574efe902c3f2be44db65af51e39d" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-1" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="fedb7e6431bb0d13c67dfc05556ad81b3a96f3df5baa7ee90f2cd87b474e042d" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="980bf7a6a1d786f686158f80532419d0bfbc7bfa4f1a441c956f96ae81670d31" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.232.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="9cdd1d70e628db2c241753201cffeca47340f741c0548dc678a830bc7e322567" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.242.b07" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="135085ccb7581891eea423fd6ef4d02cbc030b48e790aa48781d56271a8434ac" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.252.b09" rel="2.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-0" date="1586174400">- Update to aarch64-shenandoah-jdk8u242-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-1" date="1586692800">- Make use of --with-extra-asflags introduced in jdk8u252-b01.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-2" date="1586865600">- Add release notes.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="f4bd52580595be5fb5245aed4860b1346bb6cb78963f1e7c4c0d896254c1b831" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.262.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.0.ea" date="1594468800">- Update to aarch64-shenandoah-jdk8u262-b09.
- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.1.ea" date="1594555200">- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b10-0" date="1594555201">- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811</changelog>
</package>
<package pkgid="3d848e9ca71e703304c558bb4843f6ac892c281d382699a33caf822871bc80a8" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.272.b10" rel="0.el6_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1603281600">- Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="9339a660eb9009e22c3dfccfeda888e8d003210a63f673d8f6421dd6e14c598a" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.65" rel="0.b17.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.60-4.b27" date="1441368000">- updated to u60 (1255352)
- Resolves: rhbz#1257654</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.51-4.b16" date="1441800000">- bumped release to do an build, so test whether 1251560 was really fixed
- Resolves: rhbz#1254197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-0.b17" date="1444910400">- October 2015 security update to u65b17.
- Add script for generating OpenJDK tarballs from a local Mercurial tree.
- Update RH1191652 patch to build against current AArch64 tree.
- Use appropriate source ID to avoid unpacking both tarballs on AArch64.
- Fix library removal script so jpeg, giflib and png sources are removed.
- Update system-lcms.patch to regenerated upstream (8042159) version.
- Drop LCMS update from rhel6-built.patch
- Resolves: rhbz#1257654</changelog>
</package>
<package pkgid="74a8deba339bea07386e2e61bdd11f097fe6c5367bd3ffb7e12925248cf78769" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.71" rel="1.b15.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-4.b17" date="1452686400">- Add flag logic back to spec file but disable for now.
- Restore system-lcms.patch as used in October CPU.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-0.b15" date="1452686401">- January 2016 security update to u71b15.
- Improve verbosity and helpfulness of tarball generation script.
- Update patch documentation using version originally written for Fedora.
- Drop prelink requirement as we no longer use execstack.
- Drop ifdefbugfix patch as this is fixed upstream.
- Provide optional boostrap build and turn it off by default.
- Add patch for size_t formatting on s390 as size_t != intptr_t there.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
</package>
<package pkgid="f468cc9cacca99a7a825a4c1b4feab7e7b140ced4370ea5ece4142b05bea9dc1" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.77" rel="0.b03.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
</package>
<package pkgid="2c6875600a769ad90121dcf95de82c89430a398f1e08a44585d3632f53e503ab" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.91" rel="0.b14.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.91-1.b03" date="1460289600">- Update to u91b14.
- Resolves: rhbz#1325420</changelog>
</package>
<package pkgid="40d50ca9ce65d96a924f6b8f3cdfce060be3230e35dcea3c4bf59e35ed1c91a8" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.101" rel="3.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-1.b13" date="1467633600">- Add workaround for a typo in the CORBA security fix, 8079718
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-2.b13" date="1468152000">- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-3.b13" date="1468238400">- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
- Resolves: rhbz#1350034</changelog>
</package>
<package pkgid="9a4f8ece9b39a3adb58337235fe9bbe5f7e92129e9ca852fe448716c209396ef" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.111" rel="0.b15.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1475841600">- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100800">- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100801">- added nss restricting requires
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="c1138e7ae5a141f57bf2e1ca48ab14f8f0852b2cc2c1cfe0ea1750258007637e" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.121" rel="0.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-3.b14" date="1484568000">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-0.b16" date="1484568001">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-0.b13" date="1484568002">- Update to aarch64-jdk8u121-b13.
- Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
- Re-generate RH1393047 ObjectInputStream patch against u121.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="6792d0d9d325b69638e6f32bc56b5c0ba832df1026f52cb848665d423c566ff9" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.131" rel="0.b11.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568000">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="794ba7f05c7b6d58f930c97c5b28eaba76d889e7492726ce452fbc77fbcac6ef" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="cded3938597dd71d3b8447cd66192496c952a91d12b8422daa5973a25c69f5cc" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="c9a147b638abf5482928cb63bd2951ea59ba835e9952131bb37687043e9741f2" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.161" rel="3.b14.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="26836c5f40cf4d75552ded8f602f0e3da735ae21c0ad6c31536f9f28d921cfbd" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="3.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="d1c6cccbc93d9665b0cb82acfea1a3a0ac6bc07365e5332b63b89bc1aea35113" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el6_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578545</changelog>
</package>
<package pkgid="2691bd4f9a84b729590e87d8b2c30540cefefd7b7e41908a4abb1b2c9b2a5702" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742402">- Update to aarch64-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="af8a7b0dc3e8686e78fd3f011c1214989d10cc3a1be001ba28a674f4565c3f95" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.191.b12" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-0" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="686fe9f40b9b7974ae00e73a7f9a08dcb962961d815734f2567ccf87889d0018" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.201.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - PR3548/RH1540242
  - JDK-6260348/PR3066
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8205104/PR3539/RH1548475
  - JDK-8206406/PR3610/RH1597825
  - JDK-8201495/PR2415
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
  - RH1649731
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-1" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640002">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="ce2c81654331538cd7001842aebb8e0511f3ba871ed7ed27f3e4533510f652eb" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-1" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="7fcf1eab81210329d4ec323669b49cbb86320a0315e6fe9f00846ac538081cd2" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="c8fdb685e302cef81cc332755ca32e0b51f62b01a23cae319b773fc4117fec52" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.232.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="f25b6db5c691786c378a77fb790b1546af5f9434a0533fdeeb637f0a8145ca6d" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.242.b07" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="e19975268da987ac48575702799aead59f14f335ced187695be30aaec2cc5abb" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.252.b09" rel="2.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-0" date="1586174400">- Update to aarch64-shenandoah-jdk8u242-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-1" date="1586692800">- Make use of --with-extra-asflags introduced in jdk8u252-b01.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-2" date="1586865600">- Add release notes.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="d9add926a08b73c1a5202a99eacc399216cdeb39d52b5e2941285902e6bf4d58" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.262.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.0.ea" date="1594468800">- Update to aarch64-shenandoah-jdk8u262-b09.
- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.1.ea" date="1594555200">- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b10-0" date="1594555201">- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811</changelog>
</package>
<package pkgid="f80967b523dace32996e65a5aac40e1cfa2b2996f4f251493975e53c4f9620db" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.272.b10" rel="0.el6_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1603281600">- Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="2e32cefc74b512c73be259b19132c6813d203a05ce46e80edb6140d37c06184a" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.65" rel="0.b17.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.60-4.b27" date="1441368000">- updated to u60 (1255352)
- Resolves: rhbz#1257654</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.51-4.b16" date="1441800000">- bumped release to do an build, so test whether 1251560 was really fixed
- Resolves: rhbz#1254197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-0.b17" date="1444910400">- October 2015 security update to u65b17.
- Add script for generating OpenJDK tarballs from a local Mercurial tree.
- Update RH1191652 patch to build against current AArch64 tree.
- Use appropriate source ID to avoid unpacking both tarballs on AArch64.
- Fix library removal script so jpeg, giflib and png sources are removed.
- Update system-lcms.patch to regenerated upstream (8042159) version.
- Drop LCMS update from rhel6-built.patch
- Resolves: rhbz#1257654</changelog>
</package>
<package pkgid="7c600142cc1205d7364ea788deba03ea0e32bc59d389124d81a860f028eb8909" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.71" rel="1.b15.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-4.b17" date="1452686400">- Add flag logic back to spec file but disable for now.
- Restore system-lcms.patch as used in October CPU.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-0.b15" date="1452686401">- January 2016 security update to u71b15.
- Improve verbosity and helpfulness of tarball generation script.
- Update patch documentation using version originally written for Fedora.
- Drop prelink requirement as we no longer use execstack.
- Drop ifdefbugfix patch as this is fixed upstream.
- Provide optional boostrap build and turn it off by default.
- Add patch for size_t formatting on s390 as size_t != intptr_t there.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
</package>
<package pkgid="93dfd2c18654529bf93f8d71f8ce8e24e75c7a507bb5142a42d5366d582d3e5c" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.77" rel="0.b03.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
</package>
<package pkgid="6256f012e24451b0d27969518191fe170f8b7c291ab9c72b22d37f3b3f484024" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.91" rel="0.b14.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.91-1.b03" date="1460289600">- Update to u91b14.
- Resolves: rhbz#1325420</changelog>
</package>
<package pkgid="f41887f042639683ef2bdb5943795095d2989df2021bbf75f6af4ad61f234877" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.101" rel="3.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-1.b13" date="1467633600">- Add workaround for a typo in the CORBA security fix, 8079718
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-2.b13" date="1468152000">- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-3.b13" date="1468238400">- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
- Resolves: rhbz#1350034</changelog>
</package>
<package pkgid="9ed79e406e8266c554673ce7166370ad8340da1c538ae53cef7272ada8ccc796" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.111" rel="0.b15.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1475841600">- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100800">- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100801">- added nss restricting requires
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="06f61193f675ce03df7168f1838b7405d4e988e50586b9fc39fff895ebadad16" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.121" rel="0.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-3.b14" date="1484568000">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-0.b16" date="1484568001">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-0.b13" date="1484568002">- Update to aarch64-jdk8u121-b13.
- Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
- Re-generate RH1393047 ObjectInputStream patch against u121.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="073e7c44133489586c6a4ba76c66ab5f46f1da4398213adb06d89b5d9666ed05" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.131" rel="0.b11.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568000">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="786505669be18bfd313d5b1a74dea521bcabe4c4fbcdc44ebff44a3666702601" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="86ff55cd4b9308f86d5f47e80bc5ee9d7dcb07f387bc9fcb926dc3a4a5398ade" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="37fd1eb7be07bf0d24295020522776258efb907ddb13a2880110ad7803ba7057" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="3.b14.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="33c9182a0f11af141d8a0f75e087754d9f2736fb702970ecc4b38c00093e2086" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="3.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="2f3951a1d7ac58e98c66752d269c81e4e8f70f2ca4b4a019fc28fc8aeb0d0469" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el6_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578545</changelog>
</package>
<package pkgid="c2472e98bca1e3653fa7d128b1961e30282e3d5974e4288e153c1ecb2b64e13e" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742402">- Update to aarch64-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="6362dddd7598fc9c47760f847c5d1cdcfd082334d3314137884420d83e0ae11a" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.191.b12" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-0" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="2a9cac425f68d951b17a56d9ea9bf9cc718b9f9f864f51d1b00ceea86132be13" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.201.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - PR3548/RH1540242
  - JDK-6260348/PR3066
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8205104/PR3539/RH1548475
  - JDK-8206406/PR3610/RH1597825
  - JDK-8201495/PR2415
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
  - RH1649731
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-1" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640002">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="04592ce61b4d667a7d937915af9ab04f4cd4ac1c07c0c12d334ae5f521f095d5" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-1" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="14d535dfc362e018a61f0930629b3ff67d2d7ddade2fd34b5785d503df3cdd30" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="84bb568fe0166e35f5ff2713eddea867b1b640a077d5c21707f02504f8908a11" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="126fcfd3811c68f4f53cbb53ec28abbec9aaa73ba6660dbc2369480d9d39b808" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.242.b07" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="007dc853d73cfa9f6b8b388473b8f019d8f5a65182b8d977f1714e5cffc09079" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.252.b09" rel="2.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-0" date="1586174400">- Update to aarch64-shenandoah-jdk8u242-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-1" date="1586692800">- Make use of --with-extra-asflags introduced in jdk8u252-b01.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-2" date="1586865600">- Add release notes.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="c9b679cc63593d86fbef9ee570e77cac7587d249b4bd1513554f20d53d6586ce" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.262.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.0.ea" date="1594468800">- Update to aarch64-shenandoah-jdk8u262-b09.
- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.1.ea" date="1594555200">- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b10-0" date="1594555201">- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811</changelog>
</package>
<package pkgid="c04171219d66a2291b8ca4666839a124299977d337ef92daffb2cb5dc38c40eb" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="0.el6_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1603281600">- Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="59f333e682d29e25d91633040dc8dd4b404894466ba8d5320e559b23f4b8a570" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.65" rel="0.b17.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.60-4.b27" date="1441368000">- updated to u60 (1255352)
- Resolves: rhbz#1257654</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.51-4.b16" date="1441800000">- bumped release to do an build, so test whether 1251560 was really fixed
- Resolves: rhbz#1254197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-0.b17" date="1444910400">- October 2015 security update to u65b17.
- Add script for generating OpenJDK tarballs from a local Mercurial tree.
- Update RH1191652 patch to build against current AArch64 tree.
- Use appropriate source ID to avoid unpacking both tarballs on AArch64.
- Fix library removal script so jpeg, giflib and png sources are removed.
- Update system-lcms.patch to regenerated upstream (8042159) version.
- Drop LCMS update from rhel6-built.patch
- Resolves: rhbz#1257654</changelog>
</package>
<package pkgid="5383af77ec49a13cf064d599f7aa03a5db480ebed9dcddf9012107eb7fa1c8ba" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.71" rel="1.b15.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-4.b17" date="1452686400">- Add flag logic back to spec file but disable for now.
- Restore system-lcms.patch as used in October CPU.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-0.b15" date="1452686401">- January 2016 security update to u71b15.
- Improve verbosity and helpfulness of tarball generation script.
- Update patch documentation using version originally written for Fedora.
- Drop prelink requirement as we no longer use execstack.
- Drop ifdefbugfix patch as this is fixed upstream.
- Provide optional boostrap build and turn it off by default.
- Add patch for size_t formatting on s390 as size_t != intptr_t there.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
</package>
<package pkgid="03754eaa3e8a92da868b05401e66b7676af065bd55f3fb354dbba6c549581e86" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.77" rel="0.b03.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
</package>
<package pkgid="b60839944d7f7c6fb24caeecf201b27f6c626a47b1b517100dadd8090ac1d1c7" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.91" rel="0.b14.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.91-1.b03" date="1460289600">- Update to u91b14.
- Resolves: rhbz#1325420</changelog>
</package>
<package pkgid="7bdd7cd109db6cc3eec2dd92b3fa6aac830dfa78113cc8671c5148eeae5b16ef" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.101" rel="3.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-1.b13" date="1467633600">- Add workaround for a typo in the CORBA security fix, 8079718
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-2.b13" date="1468152000">- Add missing hunk from 8147771, missed due to inclusion of unneeded 8138811
- Resolves: rhbz#1350034</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.101-3.b13" date="1468238400">- Replace bad 8159244 patch from upstream 8u with fresh backport from OpenJDK 9.
- Resolves: rhbz#1350034</changelog>
</package>
<package pkgid="7b122ec825702cc0157baeec21cbf72502fce72f0accfe34df3952bed82fc634" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.111" rel="0.b15.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1475841600">- Update to aarch64-jdk8u111-b15, with AArch64 fix for S8160591.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100800">- Turn debug builds on for all JIT architectures. Always AssumeMP on RHEL.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.111-0.b15" date="1476100801">- added nss restricting requires
- Resolves: rhbz#1381990</changelog>
</package>
<package pkgid="f73dbacf03e5feac91bf87ec8d4de66418adfc3566b2c92ed781ba0531d180fe" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.121" rel="0.b13.el6_8"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-3.b14" date="1484568000">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-0.b16" date="1484568001">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-0.b13" date="1484568002">- Update to aarch64-jdk8u121-b13.
- Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121.
- Re-generate RH1393047 ObjectInputStream patch against u121.
- Resolves: rhbz#1410612</changelog>
</package>
<package pkgid="5df9c297e23cc2a465306ad053274f9d5806f164806fdb19805273c423df7033" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.131" rel="0.b11.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568000">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="ce6beeff1a28c052e2d69553ba203d6da52f0cfaca9276cde3bbec0d774a1f80" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="7c840173d3ad9c8a3684e34c79d1a8c7d331a61f8cb27199c35c22f68aa342cc" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="21ec2d326a01cbde6595ec5d50a7c82a4d4138921763c4e2ab0f485c3bc214c8" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="3.b14.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="8997e2d6bcd67e7480c80db3fb6dd24f6753e5616004ae591709988ae1455b60" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="3.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="c28568244620d84a61e570afb6def39f0071f389bac3d8d5d4571377b9fb080c" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el6_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578545</changelog>
</package>
<package pkgid="049fe05cf6a232aeaabbf54732387da4e01c3842ff8ef60171e66b6fd554d042" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el6_10"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742402">- Update to aarch64-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="d442646c26c05925bd8c7e24712303e651bf8a89bdfd4d92618e2f6fa9ba0dbe" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.191.b12" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181.b16-0" date="1538395200">- Add new Shenandoah patch PR3634 as upstream still fails on s390.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b10-0" date="1538481600">- Update to aarch64-shenandoah-jdk8u191-b10.
- Drop 8146115/PR3508/RH1463098 applied upstream.
- Resolves: rhbz#1633817</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.191.b12-0" date="1539086400">- Update to aarch64-shenandoah-jdk8u191-b12.
- Resolves: rhbz#1633817</changelog>
</package>
<package pkgid="4914ad0080e56778664b012107451e6c3f3830791073ee4d9b239a7236b57143" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.201.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-0" date="1547640000">- Update to aarch64-shenandoah-jdk8u192-b12.
- Remove patches included upstream
  - PR3548/RH1540242
  - JDK-6260348/PR3066
  - JDK-8185723/PR3553
  - JDK-8186461/PR3557
  - JDK-8201509/PR3579
  - JDK-8205104/PR3539/RH1548475
  - JDK-8206406/PR3610/RH1597825
  - JDK-8201495/PR2415
- Re-generate patches (mostly due to upstream build changes)
  - JDK-8073139/PR1758/RH1191652
  - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
  - JDK-8199936/PR3533
  - JDK-8199936/PR3591
  - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
  - PR3593 (due to JDK-8081202)
  - RH1566890/CVE-2018-3639 (due to JDK-8189170)
  - RH1649664 (due to JDK-8196516)
  - RH1649731
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.192.b12-1" date="1547640001">- Add 8160748 for AArch64 which is missing from upstream 8u version.
- Add port of 8189170 to AArch64 which is missing from upstream 8u version.
- Resolves: rhbz#1661577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.201.b09-0" date="1547640002">- Update to aarch64-shenandoah-jdk8u201-b09.
- Resolves: rhbz#1661577</changelog>
</package>
<package pkgid="bb61da9e2afced3e1ce384f1c7d5bf266051ce0f2deb5fa9e17d6894e8a16e37" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.212.b04" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b02-0" date="1554811200">- Update to aarch64-shenandoah-jdk8u212-b02.
- Remove patches included upstream
  - JDK-8197429/PR3546/RH153662{2,3}
  - JDK-8184309/PR3596
- Re-generate patches
  - JDK-8203030
- Add casts to resolve s390 ambiguity in calls to log2_intptr
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b03-0" date="1554984000">- Update to aarch64-shenandoah-jdk8u212-b03.
- Resolves: rhbz#1693468</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.212.b04-1" date="1554984001">- Update to aarch64-shenandoah-jdk8u212-b04.
- Resolves: rhbz#1693468</changelog>
</package>
<package pkgid="5bfccdc4544cc13d01dec213505fa468f9fc085d717770fdefb1559cc3b1279d" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.222.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b08-0.0.ea" date="1562673600">- Update to aarch64-shenandoah-jdk8u222-b08.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b09-0" date="1562673601">- Update to aarch64-shenandoah-jdk8u222-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1724452</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.222.b10-0" date="1562846400">- Update to aarch64-shenandoah-jdk8u222-b10.
- Resolves: rhbz#1724452</changelog>
</package>
<package pkgid="5b4b7394028a61809f0049a75e1f6b97840baa255e226fb4986a44c6269ff4ba" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.232.b09" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b05-0.1.ea" date="1568721600">- Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
- Update version logic to handle -shenandoah* tag suffix.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b08-0.0.ea" date="1569931200">- Update to aarch64-shenandoah-jdk8u232-b08.
- Resolves: rhbz#1753423</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.232.b09-0" date="1570795200">- Update to aarch64-shenandoah-jdk8u232-b09.
- Switch to GA mode for final release.
- Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
- Resolves: rhbz#1753423</changelog>
</package>
<package pkgid="f6b8bdb8cc22b0d423d0aed4f7273b40496d1f4cad348991acd4095ee8adac4f" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.242.b07" rel="1.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b05-0.1.ea" date="1578225600">- Update to aarch64-shenandoah-jdk8u242-b05.
- Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
- Revise b05 snapshot to include JDK-8236178.
- Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-0" date="1578916800">- Update to aarch64-shenandoah-jdk8u242-b07.
- Switch to GA mode for final release.
- Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
- Resolves: rhbz#1785753</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.242.b07-1" date="1579089600">- Add backports of JDK-8031111 &amp; JDK-8132111 to fix TCK issue.
- Resolves: rhbz#1785753</changelog>
</package>
<package pkgid="3b7737a0afdd2eb7d3e8b352c03d09b887631f835f8f1c79dff29e72241c5b41" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.252.b09" rel="2.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-0" date="1586174400">- Update to aarch64-shenandoah-jdk8u242-b09.
- Switch to GA mode for final release.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-1" date="1586692800">- Make use of --with-extra-asflags introduced in jdk8u252-b01.
- Resolves: rhbz#1810557</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.252.b09-2" date="1586865600">- Add release notes.
- Resolves: rhbz#1810557</changelog>
</package>
<package pkgid="838184c878241e601e86fcf53e2f5adbb6cf6a52534d5baeaed5dfcd26cbb589" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.262.b10" rel="0.el6_10"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.0.ea" date="1594468800">- Update to aarch64-shenandoah-jdk8u262-b09.
- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.1.ea" date="1594555200">- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b10-0" date="1594555201">- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811</changelog>
</package>
<package pkgid="b7fcffad62eea1cc9657f96830811bac76d0e06576b58d37dbdf0b28f9eb03db" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.272.b10" rel="0.el6_10"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1603281600">- Remove the 64-bit siphash test which fails to compile on x86-32 debug builds with gcc 4.4.7 in RHEL 6
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="ec3ef22e1735932c3cdf3078d25ac622dd8c4024a5978a69594c4642985ef7c0" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.65" rel="0.b17.el6_7"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.60-4.b27" date="1441368000">- updated to u60 (1255352)
- Resolves: rhbz#1257654</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.51-4.b16" date="1441800000">- bumped release to do an build, so test whether 1251560 was really fixed
- Resolves: rhbz#1254197</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-0.b17" date="1444910400">- October 2015 security update to u65b17.
- Add script for generating OpenJDK tarballs from a local Mercurial tree.
- Update RH1191652 patch to build against current AArch64 tree.
- Use appropriate source ID to avoid unpacking both tarballs on AArch64.
- Fix library removal script so jpeg, giflib and png sources are removed.
- Update system-lcms.patch to regenerated upstream (8042159) version.
- Drop LCMS update from rhel6-built.patch
- Resolves: rhbz#1257654</changelog>
</package>
<package pkgid="a51d95f0b58abd377c62112ee0d795b25853d5c05405570a892fad1764c72e53" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.71" rel="1.b15.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.65-4.b17" date="1452686400">- Add flag logic back to spec file but disable for now.
- Restore system-lcms.patch as used in October CPU.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-0.b15" date="1452686401">- January 2016 security update to u71b15.
- Improve verbosity and helpfulness of tarball generation script.
- Update patch documentation using version originally written for Fedora.
- Drop prelink requirement as we no longer use execstack.
- Drop ifdefbugfix patch as this is fixed upstream.
- Provide optional boostrap build and turn it off by default.
- Add patch for size_t formatting on s390 as size_t != intptr_t there.
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
</package>
<package pkgid="3159662ab21cf56a83aa95ded36947b6d889ee986bb7fa9210f8deb9ea1e1ece" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.77" rel="0.b03.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.71-1.b15" date="1452772800">- Add patch to turn off strict overflow on IndicRearrangementProcessor{,2}.cpp
- Resolves: rhbz#1295751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
</package>
<package pkgid="43d20e77386c0a6570cf3ebec6dcff1fff9f280938c238ea253a7e427bb0a846" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.91" rel="0.b14.el6_7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734400">- Update to u77b03.
- Drop 8146566 which is applied upstream.
- Replace s390 Java options patch with general version from IcedTea.
- Apply s390 patches unconditionally to avoid arch-specific patch failures.
- Remove fragment of s390 size_t patch that unnecessarily removes a cast, breaking ppc64le.
- Remove aarch64-specific suffix as update/build version are now the same as for other archs.
- Only use z format specifier on s390, not s390x.
- Adjust tarball generation script to allow ecc_impl.h to be included.
- Correct spelling mistakes in tarball generation script.
- Synchronise minor changes from Fedora.
- Use a simple backport for PR2462/8074839.
- Don't backport the crc check for pack.gz. It's not tested well upstream.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.77-0.b03" date="1458734401">- Remove what remains of the SunEC sources in the remove-intree-libraries script.
- Resolves: rhbz#1320661</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.91-1.b03" date="1460289600">- Update to u91b14.
- Resolves: rhbz#1325420</changelog>
</package>
<package pkgid="8d0c3eddbb0fa62edc22458a6fef31ee4aff9a4b22bf997c7ce4455035d381e1" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.12.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.10.1.el6]" date="1446811200">- [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
- [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
- [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
- [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
- [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
- [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
- [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.11.1.el6]" date="1447416000">- [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
- [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.12.1.el6]" date="1448280000">- Revert: [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]</changelog>
</package>
<package pkgid="362070236af91bc29b984752ba34bf2a77a16b61c73491ca29f9ed659e8be9b3" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.22.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.20.1.el6]" date="1453464000">- [sched] kernel: sched: Fix nohz load accounting -- again (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Move sched_avg_update to update_cpu_load (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure more NO_HZ load average woes (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure load average vs NO_HZ woes (Rafael Aquini) [1300349 1167755]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.21.1.el6]" date="1456142400">- [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1310148 1302223] {CVE-2016-0774}
- [fs] gfs2: Add missing else in trans_add_meta/data (Robert S Peterson) [1304332 1267995]
- [fs] fs-cache: Synchronise object death state change vs operation submission (David Howells) [1308471 1096893]
- [fs] fs-cache: Reduce cookie ref count if submit fails (David Howells) [1308471 1096893]
- [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1302763 1294400]
- [x86] fix corruption of XMM registers when interrupt handlers use FPU (Mikulas Patocka) [1298994 1259023]
- [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1303044 1292300]
- [net] add inet_sk_transparent() helper (Florian Westphal) [1303044 1292300]
- [net] ipv6: tcp_ipv6 policy route issue (Florian Westphal) [1303044 1292300]
- [net] ipv6: reuse rt6_need_strict (Florian Westphal) [1303044 1292300]
- [net] tcp: resets are misrouted (Florian Westphal) [1303044 1292300]
- [net] tcp: tcp_v4_send_reset: binding oif to iif in no sock case (Florian Westphal) [1303044 1292300]
- [crypto] api: Only abort operations on fatal signal (Herbert Xu) [1296014 1272314]
- [crypto] testmgr: don't use interruptible wait in tests (Herbert Xu) [1296014 1272314]
- [kernel] sched: add wait_for_completion_killable_timeout (Herbert Xu) [1296014 1272314]
- [net] sctp: add routing output fallback (Xin Long) [1307073 1229124]
- [net] sctp: fix dst leak (Xin Long) [1307073 1229124]
- [net] sctp: fix src address selection if using secondary addresses (Xin Long) [1307073 1229124]
- [net] sctp: reduce indent level on sctp_v4_get_dst (Xin Long) [1307073 1229124]
- [scsi] hpsa: Update driver revision to RH5 (Joseph Szczypek) [1306192 1244959]
- [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1306192 1244959]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.22.1.el6]" date="1458216000">- [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1318364 1309898]</changelog>
</package>
<package pkgid="56c23c736d472d2702abacd3288f52c6b28af739a71475e7db27ae5c52aa6a26" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.26.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.24.1.el6]" date="1458907200">- [sched] fix KABI break (Seth Jennings) [1314878 1230310]
- [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] sched,perf: Fix periodic timers (Seth Jennings) [1314878 1230310]
- [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1314878 1230310]
- [sched] Cleanup bandwidth timers (Seth Jennings) [1314878 1230310]
- [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix unlocked reads of some cfs_b-&gt;quota/period (Seth Jennings) [1314878 1230310]
- [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq-&gt;lock (Seth Jennings) [1314878 1230310]
- [sched] Fix hrtimer_cancel/rq-&gt;lock deadlock (Seth Jennings) [1314878 1230310]
- [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1314878 1230310]
- [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [block] Fix q_suspended logic error for io submission (David Milburn) [1314209 1227342]
- [block] nvme: No lock while DMA mapping data (David Milburn) [1314209 1227342]
- [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1315706 1249244]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.25.1.el6]" date="1459857600">- [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [fs] anon_inodes implement dname (Aristeu Rozanski) [1322707 1296019]
- [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1320031 1302777]
- [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297421 1297422] {CVE-2015-8767}
- [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1319276 1299975]
- [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1315696 1309241]
- [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid10: submit_bio_wait returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1320863 1273546]
- [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]
- [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.26.1.el6]" date="1460462400">- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1326043 1324318]</changelog>
</package>
<package pkgid="9195ee555192445c70ba969a9e195b2b0be5e8b4b396a1c6737392d9c2c21892" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.3.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.1.1.el6]" date="1436875200">- [redhat] Update dracut dependency to pull in drbg module (Herbert Xu) [1241518 1241338]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.2.1.el6]" date="1437566400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
- [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
- [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
- [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
- [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
- [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
- [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.3.1.el6]" date="1439208000">- [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
- [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]</changelog>
</package>
<package pkgid="c854acb00bba948c6b58fabd63b40e4d9cdebca7e1dad8fcf364d6dfcb3ccc54" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.11.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.9.1.el6]" date="1475841600">- [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1381592 1367250]
- [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve Best) [1377472 1341758]
- [powerpc] eeh: Block PCI configuration space access during EEH (Gustavo Duarte) [1379596 1216944]
- [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347101 1347102] {CVE-2016-1583}
- [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1341546 1316461] {CVE-2016-2143}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.10.1.el6]" date="1476187200">- [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Maurizio Lombardi) [1382620 1341298]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="5e5a572ca58b6b929be9fafeb252b68cbea094a6d4aeeed591283bc526d65595" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
</package>
<package pkgid="36b44018a5fcc41c3a51082909fe7bf4fb7a2500607117c9e4985c55c0fe6e51" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.13.2.el6]" date="1487419200">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="6217f06c3d343fc77a4e612ec80eab56b5f468a69b45b78fb9b6b070e971d3d3" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.15.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.14.1.el6]" date="1483617600">- [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
- [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
- [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
- [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
- [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
- [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
- [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
- [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
- [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
- [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
- [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.15.1.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="c9914d1e61ff7d6b50ae8d87171f1f87c4219b11882d1470e83168392dc6ad36" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.3.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.1.1.el6]" date="1462536000">- [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1333571 1314774]
- [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1333571 1314774]
- [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1333571 1314774]
- [base] firmware: Add lock for firmware devices (Lyude Paul) [1333572 1309875]
- [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1333579 1321174]
- [md] dm: only initialize the request_queue once (Mike Snitzer) [1333575 1328329]
- [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1333581 1295969]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.2.1.el6]" date="1465214400">- [sched] Revert "kernel: sched: Cure load average vs NO_HZ woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Cure more NO_HZ load average woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Move sched_avg_update to update_cpu_load" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Fix nohz load accounting -- again" (Rafael Aquini) [1343015 1326373]
- [fs] lockd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [fs] nfsd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [isdn] avoid calling tty_ldisc_flush() in atomic context (Sabrina Dubroca) [1337443 1328115]
- [redhat] Update dracut dependency to pull in ecb module (Herbert Xu) [1334431 1315832]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
</package>
<package pkgid="14c56007918c1d187465986c0b655ad4bfa99b82510069babc8cb1fe3ce2b6e0" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.4.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.2.el6]" date="1471262400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}</changelog>
</package>
<package pkgid="81cb5bce1e9db2f9a0e4ccfaa8d8b231366be95b7b6930e889fa360b254380ba" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
</package>
<package pkgid="1659b394c72c08c443192cd8953b615f733bf853cf8c5a32b9e5ae0a449e479c" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.6.2.el6]" date="1477310400">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="643509378178c707bab18bb3c832824fe1c774f3ae4958b4224f4e1a21e2c114" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.el6"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-640.el6]" date="1460116800">- [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-641.el6]" date="1460462400">- [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
- [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
- [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-642.el6]" date="1460462401">- [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
- [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
- [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]</changelog>
</package>
<package pkgid="dc614ed4e5bd19aa33593fd4228fd8564801a4f2a6290cc2496f36d1715687c4" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="0d6f59688f8a59a9082ccf442bb13d26e4174d2fbb71087be71c8ba8ed16f124" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="bcbebde20e3cd9f56d8fc221d05ca95ab416cdb4b5e7336b2567f129c286cb08" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="9ebb5ae6f28ed3ab5752a60214296dcf69c677c392baab7ff1b6959337711de2" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="d587327842ada0f551a72b2d6eb8d3b446e14d71a45402cedfaade2d5b20e9ac" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="194101d24d5184c71d4ea92ec7a90060012c99ee08e032a0917f9087e577b552" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="003748bf35aa1261a50f35edf033d05e8e7d450f1ef6f1a93532a6b75b25cc30" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="dd6f942e00ca94c8a233958e21291eda816da61276647a4e16be211189572f9e" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="30d71112b4eb7a6c813ce087362f526eda0a3295d8fe103837d3dc088cd91163" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="81cf763912419bc537bde6e030286f8fdca922e9501729fecba33dd2e74935bd" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="83228c8e226bd83a03c7048e1cbbc3e4ae166f2a409a37aa2e05a9262f4caecb" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="131426da8f5986dcc22ff44ceefb9d6a931bfe68fee4a5cb90e75516d9440f97" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="e61899506074a752c7f248dcc4e015d1129596196d769bd02ccee3139136e77d" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="3bd3801394406af4f4f0ca5a2a0e2479959263db55a82f0d93bcf24097f4b8d2" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="25506f3d6fe7b7ddeadee6e2d819f2d73e6bbe46ca2c638e87073719aeccc664" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.11.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.9.1.el6]" date="1542801600">- [block] make sure queue_lock is held when setting flag (Ming Lei) [1650024]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
</package>
<package pkgid="57de82fde0224756dafa2f514069f616e5fb7e103513f88697ecc33f533044eb" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.12.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.12.1.el6]" date="1551960000">- [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
- [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
- [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
- [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
- [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
- [s390] detect etoken facility (Hendrik Brueckner) [1625381]
- [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
- [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
- [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
- [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
- [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
- [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
- [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
- [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
- [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]</changelog>
</package>
<package pkgid="d5e78dddcd7abae8b30676c6f8295dbc3f5284243e4277727ac82715fa9525e8" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.14.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.13.1.el6]" date="1554120000">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1686170]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.1.el6]" date="1555329600">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695496]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.2.el6]" date="1556107200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
</package>
<package pkgid="863d24ed6b451558984cf14b45a66e8439819f7818e9602508427a81fc082e38" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.15.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.2.el6]" date="1559217600">- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.3.el6]" date="1560427200">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}</changelog>
</package>
<package pkgid="9a6e1248791f75edfc661cc64b83bbb8b9cb0baaafd7a727a60b5762c1af2ce5" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.17.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.16.1.el6]" date="1559044800">- [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
- [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
- [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
- [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
</package>
<package pkgid="f027b508571aac5428f5d6241160d8293de7c9771d933ac155feafbbb45c6efa" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.18.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.1.el6]" date="1562673600">- [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
- [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
- [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
- [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
- [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
- [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
- [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
- [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
- [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.2.el6]" date="1564056000">- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
</package>
<package pkgid="eaa748ffd16a65c4cd945ab45f6aa09e06244b3315a5114655e2c4c8eebf956b" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.2.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.1.1.el6]" date="1529582400">- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
- [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
- [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
- [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change xstateregs_get()/set() to use -&gt;xsave.i387 rather than -&gt;fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] debug: Add KERN_&lt;LEVEL&gt; to bare printks, convert printks to pr_&lt;level&gt; (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Split up &lt;asm/i387.h&gt; into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.2.1.el6]" date="1530619200">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
- [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
- [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
- [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
- [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
- [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]</changelog>
</package>
<package pkgid="2f223785d70a1b72ba1598f2b34eb5d045ed79dfb380585fc5aa9666be9acdf9" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.22.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.19.1.el6]" date="1565438400">- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.20.1.el6]" date="1565784000">- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
</package>
<package pkgid="19cfc0bea5f926ceea4ce3d65c6b2528eb973d96a435209fa63af38fab19337f" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.22.1.el6]" date="1565956801">- Rebuild</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
</package>
<package pkgid="84a4098356783063b4c1fdc13a22574e27c917917f9fd7e4ad8c5223bcaefa7d" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573041600">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="6d2338214a3e374e3de75ac45fbe327af9ac600c06cfe74ea875f97834849e43" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573128000">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.3.el6]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="2b75cf68c1736e2445f4d5c1b6bedbcde378803430354fa01e51f8177f695281" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.25.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.25.1.el6]" date="1574251200">- [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
- [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
- [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
- [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="4a14d589f161cd8023fe9f048f52634e67613d3fd6c81fe5b808e15f07ca7000" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.26.1.el6]" date="1576670400">- [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
- [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
- [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
</package>
<package pkgid="70ddda91e0472a57452373b939be1c927fed72949f2c66d12bd29f87a4478b57" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
</package>
<package pkgid="f06547b178b03475305bc2fc7c408c453e3255beee2269d1ee20e5781f91103f" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.2.el6]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}</changelog>
</package>
<package pkgid="153895861d841ce1f6c1b08a31b88f320da6b124f7d282581a9c5662f61cf2a3" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.3.5.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.3.el6]" date="1533297600">- [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
- [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.4.el6]" date="1533729600">- [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.5.el6]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}</changelog>
</package>
<package pkgid="8f4b6a6357d346680675a4f6e6580535c51a7fb0856b7a92b30721446a3641a0" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.30.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.2.el6]" date="1590753600">- x86/speculation: Provide SRBDS late microcode loading support (Waiman Long)
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}</changelog>
</package>
<package pkgid="c89fb86d08d16b8ab4ab3a93e10be14fa1b5d551073d3bf1306ce14ba73f21a3" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.31.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
</package>
<package pkgid="c9148fc1cc132e8300184b3466de3fc3500a022528f57f6238124344ec8622f8" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.33.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.32.1.el6]" date="1594036800">- [wireless] libertas: make lbs_ibss_join_existing() return error code on rates overflow (Jarod Wilson) [1776569]
- [wireless] libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held (Jarod Wilson) [1776569]
- [wireless] libertas: Fix two buffer overflows at parsing bss descriptor (Jarod Wilson) [1776569]
- [security] keys: Protect request_key() against a type with no match function (Patrick Talbert) [1433220] {CVE-2017-2647}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
</package>
<package pkgid="e8df5b48ea18d798557b895a936a35d29dc2fe5ba2c9880194fb09d5e52f77b0" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.35.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.34.1.el6]" date="1598356800">- [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705003]
- [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705003]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.35.1.el6]" date="1600257600">- [ata] libata: fix NULL sdev dereference race in atapi_qc_complete() (Kenneth Yin) [1876296]</changelog>
</package>
<package pkgid="88acfa93e0371f194ad57716941e182af516c64d080639e8d3016fc3b4b98698" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.1.el6]" date="1535716800">- [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
- [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
- [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
- [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
- [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
- [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
- [block] Rename queue dead flag (Ming Lei) [1574568]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.2.el6]" date="1536926400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
- [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-754.6.3.el6]" date="1537272000">- [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
- [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
- [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]</changelog>
</package>
<package pkgid="74bd3f08227282ab9dc1efb02b7ac2c2fcec8fe98f1f6a2b24717e041e4bf115" name="kernel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-752.el6]" date="1525348800">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
- [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
- [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
- [net] security: export security_sk_clone (Marcelo Leitner) [1571357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-753.el6]" date="1526040000">- [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
- [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
- [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
</package>
<package pkgid="0dd28907c3304f1c4f99ef8f81ea249cbb95069808954301dee4515046ccf222" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="573.12.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.10.1.el6]" date="1446811200">- [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
- [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
- [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
- [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
- [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
- [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
- [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.11.1.el6]" date="1447416000">- [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
- [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.12.1.el6]" date="1448280000">- Revert: [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]</changelog>
</package>
<package pkgid="865b4652edb4e25fa20be45f5cd2931beab2991b91e5adb440a568983f7f6266" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="573.22.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.20.1.el6]" date="1453464000">- [sched] kernel: sched: Fix nohz load accounting -- again (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Move sched_avg_update to update_cpu_load (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure more NO_HZ load average woes (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure load average vs NO_HZ woes (Rafael Aquini) [1300349 1167755]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.21.1.el6]" date="1456142400">- [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1310148 1302223] {CVE-2016-0774}
- [fs] gfs2: Add missing else in trans_add_meta/data (Robert S Peterson) [1304332 1267995]
- [fs] fs-cache: Synchronise object death state change vs operation submission (David Howells) [1308471 1096893]
- [fs] fs-cache: Reduce cookie ref count if submit fails (David Howells) [1308471 1096893]
- [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1302763 1294400]
- [x86] fix corruption of XMM registers when interrupt handlers use FPU (Mikulas Patocka) [1298994 1259023]
- [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1303044 1292300]
- [net] add inet_sk_transparent() helper (Florian Westphal) [1303044 1292300]
- [net] ipv6: tcp_ipv6 policy route issue (Florian Westphal) [1303044 1292300]
- [net] ipv6: reuse rt6_need_strict (Florian Westphal) [1303044 1292300]
- [net] tcp: resets are misrouted (Florian Westphal) [1303044 1292300]
- [net] tcp: tcp_v4_send_reset: binding oif to iif in no sock case (Florian Westphal) [1303044 1292300]
- [crypto] api: Only abort operations on fatal signal (Herbert Xu) [1296014 1272314]
- [crypto] testmgr: don't use interruptible wait in tests (Herbert Xu) [1296014 1272314]
- [kernel] sched: add wait_for_completion_killable_timeout (Herbert Xu) [1296014 1272314]
- [net] sctp: add routing output fallback (Xin Long) [1307073 1229124]
- [net] sctp: fix dst leak (Xin Long) [1307073 1229124]
- [net] sctp: fix src address selection if using secondary addresses (Xin Long) [1307073 1229124]
- [net] sctp: reduce indent level on sctp_v4_get_dst (Xin Long) [1307073 1229124]
- [scsi] hpsa: Update driver revision to RH5 (Joseph Szczypek) [1306192 1244959]
- [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1306192 1244959]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.22.1.el6]" date="1458216000">- [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1318364 1309898]</changelog>
</package>
<package pkgid="266f276fd52e800e319b724bf54bd08100f060c3c7ed5bd5400512ed791ed487" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="573.26.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.24.1.el6]" date="1458907200">- [sched] fix KABI break (Seth Jennings) [1314878 1230310]
- [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] sched,perf: Fix periodic timers (Seth Jennings) [1314878 1230310]
- [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1314878 1230310]
- [sched] Cleanup bandwidth timers (Seth Jennings) [1314878 1230310]
- [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix unlocked reads of some cfs_b-&gt;quota/period (Seth Jennings) [1314878 1230310]
- [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq-&gt;lock (Seth Jennings) [1314878 1230310]
- [sched] Fix hrtimer_cancel/rq-&gt;lock deadlock (Seth Jennings) [1314878 1230310]
- [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1314878 1230310]
- [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [block] Fix q_suspended logic error for io submission (David Milburn) [1314209 1227342]
- [block] nvme: No lock while DMA mapping data (David Milburn) [1314209 1227342]
- [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1315706 1249244]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.25.1.el6]" date="1459857600">- [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [fs] anon_inodes implement dname (Aristeu Rozanski) [1322707 1296019]
- [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1320031 1302777]
- [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297421 1297422] {CVE-2015-8767}
- [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1319276 1299975]
- [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1315696 1309241]
- [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid10: submit_bio_wait returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1320863 1273546]
- [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]
- [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.26.1.el6]" date="1460462400">- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1326043 1324318]</changelog>
</package>
<package pkgid="d75e2f8afe1966ebe8b9ff35f2de4576d041a02259d0281ec114a187b27a5640" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="573.3.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.1.1.el6]" date="1436875200">- [redhat] Update dracut dependency to pull in drbg module (Herbert Xu) [1241518 1241338]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.2.1.el6]" date="1437566400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
- [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
- [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
- [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
- [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
- [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
- [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.3.1.el6]" date="1439208000">- [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
- [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]</changelog>
</package>
<package pkgid="0adbeecb285985374e30fdbf84cc4342c144074d1ea2896e63893936606fc453" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.11.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.9.1.el6]" date="1475841600">- [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1381592 1367250]
- [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve Best) [1377472 1341758]
- [powerpc] eeh: Block PCI configuration space access during EEH (Gustavo Duarte) [1379596 1216944]
- [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347101 1347102] {CVE-2016-1583}
- [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1341546 1316461] {CVE-2016-2143}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.10.1.el6]" date="1476187200">- [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Maurizio Lombardi) [1382620 1341298]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="c171521ea01dd684e221c09c9805e1e5c82b3e6b9bc3e66bdbba918c42c9c19b" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.13.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
</package>
<package pkgid="6e7dc601051e6b4e615e8475cfe4a0423612c2999e4387b8d6cb9d90bf8cca95" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.13.2.el6]" date="1487419200">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="d8772a5a713ccd8ccf66504653e2693f9be9aa993b2c89aa1ea7c9090e27ba0c" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.15.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.14.1.el6]" date="1483617600">- [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
- [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
- [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
- [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
- [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
- [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
- [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
- [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
- [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
- [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
- [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.15.1.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="dca4966e034b8413994cc1eb86adda66a0ca5c9a87beaba245942b7a5feb632e" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.3.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.1.1.el6]" date="1462536000">- [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1333571 1314774]
- [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1333571 1314774]
- [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1333571 1314774]
- [base] firmware: Add lock for firmware devices (Lyude Paul) [1333572 1309875]
- [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1333579 1321174]
- [md] dm: only initialize the request_queue once (Mike Snitzer) [1333575 1328329]
- [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1333581 1295969]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.2.1.el6]" date="1465214400">- [sched] Revert "kernel: sched: Cure load average vs NO_HZ woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Cure more NO_HZ load average woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Move sched_avg_update to update_cpu_load" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Fix nohz load accounting -- again" (Rafael Aquini) [1343015 1326373]
- [fs] lockd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [fs] nfsd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [isdn] avoid calling tty_ldisc_flush() in atomic context (Sabrina Dubroca) [1337443 1328115]
- [redhat] Update dracut dependency to pull in ecb module (Herbert Xu) [1334431 1315832]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
</package>
<package pkgid="9bd107c0a1d08f0d470bbbf877036c6ee3973b9e4895be018b26701aa1e4523d" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.4.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.2.el6]" date="1471262400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}</changelog>
</package>
<package pkgid="bc0a55ed3f6af22af1e644fda84f6aa298f5984928f22348146b4b27631847f1" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.6.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
</package>
<package pkgid="f1f5d6c9d24f5bcb0e2f53f43bee4a4a48d7853b3b8fbff64397b3ee3f2a9250" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.6.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.6.2.el6]" date="1477310400">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="656f377656e4f9a9c0c3f8bc18a92879a591027bae6a50641f8eb920dd959714" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.el6"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-640.el6]" date="1460116800">- [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-641.el6]" date="1460462400">- [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
- [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
- [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-642.el6]" date="1460462401">- [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
- [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
- [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]</changelog>
</package>
<package pkgid="05d7b53bb95ca3ad750e6d569f27a6531b3e50979592ab0f0f9c6e15bf0921cc" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="611b9a684051af5e4cced48c671c88d2ea4df4a2470bfe2731e16436ef5c15be" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="e34a595d77f857d0a722d324b850c209f41491244a41def1408ae4866dea6db4" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="c94591d676e929fac6d314ff61c2c90146696b40ab75ba3ecd230d798daaa2f3" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="0af4b1ab5e56d14bd8d74131ac1e4a6014b577980ae7741af5f70544354792f0" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="ea8f54717c1b946365f59c6c7dd52181bd0e9ec7328e4cb2a75454053e7c4d19" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="ebae57cf0e3745f917ff6c403181cd9f995ff43e0a46e4a8f70a1e000f2ad87a" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="37b3ae0497a465b631ccd3984a2a3e9cc798728ed94591faddb5a2a5154e75a3" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="b87cc02e2060ed38c25bc43969183e3a1280510a55bff57d9adaa9847a7f426c" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="683a058363b16779571de85ae065c7c60f5af8624324c1a70bb0f7fccd5f7852" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="3567a866bc5265483c14065a7f3d0b67dff9989351f1040f3c2ac4ed752324fd" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="03931ad87cd7a18b1f355ea0b9865a6e6aa9f0a98756a15e95965ae86f2c07c9" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="59740baee481bd15f0d3a56065838dee04694822d164aeacb8e941b2070ce96d" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="373fc25e40b0055243999fdc6accdcee6af21e033ba3fa8a2d898d300a535185" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="6da6a9ef8b3191e30759860513dca99e2fc644f59c9afd6027e603e4aa905583" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.11.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.9.1.el6]" date="1542801600">- [block] make sure queue_lock is held when setting flag (Ming Lei) [1650024]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
</package>
<package pkgid="dc23144ede380cce63aac7b9a4e1d2d003a6a4461db292ec0e27b80cec4ea6f4" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.12.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.12.1.el6]" date="1551960000">- [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
- [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
- [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
- [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
- [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
- [s390] detect etoken facility (Hendrik Brueckner) [1625381]
- [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
- [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
- [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
- [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
- [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
- [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
- [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
- [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
- [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]</changelog>
</package>
<package pkgid="0bcc855f096a25fd1e07c9e070496a15965acc391856870436dc4d3c8d525960" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.14.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.13.1.el6]" date="1554120000">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1686170]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.1.el6]" date="1555329600">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695496]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.2.el6]" date="1556107200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
</package>
<package pkgid="a6bd088a6af90b68ba2988cb9577c87fd8f3c8e70587cff1a947bd9cb463c346" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.15.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.2.el6]" date="1559217600">- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.3.el6]" date="1560427200">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}</changelog>
</package>
<package pkgid="6c25ef94a9ebc45d194d41b66918917019c5f3d25e72eae9d72243f4ff902a38" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.17.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.16.1.el6]" date="1559044800">- [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
- [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
- [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
- [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
</package>
<package pkgid="40f7bc1add242616107d74280208eb47229e5b1cff19a8501290290d24201872" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.18.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.1.el6]" date="1562673600">- [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
- [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
- [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
- [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
- [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
- [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
- [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
- [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
- [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.2.el6]" date="1564056000">- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
</package>
<package pkgid="fdc54d149663e61aca9ddf3d71cc911c62f56856622efa647788d5344231de07" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.2.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.1.1.el6]" date="1529582400">- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
- [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
- [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
- [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change xstateregs_get()/set() to use -&gt;xsave.i387 rather than -&gt;fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] debug: Add KERN_&lt;LEVEL&gt; to bare printks, convert printks to pr_&lt;level&gt; (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Split up &lt;asm/i387.h&gt; into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.2.1.el6]" date="1530619200">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
- [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
- [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
- [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
- [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
- [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]</changelog>
</package>
<package pkgid="28a86a186d10f19e5545509ced59f132c75fc6e984ce77dcd7737d129d6b6264" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.22.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.19.1.el6]" date="1565438400">- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.20.1.el6]" date="1565784000">- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
</package>
<package pkgid="30b641fcb0fac4e7afafe495efa54ce97cf00e08a8d20f4282d627cb4778bef3" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.22.1.el6]" date="1565956801">- Rebuild</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
</package>
<package pkgid="e93510bebf7ae8913e1e229ca397f89a99a334264c845106e2b3d91da5ca8275" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.24.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573041600">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="ed779305e6cd7a26cd34b413e9b5b4cbec4fba94750a4a358167acfc6741c4e3" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.24.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573128000">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.3.el6]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="780620108cc86ba9634200fdc2155ffa65ed82cd0979795eeec0f4370ef73075" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.25.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.25.1.el6]" date="1574251200">- [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
- [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
- [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
- [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="b49136d71faf2a416f07485e49c4a72e816c2b0c7f5a5a0c2f7b5bd8e9dc0ec8" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.26.1.el6]" date="1576670400">- [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
- [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
- [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
</package>
<package pkgid="21415c036c175c1ff223d933f78794efdd9bd62777ea5b32533bbe853dfb1a39" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.29.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
</package>
<package pkgid="0420598dca0abb270d088895439416fa07f685d4099807ee1b9683a815c292d6" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.29.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.2.el6]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}</changelog>
</package>
<package pkgid="3caaa45863cdd17ad054c15fe8bd32c7b1dae1a82bb3f7c7e95ec8ebc61b5e07" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.3.5.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.3.el6]" date="1533297600">- [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
- [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.4.el6]" date="1533729600">- [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.5.el6]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}</changelog>
</package>
<package pkgid="730770d4ce0c67828244447ebc39d11243b6bfe40ddcd34224ab246ca84833d5" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.30.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.2.el6]" date="1590753600">- x86/speculation: Provide SRBDS late microcode loading support (Waiman Long)
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}</changelog>
</package>
<package pkgid="5a01513018c63477b395dfd3b566e36cb970039217f71703d35d01a9f49ef009" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.31.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
</package>
<package pkgid="1c10f523013b858e8d2e5f087378a56c7f0794fd8d15df97649e51fc2e31fd1b" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.33.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.32.1.el6]" date="1594036800">- [wireless] libertas: make lbs_ibss_join_existing() return error code on rates overflow (Jarod Wilson) [1776569]
- [wireless] libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held (Jarod Wilson) [1776569]
- [wireless] libertas: Fix two buffer overflows at parsing bss descriptor (Jarod Wilson) [1776569]
- [security] keys: Protect request_key() against a type with no match function (Patrick Talbert) [1433220] {CVE-2017-2647}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
</package>
<package pkgid="100e6fd09800c19d354b45d101ee8acf435ff3747dd55fa7c540336e22fa2856" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.35.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.34.1.el6]" date="1598356800">- [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705003]
- [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705003]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.35.1.el6]" date="1600257600">- [ata] libata: fix NULL sdev dereference race in atapi_qc_complete() (Kenneth Yin) [1876296]</changelog>
</package>
<package pkgid="5587939ade25cd387c7990abf181594c3f39b44be7e296cb0ec1a216d2b7ae6a" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.1.el6]" date="1535716800">- [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
- [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
- [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
- [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
- [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
- [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
- [block] Rename queue dead flag (Ming Lei) [1574568]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.2.el6]" date="1536926400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
- [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-754.6.3.el6]" date="1537272000">- [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
- [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
- [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]</changelog>
</package>
<package pkgid="d17fc0ef81add36966c5ad1a52e1ac12d36f7779b6df5d691cc0a59a61415abe" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-752.el6]" date="1525348800">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
- [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
- [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
- [net] security: export security_sk_clone (Marcelo Leitner) [1571357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-753.el6]" date="1526040000">- [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
- [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
- [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
</package>
<package pkgid="ec10f4a7f6eb82a0bd744b2d9886ccf54f9a0e3dd0b37981bc84dfa2b1e2d6c8" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.12.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.10.1.el6]" date="1446811200">- [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
- [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
- [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
- [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
- [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
- [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
- [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.11.1.el6]" date="1447416000">- [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
- [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.12.1.el6]" date="1448280000">- Revert: [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]</changelog>
</package>
<package pkgid="d8f0c654f497ac62d17c83aa61d3b579bc165f5f6cb85fd73ba3f94f1b3311ca" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.22.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.20.1.el6]" date="1453464000">- [sched] kernel: sched: Fix nohz load accounting -- again (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Move sched_avg_update to update_cpu_load (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure more NO_HZ load average woes (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure load average vs NO_HZ woes (Rafael Aquini) [1300349 1167755]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.21.1.el6]" date="1456142400">- [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1310148 1302223] {CVE-2016-0774}
- [fs] gfs2: Add missing else in trans_add_meta/data (Robert S Peterson) [1304332 1267995]
- [fs] fs-cache: Synchronise object death state change vs operation submission (David Howells) [1308471 1096893]
- [fs] fs-cache: Reduce cookie ref count if submit fails (David Howells) [1308471 1096893]
- [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1302763 1294400]
- [x86] fix corruption of XMM registers when interrupt handlers use FPU (Mikulas Patocka) [1298994 1259023]
- [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1303044 1292300]
- [net] add inet_sk_transparent() helper (Florian Westphal) [1303044 1292300]
- [net] ipv6: tcp_ipv6 policy route issue (Florian Westphal) [1303044 1292300]
- [net] ipv6: reuse rt6_need_strict (Florian Westphal) [1303044 1292300]
- [net] tcp: resets are misrouted (Florian Westphal) [1303044 1292300]
- [net] tcp: tcp_v4_send_reset: binding oif to iif in no sock case (Florian Westphal) [1303044 1292300]
- [crypto] api: Only abort operations on fatal signal (Herbert Xu) [1296014 1272314]
- [crypto] testmgr: don't use interruptible wait in tests (Herbert Xu) [1296014 1272314]
- [kernel] sched: add wait_for_completion_killable_timeout (Herbert Xu) [1296014 1272314]
- [net] sctp: add routing output fallback (Xin Long) [1307073 1229124]
- [net] sctp: fix dst leak (Xin Long) [1307073 1229124]
- [net] sctp: fix src address selection if using secondary addresses (Xin Long) [1307073 1229124]
- [net] sctp: reduce indent level on sctp_v4_get_dst (Xin Long) [1307073 1229124]
- [scsi] hpsa: Update driver revision to RH5 (Joseph Szczypek) [1306192 1244959]
- [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1306192 1244959]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.22.1.el6]" date="1458216000">- [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1318364 1309898]</changelog>
</package>
<package pkgid="8ebef6d9e7984617a0868046fe06c8ad528c431f014357ca5d79a983f7b1d719" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.26.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.24.1.el6]" date="1458907200">- [sched] fix KABI break (Seth Jennings) [1314878 1230310]
- [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] sched,perf: Fix periodic timers (Seth Jennings) [1314878 1230310]
- [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1314878 1230310]
- [sched] Cleanup bandwidth timers (Seth Jennings) [1314878 1230310]
- [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix unlocked reads of some cfs_b-&gt;quota/period (Seth Jennings) [1314878 1230310]
- [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq-&gt;lock (Seth Jennings) [1314878 1230310]
- [sched] Fix hrtimer_cancel/rq-&gt;lock deadlock (Seth Jennings) [1314878 1230310]
- [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1314878 1230310]
- [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [block] Fix q_suspended logic error for io submission (David Milburn) [1314209 1227342]
- [block] nvme: No lock while DMA mapping data (David Milburn) [1314209 1227342]
- [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1315706 1249244]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.25.1.el6]" date="1459857600">- [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [fs] anon_inodes implement dname (Aristeu Rozanski) [1322707 1296019]
- [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1320031 1302777]
- [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297421 1297422] {CVE-2015-8767}
- [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1319276 1299975]
- [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1315696 1309241]
- [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid10: submit_bio_wait returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1320863 1273546]
- [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]
- [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.26.1.el6]" date="1460462400">- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1326043 1324318]</changelog>
</package>
<package pkgid="8a37064c7debce410243130f12dc8e9422d7020f9ac7d6d9f84ce73e13092823" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.3.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.1.1.el6]" date="1436875200">- [redhat] Update dracut dependency to pull in drbg module (Herbert Xu) [1241518 1241338]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.2.1.el6]" date="1437566400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
- [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
- [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
- [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
- [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
- [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
- [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.3.1.el6]" date="1439208000">- [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
- [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]</changelog>
</package>
<package pkgid="15b2eab19e28554903c5ebf0483f699d2b4baa1d80f17c5f1a87cccd9e615b16" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.11.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.9.1.el6]" date="1475841600">- [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1381592 1367250]
- [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve Best) [1377472 1341758]
- [powerpc] eeh: Block PCI configuration space access during EEH (Gustavo Duarte) [1379596 1216944]
- [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347101 1347102] {CVE-2016-1583}
- [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1341546 1316461] {CVE-2016-2143}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.10.1.el6]" date="1476187200">- [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Maurizio Lombardi) [1382620 1341298]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="f23f8c973be1613a8ab0431d4fa797197e03b41eb31080d308fba4248fdd8997" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
</package>
<package pkgid="58beb89656803adc5aab7843cb14250442ee14df0bb9f2fd765a0fe8c0d0c7f3" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.13.2.el6]" date="1487419200">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="87a2b20c97daff759aadabeabf00b88bbeaf5ca09f5eb76db4a6a128624facd2" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.15.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.14.1.el6]" date="1483617600">- [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
- [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
- [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
- [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
- [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
- [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
- [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
- [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
- [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
- [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
- [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.15.1.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="0743ad8ade9c9cd8fd18c47b486a20d4ec94d69ffe64831b657311c2b9938670" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.3.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.1.1.el6]" date="1462536000">- [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1333571 1314774]
- [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1333571 1314774]
- [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1333571 1314774]
- [base] firmware: Add lock for firmware devices (Lyude Paul) [1333572 1309875]
- [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1333579 1321174]
- [md] dm: only initialize the request_queue once (Mike Snitzer) [1333575 1328329]
- [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1333581 1295969]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.2.1.el6]" date="1465214400">- [sched] Revert "kernel: sched: Cure load average vs NO_HZ woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Cure more NO_HZ load average woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Move sched_avg_update to update_cpu_load" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Fix nohz load accounting -- again" (Rafael Aquini) [1343015 1326373]
- [fs] lockd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [fs] nfsd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [isdn] avoid calling tty_ldisc_flush() in atomic context (Sabrina Dubroca) [1337443 1328115]
- [redhat] Update dracut dependency to pull in ecb module (Herbert Xu) [1334431 1315832]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
</package>
<package pkgid="d112c3869645ddf60318b6bcef68a3c4e41b0182df8b8289d335153e28601c68" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.4.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.2.el6]" date="1471262400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}</changelog>
</package>
<package pkgid="6c0bc20f08a69907a4ff21c0320f7b491dead625b3622ff09cdf86e227b1b0cc" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
</package>
<package pkgid="bdbf93a76bbd757aa573cb74dde2d25b966757a6ea23b33db8b135b0e5a7b7bb" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.6.2.el6]" date="1477310400">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="57964062b63baf2b8d7a48579f1457ca7e501b47174276de6db3a5dbecac9684" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.el6"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-640.el6]" date="1460116800">- [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-641.el6]" date="1460462400">- [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
- [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
- [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-642.el6]" date="1460462401">- [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
- [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
- [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]</changelog>
</package>
<package pkgid="430256c44e7f29b115fb55215208bfaa276b2e8c46cc58d5853a9118b8814c63" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="0334fd8d4a5e2194e8542500107633a44cf3fb846b648d0e1932ce3bc69a8811" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="b36823c2494abf2750fe2d73daecb6840c057028acc5b381bf172755a898b8aa" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="5d8d17ce82607f7cfdcf1aaf6378b192a80545fa55022c37cca662cc55a2ecf2" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="428a8a0073cf8dee843acf7221b8ab394fb0271a0db20fdcfed145932e72e6fc" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="f29d01a23e80e581aa493933bffcb80e8c1dce98db5ffd9e608ff3e1f399fed8" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="9b4107477ee0a108dbf7d4d8d870fbcc96ab46d1d9a1f431fce4bcf382e5124a" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="bf6cc82eb435a6439922c5e830bcdf5d3a6f70626fda5d331341498734c033e1" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="5b1c07170408cca4108c4f1b5c560c01107783073a28e5093971c603a1ff94c1" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="fa84aa1f9500eb9cbc0c4b1326e6f9b68e92a87583bda4967ed7ac3de6b7eaec" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="609a6e40c21537c78beaf24c019c30d918fcddc87bff1d215d8cab0cae2a87e5" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="02902d29c2093126a2ce17b644ea33ea1edd9ac1cd4fdd898bb57436f066643b" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="cf061b4b97c869bc0f13d11fce7866d4ef2b083131028bc778aad39e161eb30b" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="6ec4375dfd12088b471cbea7b3c471c2a830dc2d59523ef84712df163b442a25" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="eb63e3cc4cd66e54c180428585458c372ac247eb03e09541d12c78ec19f81bdf" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.11.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.9.1.el6]" date="1542801600">- [block] make sure queue_lock is held when setting flag (Ming Lei) [1650024]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
</package>
<package pkgid="729005bff510f516777cd403d1c2e6bd47c2a8d81528ea5d939d2e65c32ec649" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.12.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.12.1.el6]" date="1551960000">- [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
- [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
- [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
- [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
- [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
- [s390] detect etoken facility (Hendrik Brueckner) [1625381]
- [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
- [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
- [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
- [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
- [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
- [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
- [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
- [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
- [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]</changelog>
</package>
<package pkgid="cf1cf7ef98ffe519c9bbd2e37004a7d147fa7ee12f88f7e747be682a94d061ce" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.14.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.13.1.el6]" date="1554120000">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1686170]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.1.el6]" date="1555329600">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695496]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.2.el6]" date="1556107200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
</package>
<package pkgid="dadf38121cdc4fa9a3489d3d76f2a40fc48860f3d86aa90e1dd49d2ae359757f" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.15.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.2.el6]" date="1559217600">- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.3.el6]" date="1560427200">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}</changelog>
</package>
<package pkgid="032ee282eaa3acee0fb34686f89f14704c1e6caab6fcce0aa7683bbbff5ca9e3" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.17.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.16.1.el6]" date="1559044800">- [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
- [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
- [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
- [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
</package>
<package pkgid="36f1c6dcec10857ef981b0125855dc8a1a8f145f5b1bc38ee1270600d8112c1a" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.18.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.1.el6]" date="1562673600">- [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
- [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
- [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
- [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
- [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
- [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
- [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
- [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
- [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.2.el6]" date="1564056000">- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
</package>
<package pkgid="81fe8fc900be414caced241043c4ce8d4cf1283c8242f1e6618d0ab3de7d3251" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.2.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.1.1.el6]" date="1529582400">- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
- [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
- [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
- [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change xstateregs_get()/set() to use -&gt;xsave.i387 rather than -&gt;fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] debug: Add KERN_&lt;LEVEL&gt; to bare printks, convert printks to pr_&lt;level&gt; (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Split up &lt;asm/i387.h&gt; into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.2.1.el6]" date="1530619200">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
- [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
- [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
- [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
- [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
- [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]</changelog>
</package>
<package pkgid="997d5cfa08e5dca2291079783fa2e32c00265a178989bea14da1395ca8615e87" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.22.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.19.1.el6]" date="1565438400">- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.20.1.el6]" date="1565784000">- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
</package>
<package pkgid="40401b857b09521489a885c6ab69c3d217014d290974a22aa04ce3641284aa22" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.22.1.el6]" date="1565956801">- Rebuild</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
</package>
<package pkgid="5daa4fd19c389666b1c8712b7125a14696c4d71ccd7cff5cb086c2f5c52c2c88" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573041600">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="b80cd6b04a2e5214ff6800f558ffccb47a9f897aecae5c980a5f2e539df5e77e" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573128000">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.3.el6]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="91fb0467752bdd59047431042dc9d1a0d732808a939bdc302005c54584fe6735" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.25.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.25.1.el6]" date="1574251200">- [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
- [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
- [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
- [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="08068b6652dfe516d1c0e9f006a7af1e0aa7b81e0f56d885ddcfbf3a0421c8eb" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.26.1.el6]" date="1576670400">- [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
- [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
- [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
</package>
<package pkgid="ae0e41c4b86dc18df50f93ffeca0b88c2f8b6c6df9103c5e66842e393adee431" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
</package>
<package pkgid="bd5c7284198005e6178785ebe8b45dd48f98d1bc66396e372267fce4932dd4b9" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.2.el6]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}</changelog>
</package>
<package pkgid="c9f5b2b43d56725ddc8fb30fa2cd0d464a1fa9c9bd17f19a96bb26196f12a9e9" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.3.5.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.3.el6]" date="1533297600">- [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
- [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.4.el6]" date="1533729600">- [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.5.el6]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}</changelog>
</package>
<package pkgid="8be551c1fdc7d72df1c913333bdafadbf828cf46b612be5fcce28ad1d6ed7e42" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.30.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.2.el6]" date="1590753600">- x86/speculation: Provide SRBDS late microcode loading support (Waiman Long)
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}</changelog>
</package>
<package pkgid="f1fdf52d20afa0c1975918b11d7bf81bb8ae8dc65ef2f18996fc105a9ca2b7a0" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.31.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
</package>
<package pkgid="9174a036b6abf890361d5c2b2092b29e39ab7b54da0ca7de49fa3a846a2a1699" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.33.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.32.1.el6]" date="1594036800">- [wireless] libertas: make lbs_ibss_join_existing() return error code on rates overflow (Jarod Wilson) [1776569]
- [wireless] libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held (Jarod Wilson) [1776569]
- [wireless] libertas: Fix two buffer overflows at parsing bss descriptor (Jarod Wilson) [1776569]
- [security] keys: Protect request_key() against a type with no match function (Patrick Talbert) [1433220] {CVE-2017-2647}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
</package>
<package pkgid="b4d7f1a164aba2b9933ea65ea970b2db5373dc55d33655634b79c16000217ae7" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.35.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.34.1.el6]" date="1598356800">- [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705003]
- [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705003]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.35.1.el6]" date="1600257600">- [ata] libata: fix NULL sdev dereference race in atapi_qc_complete() (Kenneth Yin) [1876296]</changelog>
</package>
<package pkgid="7ca5bcfdbad86e7d5db92258ef0b51d4bb42ea2a93fa2ccaaa2cc30433f9ced8" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.1.el6]" date="1535716800">- [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
- [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
- [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
- [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
- [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
- [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
- [block] Rename queue dead flag (Ming Lei) [1574568]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.2.el6]" date="1536926400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
- [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-754.6.3.el6]" date="1537272000">- [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
- [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
- [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]</changelog>
</package>
<package pkgid="b10dfeee3ffb87c191933375a29156630a1d21f5d5a77f5c8f1a1f041c97ded0" name="kernel-debug" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-752.el6]" date="1525348800">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
- [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
- [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
- [net] security: export security_sk_clone (Marcelo Leitner) [1571357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-753.el6]" date="1526040000">- [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
- [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
- [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
</package>
<package pkgid="8802d1aab8ebf5ab472b27372467643d4302bebd937596019f8895548bbbd76a" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.12.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.10.1.el6]" date="1446811200">- [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
- [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
- [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
- [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
- [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
- [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
- [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.11.1.el6]" date="1447416000">- [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
- [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.12.1.el6]" date="1448280000">- Revert: [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]</changelog>
</package>
<package pkgid="0b0f177ab84cfc545a9b46b7c815e02313213c2fdeddf496456e993f0c4f4810" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.22.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.20.1.el6]" date="1453464000">- [sched] kernel: sched: Fix nohz load accounting -- again (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Move sched_avg_update to update_cpu_load (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure more NO_HZ load average woes (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure load average vs NO_HZ woes (Rafael Aquini) [1300349 1167755]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.21.1.el6]" date="1456142400">- [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1310148 1302223] {CVE-2016-0774}
- [fs] gfs2: Add missing else in trans_add_meta/data (Robert S Peterson) [1304332 1267995]
- [fs] fs-cache: Synchronise object death state change vs operation submission (David Howells) [1308471 1096893]
- [fs] fs-cache: Reduce cookie ref count if submit fails (David Howells) [1308471 1096893]
- [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1302763 1294400]
- [x86] fix corruption of XMM registers when interrupt handlers use FPU (Mikulas Patocka) [1298994 1259023]
- [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1303044 1292300]
- [net] add inet_sk_transparent() helper (Florian Westphal) [1303044 1292300]
- [net] ipv6: tcp_ipv6 policy route issue (Florian Westphal) [1303044 1292300]
- [net] ipv6: reuse rt6_need_strict (Florian Westphal) [1303044 1292300]
- [net] tcp: resets are misrouted (Florian Westphal) [1303044 1292300]
- [net] tcp: tcp_v4_send_reset: binding oif to iif in no sock case (Florian Westphal) [1303044 1292300]
- [crypto] api: Only abort operations on fatal signal (Herbert Xu) [1296014 1272314]
- [crypto] testmgr: don't use interruptible wait in tests (Herbert Xu) [1296014 1272314]
- [kernel] sched: add wait_for_completion_killable_timeout (Herbert Xu) [1296014 1272314]
- [net] sctp: add routing output fallback (Xin Long) [1307073 1229124]
- [net] sctp: fix dst leak (Xin Long) [1307073 1229124]
- [net] sctp: fix src address selection if using secondary addresses (Xin Long) [1307073 1229124]
- [net] sctp: reduce indent level on sctp_v4_get_dst (Xin Long) [1307073 1229124]
- [scsi] hpsa: Update driver revision to RH5 (Joseph Szczypek) [1306192 1244959]
- [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1306192 1244959]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.22.1.el6]" date="1458216000">- [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1318364 1309898]</changelog>
</package>
<package pkgid="c4c5c9f3f2453e04c135bd5cbc4c20edf774cbaf9e652b3eba30881f3a9c5954" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.26.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.24.1.el6]" date="1458907200">- [sched] fix KABI break (Seth Jennings) [1314878 1230310]
- [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] sched,perf: Fix periodic timers (Seth Jennings) [1314878 1230310]
- [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1314878 1230310]
- [sched] Cleanup bandwidth timers (Seth Jennings) [1314878 1230310]
- [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix unlocked reads of some cfs_b-&gt;quota/period (Seth Jennings) [1314878 1230310]
- [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq-&gt;lock (Seth Jennings) [1314878 1230310]
- [sched] Fix hrtimer_cancel/rq-&gt;lock deadlock (Seth Jennings) [1314878 1230310]
- [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1314878 1230310]
- [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [block] Fix q_suspended logic error for io submission (David Milburn) [1314209 1227342]
- [block] nvme: No lock while DMA mapping data (David Milburn) [1314209 1227342]
- [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1315706 1249244]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.25.1.el6]" date="1459857600">- [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [fs] anon_inodes implement dname (Aristeu Rozanski) [1322707 1296019]
- [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1320031 1302777]
- [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297421 1297422] {CVE-2015-8767}
- [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1319276 1299975]
- [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1315696 1309241]
- [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid10: submit_bio_wait returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1320863 1273546]
- [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]
- [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.26.1.el6]" date="1460462400">- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1326043 1324318]</changelog>
</package>
<package pkgid="17c9d7de04ab333f3c3b4410d3363d91a386740d8beba17c60c2febfbe2cf9cc" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.3.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.1.1.el6]" date="1436875200">- [redhat] Update dracut dependency to pull in drbg module (Herbert Xu) [1241518 1241338]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.2.1.el6]" date="1437566400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
- [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
- [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
- [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
- [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
- [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
- [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.3.1.el6]" date="1439208000">- [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
- [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]</changelog>
</package>
<package pkgid="4bd2050751ec90f557a44a4f3bfe6cac045d71a9eb1ab3ab002974daf5f71e02" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.11.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.9.1.el6]" date="1475841600">- [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1381592 1367250]
- [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve Best) [1377472 1341758]
- [powerpc] eeh: Block PCI configuration space access during EEH (Gustavo Duarte) [1379596 1216944]
- [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347101 1347102] {CVE-2016-1583}
- [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1341546 1316461] {CVE-2016-2143}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.10.1.el6]" date="1476187200">- [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Maurizio Lombardi) [1382620 1341298]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="8b69f6c581df75030f040af001898b16380e127590214a8b6c55e18302e3e1f3" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
</package>
<package pkgid="2d61d4b48c47e8a139d556e23acaf968fc7c9da1184062d2ba55a94aa61e90a1" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.13.2.el6]" date="1487419200">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="89aca47288e7d6f37aafb9bdc583b11f82eabe1a3d490ab8bc255f20b3a34ba3" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.15.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.14.1.el6]" date="1483617600">- [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
- [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
- [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
- [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
- [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
- [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
- [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
- [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
- [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
- [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
- [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.15.1.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="084d6cc35c03ffd3f8aabe41c05a0a5d27b1f390e05c42765fab3eaedeb761a5" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.3.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.1.1.el6]" date="1462536000">- [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1333571 1314774]
- [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1333571 1314774]
- [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1333571 1314774]
- [base] firmware: Add lock for firmware devices (Lyude Paul) [1333572 1309875]
- [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1333579 1321174]
- [md] dm: only initialize the request_queue once (Mike Snitzer) [1333575 1328329]
- [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1333581 1295969]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.2.1.el6]" date="1465214400">- [sched] Revert "kernel: sched: Cure load average vs NO_HZ woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Cure more NO_HZ load average woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Move sched_avg_update to update_cpu_load" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Fix nohz load accounting -- again" (Rafael Aquini) [1343015 1326373]
- [fs] lockd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [fs] nfsd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [isdn] avoid calling tty_ldisc_flush() in atomic context (Sabrina Dubroca) [1337443 1328115]
- [redhat] Update dracut dependency to pull in ecb module (Herbert Xu) [1334431 1315832]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
</package>
<package pkgid="499566c537b3dfdcf38a608f8beb90c76ef6754e7067e06098aba09e48b56bce" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.4.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.2.el6]" date="1471262400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}</changelog>
</package>
<package pkgid="48523547abb5a9b8e55db041c790a29ab2b6014bfea21bdbb3b1031bbec476b0" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
</package>
<package pkgid="012c019b0cca4d48802ecb2d3d06d61b1499337b8771e33c699faf1c8e99d4f8" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.6.2.el6]" date="1477310400">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="05f503173a5609313d2b23ea3f8e4b1bf4a5adf72482742137aba7b572e9eff5" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.el6"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-640.el6]" date="1460116800">- [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-641.el6]" date="1460462400">- [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
- [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
- [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-642.el6]" date="1460462401">- [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
- [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
- [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]</changelog>
</package>
<package pkgid="152b8060c254955fe8c240f1050ac698518e1f35a10c3532f226aae117dcedba" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="b1270330476a39f015b90ca3f9766c5e06bf84385f307974f19d9c9dd4ac2bf1" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="ca92d408a34683677e2f8ce7ec4639179a7786098705ad809aa090854516c9cd" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="f668a3121357d0228fb667495ce7618c2a204a9703856b81e55c6334519226cf" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="12fce8b6da30a42427117e9b2cc36160cfba0ac2fcbc7b2744bac9dc5e33f81b" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="960a36ac27e122c13b8571ad7752ffd6b830592219f1a2826155c1c8aac26f78" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="d7a56b2c86d150d20d3d149e0311bd675585062a572a8290c2ed9e8eae3966f2" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="fde2f0cc19ac1cccfcdf15aad251c519b0e25ad3fb1b138bd5c02da24dad8452" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="d114698c004b569573741b86e6ce507f9d102383d71e35e05aa201411455aa74" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="acf128c56cf7a31c4fb9e4369501f3ebc1400e5332b0dbf6df235da8cf7bd4bf" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="c1ad349d10953758e9718cffacad19c3653ce42f0aaa8e0dc6b18c612d63a51c" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="8d8fdb858b3f4cc2c9c580aa96a24eef82a4bfa77716468148791e3286256812" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="e365b975854fa172e36c48af77f3f1b1fb6bbcf67672b304b9d2b828fb1767f2" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="25a8e77adb41b97b7239edc9eec0d389a081cc3615710d7489a1649c27734e2c" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="da396184e8a0aedfc08fe4f9243afaea08ad5f54c1660dee3a073b6492166704" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.11.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.9.1.el6]" date="1542801600">- [block] make sure queue_lock is held when setting flag (Ming Lei) [1650024]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
</package>
<package pkgid="32dc06f0f09f8fc2ff4f92063a276c883c01d83a5b68f04c168d129cc9c82b0d" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.12.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.12.1.el6]" date="1551960000">- [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
- [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
- [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
- [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
- [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
- [s390] detect etoken facility (Hendrik Brueckner) [1625381]
- [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
- [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
- [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
- [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
- [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
- [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
- [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
- [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
- [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]</changelog>
</package>
<package pkgid="30029142d7213320a92ccf28d348669ded539d9a5e361c9ac95f4c8ab9f029f7" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.14.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.13.1.el6]" date="1554120000">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1686170]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.1.el6]" date="1555329600">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695496]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.2.el6]" date="1556107200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
</package>
<package pkgid="c2784c078288ec70c7e7c53b7e95b49e439fe6ab903231d09a223d345ed381c9" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.15.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.2.el6]" date="1559217600">- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.3.el6]" date="1560427200">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}</changelog>
</package>
<package pkgid="6d04b7de6f99a043663bf889f4f4a1f108bd72960e6ae60a25eb40a8ce5021a3" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.17.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.16.1.el6]" date="1559044800">- [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
- [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
- [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
- [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
</package>
<package pkgid="f76919575011397b851f03fb1e220b0ff25da5766707255f5c7de9fcacfb2f80" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.18.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.1.el6]" date="1562673600">- [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
- [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
- [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
- [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
- [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
- [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
- [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
- [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
- [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.2.el6]" date="1564056000">- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
</package>
<package pkgid="821b5d489d85af46b0385712904182a1012cdf892b079e77767c5c74150ea5ad" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.2.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.1.1.el6]" date="1529582400">- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
- [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
- [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
- [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change xstateregs_get()/set() to use -&gt;xsave.i387 rather than -&gt;fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] debug: Add KERN_&lt;LEVEL&gt; to bare printks, convert printks to pr_&lt;level&gt; (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Split up &lt;asm/i387.h&gt; into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.2.1.el6]" date="1530619200">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
- [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
- [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
- [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
- [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
- [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]</changelog>
</package>
<package pkgid="2ed5c02faaf280d97208fb8a5782976c9969eff337539a58d8ddf2da02107724" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.22.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.19.1.el6]" date="1565438400">- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.20.1.el6]" date="1565784000">- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
</package>
<package pkgid="287692bea8f530aa95d329c4c8c2e3f2ec62a408fa9ece7df2137e89d1bc7ad9" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.22.1.el6]" date="1565956801">- Rebuild</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
</package>
<package pkgid="0bf43100e7d596cc3977f8255e7deef06fd111310c234fe499fcdeb40a63a296" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573041600">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="9aacbb5fabfee0e958cb74301576437f9251a53f553b5e6fc620331f2f8a474b" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573128000">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.3.el6]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="67e02e07f25c5f91e034b860e440fe9f99e19538caca3aa5f8dd6c37f9385c4f" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.25.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.25.1.el6]" date="1574251200">- [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
- [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
- [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
- [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="7baeb69b0cce2467013a56c324072bf0d9511b897f882d4425c899cb70348d83" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.26.1.el6]" date="1576670400">- [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
- [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
- [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
</package>
<package pkgid="6ba2d8062dfb47aa9fa2910f7981ef19987838a6c1a77143594b1c32a3909028" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
</package>
<package pkgid="c0253bd506d0754a0b06020c65c1c748b60f2bc25dfa40928e2d35b216dd414c" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.2.el6]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}</changelog>
</package>
<package pkgid="2645c0d03833a757032aaed00226b95613411d8e48bfb9ec0b169afde88e85e3" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.3.5.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.3.el6]" date="1533297600">- [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
- [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.4.el6]" date="1533729600">- [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.5.el6]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}</changelog>
</package>
<package pkgid="f7c3d857729cb095d06af86f69412a2744053ad84aa50859ddfd0aa2abac566d" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.30.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.2.el6]" date="1590753600">- x86/speculation: Provide SRBDS late microcode loading support (Waiman Long)
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}</changelog>
</package>
<package pkgid="423a5bcbfe1c0407b211abc3598b2c387670f59a3379a7710c824a55ca920132" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.31.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
</package>
<package pkgid="52c94b1c7ab0197a72bef089969a663154c26bf7cd3c9f2ec945e1fd3b1e4a8a" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.33.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.32.1.el6]" date="1594036800">- [wireless] libertas: make lbs_ibss_join_existing() return error code on rates overflow (Jarod Wilson) [1776569]
- [wireless] libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held (Jarod Wilson) [1776569]
- [wireless] libertas: Fix two buffer overflows at parsing bss descriptor (Jarod Wilson) [1776569]
- [security] keys: Protect request_key() against a type with no match function (Patrick Talbert) [1433220] {CVE-2017-2647}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
</package>
<package pkgid="82911fc16c01b77d9ab57dbbaaacdc21489aa6c96bd204fa4138779315283f16" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.35.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.34.1.el6]" date="1598356800">- [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705003]
- [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705003]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.35.1.el6]" date="1600257600">- [ata] libata: fix NULL sdev dereference race in atapi_qc_complete() (Kenneth Yin) [1876296]</changelog>
</package>
<package pkgid="112065ba5c38cd113c9e5bbadccb95de839b11f00317bfa78039cb2bbc088c62" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.1.el6]" date="1535716800">- [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
- [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
- [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
- [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
- [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
- [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
- [block] Rename queue dead flag (Ming Lei) [1574568]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.2.el6]" date="1536926400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
- [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-754.6.3.el6]" date="1537272000">- [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
- [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
- [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]</changelog>
</package>
<package pkgid="b6a454d1ace13f3472144a435b0cd76cdfe9e4724138cbef947085af70b77003" name="kernel-debug-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-752.el6]" date="1525348800">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
- [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
- [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
- [net] security: export security_sk_clone (Marcelo Leitner) [1571357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-753.el6]" date="1526040000">- [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
- [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
- [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
</package>
<package pkgid="471baa4e5a21ec9dd3d3db87101659f8d908ea744542235923f066e54e8fff1c" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.12.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.10.1.el6]" date="1446811200">- [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
- [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
- [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
- [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
- [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
- [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
- [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.11.1.el6]" date="1447416000">- [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
- [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.12.1.el6]" date="1448280000">- Revert: [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]</changelog>
</package>
<package pkgid="4dcb8a6486654cf52ad3d3cda8d0a6ce3d504053b2d5e3bf76022c55ef7fb3df" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.22.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.20.1.el6]" date="1453464000">- [sched] kernel: sched: Fix nohz load accounting -- again (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Move sched_avg_update to update_cpu_load (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure more NO_HZ load average woes (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure load average vs NO_HZ woes (Rafael Aquini) [1300349 1167755]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.21.1.el6]" date="1456142400">- [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1310148 1302223] {CVE-2016-0774}
- [fs] gfs2: Add missing else in trans_add_meta/data (Robert S Peterson) [1304332 1267995]
- [fs] fs-cache: Synchronise object death state change vs operation submission (David Howells) [1308471 1096893]
- [fs] fs-cache: Reduce cookie ref count if submit fails (David Howells) [1308471 1096893]
- [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1302763 1294400]
- [x86] fix corruption of XMM registers when interrupt handlers use FPU (Mikulas Patocka) [1298994 1259023]
- [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1303044 1292300]
- [net] add inet_sk_transparent() helper (Florian Westphal) [1303044 1292300]
- [net] ipv6: tcp_ipv6 policy route issue (Florian Westphal) [1303044 1292300]
- [net] ipv6: reuse rt6_need_strict (Florian Westphal) [1303044 1292300]
- [net] tcp: resets are misrouted (Florian Westphal) [1303044 1292300]
- [net] tcp: tcp_v4_send_reset: binding oif to iif in no sock case (Florian Westphal) [1303044 1292300]
- [crypto] api: Only abort operations on fatal signal (Herbert Xu) [1296014 1272314]
- [crypto] testmgr: don't use interruptible wait in tests (Herbert Xu) [1296014 1272314]
- [kernel] sched: add wait_for_completion_killable_timeout (Herbert Xu) [1296014 1272314]
- [net] sctp: add routing output fallback (Xin Long) [1307073 1229124]
- [net] sctp: fix dst leak (Xin Long) [1307073 1229124]
- [net] sctp: fix src address selection if using secondary addresses (Xin Long) [1307073 1229124]
- [net] sctp: reduce indent level on sctp_v4_get_dst (Xin Long) [1307073 1229124]
- [scsi] hpsa: Update driver revision to RH5 (Joseph Szczypek) [1306192 1244959]
- [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1306192 1244959]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.22.1.el6]" date="1458216000">- [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1318364 1309898]</changelog>
</package>
<package pkgid="59b3c50fa9795171ac34f81a8758829caffb23b3d8a9765ce8b3ed1d9e900db1" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.26.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.24.1.el6]" date="1458907200">- [sched] fix KABI break (Seth Jennings) [1314878 1230310]
- [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] sched,perf: Fix periodic timers (Seth Jennings) [1314878 1230310]
- [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1314878 1230310]
- [sched] Cleanup bandwidth timers (Seth Jennings) [1314878 1230310]
- [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix unlocked reads of some cfs_b-&gt;quota/period (Seth Jennings) [1314878 1230310]
- [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq-&gt;lock (Seth Jennings) [1314878 1230310]
- [sched] Fix hrtimer_cancel/rq-&gt;lock deadlock (Seth Jennings) [1314878 1230310]
- [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1314878 1230310]
- [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [block] Fix q_suspended logic error for io submission (David Milburn) [1314209 1227342]
- [block] nvme: No lock while DMA mapping data (David Milburn) [1314209 1227342]
- [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1315706 1249244]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.25.1.el6]" date="1459857600">- [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [fs] anon_inodes implement dname (Aristeu Rozanski) [1322707 1296019]
- [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1320031 1302777]
- [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297421 1297422] {CVE-2015-8767}
- [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1319276 1299975]
- [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1315696 1309241]
- [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid10: submit_bio_wait returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1320863 1273546]
- [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]
- [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.26.1.el6]" date="1460462400">- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1326043 1324318]</changelog>
</package>
<package pkgid="69a840c5700bf07eb148821421b774767bd4d4557b9050bfe1ab518a70f0199c" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.3.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.1.1.el6]" date="1436875200">- [redhat] Update dracut dependency to pull in drbg module (Herbert Xu) [1241518 1241338]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.2.1.el6]" date="1437566400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
- [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
- [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
- [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
- [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
- [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
- [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.3.1.el6]" date="1439208000">- [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
- [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]</changelog>
</package>
<package pkgid="086afc5eea1c72977a5c9688846e56e032a245ef548eee5682ec58e42382672f" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.11.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.9.1.el6]" date="1475841600">- [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1381592 1367250]
- [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve Best) [1377472 1341758]
- [powerpc] eeh: Block PCI configuration space access during EEH (Gustavo Duarte) [1379596 1216944]
- [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347101 1347102] {CVE-2016-1583}
- [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1341546 1316461] {CVE-2016-2143}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.10.1.el6]" date="1476187200">- [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Maurizio Lombardi) [1382620 1341298]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="5498c1b22584270eb5a565e01c09b8571f17fba3cb1638b42450299d6cbdaac9" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
</package>
<package pkgid="f0c86fc888e18ab2d321aaac0526a2757cd1bd9ed8da1c46cc4e17eb95ddd9c9" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.13.2.el6]" date="1487419200">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="b6f6c57b235677ac414aa18baf4ebdd042bd6c7e390d0d2942f2cbbadecafae7" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.15.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.14.1.el6]" date="1483617600">- [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
- [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
- [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
- [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
- [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
- [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
- [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
- [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
- [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
- [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
- [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.15.1.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="dbeed3b5d31d457b3a370df5705561427efcbdf256ee8ff8b872bfd3a922d4cf" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.3.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.1.1.el6]" date="1462536000">- [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1333571 1314774]
- [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1333571 1314774]
- [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1333571 1314774]
- [base] firmware: Add lock for firmware devices (Lyude Paul) [1333572 1309875]
- [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1333579 1321174]
- [md] dm: only initialize the request_queue once (Mike Snitzer) [1333575 1328329]
- [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1333581 1295969]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.2.1.el6]" date="1465214400">- [sched] Revert "kernel: sched: Cure load average vs NO_HZ woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Cure more NO_HZ load average woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Move sched_avg_update to update_cpu_load" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Fix nohz load accounting -- again" (Rafael Aquini) [1343015 1326373]
- [fs] lockd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [fs] nfsd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [isdn] avoid calling tty_ldisc_flush() in atomic context (Sabrina Dubroca) [1337443 1328115]
- [redhat] Update dracut dependency to pull in ecb module (Herbert Xu) [1334431 1315832]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
</package>
<package pkgid="0dcbfa7739a693b8df0712cd32b281d4f95316d2846b03c2c0e30685c836dd14" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.4.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.2.el6]" date="1471262400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}</changelog>
</package>
<package pkgid="d822ee4bf970bd44c0e29f939fd6a5fd7b80e44db861d183803f35a498968c71" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
</package>
<package pkgid="9e492f722bec6324d34af87b337b36ab195bc0dd8017a36b1534ba5de76f2bab" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.6.2.el6]" date="1477310400">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="131b2e0c90b84c873ceb6103613862e6c069d1662440e46c77fa0f4964a136b7" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.el6"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-640.el6]" date="1460116800">- [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-641.el6]" date="1460462400">- [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
- [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
- [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-642.el6]" date="1460462401">- [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
- [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
- [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]</changelog>
</package>
<package pkgid="c621c70a1a0469b2304dacda0e292cb174168e93d9ee8a8209189ab1db33acaa" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="1be0b4c2e9a21722cc20487273fc1aae31fc91ee61dc937e10331ad870c7a8c2" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="af1886e5b6b67a3970abcf5c34466e19ebed1f00a0fbe1664f1078a32196599e" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="7929bb46d8153ee44c519f5f995e62fd838ee497a7829af60efbaefac912ce2c" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="7396cf8b5969ad0c26e3a1f63c9236944a3ece2fd710a54c6305fdb9fd0f258b" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="d7f2d87a4f9490c74d02fd22a201a7793153c2423ef45c7d50d87e06cc9bdf05" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="4bc39747ce7326d5a9ebbc3247b372931df564f309f62a38136f2d9cf35a9cc4" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="0c0fb702a7aa076b07014626a71d7fb25e4977146081ac7ddae71f723a3b363e" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="7b8d2e7acedb2a26cf856de4b3ee5f8667a9f612dc1303f16b4818c40623cc80" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="fe84d543a616fd0806d5d472ff0039dd2ed4176e762b2a2ff30b8247bda06ccc" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="de6249215883c63f2847d57767cf2e33ebb132d75d77dc6c6751b2b7014b48ce" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="9cdcb4750a9f7d838b14659a4273352d1829e678af481df7d5062b3c8089001a" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="fe233b043e42caa79d41e3589cd41788f030632487639b7429bb0ab7d3038620" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="c65fa6da96ce34002bd8abb3a101770194a62a0a25a38c1555cb4f0d6189bb71" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="f28e1d1e55d2b0ceb47689df0730f6118c65b9e29394e8a2976f80bfeebb6338" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.11.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.9.1.el6]" date="1542801600">- [block] make sure queue_lock is held when setting flag (Ming Lei) [1650024]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
</package>
<package pkgid="00d46d8f37325bb1e5404b431b6900ea0aba79271a9e83027bbca4c68374c425" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.12.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.12.1.el6]" date="1551960000">- [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
- [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
- [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
- [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
- [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
- [s390] detect etoken facility (Hendrik Brueckner) [1625381]
- [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
- [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
- [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
- [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
- [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
- [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
- [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
- [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
- [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]</changelog>
</package>
<package pkgid="5609e5b3b5e22961a9e52c0a8d48282d84b4eb44b5c4d673404be438b87d1f1b" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.14.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.13.1.el6]" date="1554120000">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1686170]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.1.el6]" date="1555329600">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695496]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.2.el6]" date="1556107200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
</package>
<package pkgid="42ea1110ed43a94692e36c117cb598b23f116b990ec6250e7e802097135ab5f1" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.15.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.2.el6]" date="1559217600">- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.3.el6]" date="1560427200">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}</changelog>
</package>
<package pkgid="fb96ffab9ca2b76099de803a292da6e7588f38035bef72c241786b02b9b2d05a" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.17.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.16.1.el6]" date="1559044800">- [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
- [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
- [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
- [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
</package>
<package pkgid="e8bb0777b6ebbf3ea4e75ba9e90a881f78bd44163f6246243b1a27898bf7412f" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.18.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.1.el6]" date="1562673600">- [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
- [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
- [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
- [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
- [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
- [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
- [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
- [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
- [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.2.el6]" date="1564056000">- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
</package>
<package pkgid="6716fc6808e45137792c2a474c1fe304ba76b547665424e379c3eb92ced7871f" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.2.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.1.1.el6]" date="1529582400">- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
- [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
- [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
- [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change xstateregs_get()/set() to use -&gt;xsave.i387 rather than -&gt;fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] debug: Add KERN_&lt;LEVEL&gt; to bare printks, convert printks to pr_&lt;level&gt; (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Split up &lt;asm/i387.h&gt; into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.2.1.el6]" date="1530619200">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
- [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
- [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
- [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
- [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
- [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]</changelog>
</package>
<package pkgid="c37959c09ffe66d3f12f5a62a247c27c09c839f69246ad2f2caa773bd9e72ff7" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.22.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.19.1.el6]" date="1565438400">- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.20.1.el6]" date="1565784000">- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
</package>
<package pkgid="6b3f74d8fc41d4919249a54a0fbd4c5578a9ec3f8a07971ed5dd38f13a545e69" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.22.1.el6]" date="1565956801">- Rebuild</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
</package>
<package pkgid="a9bd60a9fcda6ae3eabc4c462a9a995c4262ef423cbd7ad4cca4723d9446c5d8" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573041600">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="8995eef581a61a563725bbfbe7f870cb4473dc296a4dcd6eca5c3b628ed6b4ff" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573128000">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.3.el6]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="a2155801e7880a454a33b8117bbfcb725faa1085afd2d69cce81af74bb5102e0" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.25.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.25.1.el6]" date="1574251200">- [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
- [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
- [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
- [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="83709e36a7d614ec5b27f6c328387c1a77c962ca082feece7f562db7f155f449" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.26.1.el6]" date="1576670400">- [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
- [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
- [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
</package>
<package pkgid="68bf2d7f23c8247d12053cb0ba3a604c3f1da61782a949c86f16eaa9f09fa301" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
</package>
<package pkgid="0186f1f6ec9a68ceea53d9c0cb87448d77586a38bc28e68d78780dbb40657393" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.2.el6]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}</changelog>
</package>
<package pkgid="df01c079bde8ad24c52c5f41b45355f8748f6cfb094867989cf915d806baf94f" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.3.5.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.3.el6]" date="1533297600">- [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
- [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.4.el6]" date="1533729600">- [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.5.el6]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}</changelog>
</package>
<package pkgid="70c11214d3fd258dba85940511880b10273c71f053a0dfe5cbeec9660ea6858b" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.30.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.2.el6]" date="1590753600">- x86/speculation: Provide SRBDS late microcode loading support (Waiman Long)
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}</changelog>
</package>
<package pkgid="44fe16721dc2c278aed128eac2073a1b4808b5bbd3f4a979b8815e5062f3b22f" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.31.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
</package>
<package pkgid="a8acd52591cfc2ad9e27086dab39253e12fe351b334a71969d7fc6ea895dab04" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.33.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.32.1.el6]" date="1594036800">- [wireless] libertas: make lbs_ibss_join_existing() return error code on rates overflow (Jarod Wilson) [1776569]
- [wireless] libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held (Jarod Wilson) [1776569]
- [wireless] libertas: Fix two buffer overflows at parsing bss descriptor (Jarod Wilson) [1776569]
- [security] keys: Protect request_key() against a type with no match function (Patrick Talbert) [1433220] {CVE-2017-2647}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
</package>
<package pkgid="16787ab91ba82e6fb8c62504067e4bc9a046d2ec8643e50059a734e0066af336" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.35.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.34.1.el6]" date="1598356800">- [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705003]
- [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705003]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.35.1.el6]" date="1600257600">- [ata] libata: fix NULL sdev dereference race in atapi_qc_complete() (Kenneth Yin) [1876296]</changelog>
</package>
<package pkgid="a1159d9d6ae77eae110c907c34f5dc25f97cb4c2599097ab4e6020db0857359c" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.1.el6]" date="1535716800">- [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
- [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
- [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
- [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
- [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
- [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
- [block] Rename queue dead flag (Ming Lei) [1574568]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.2.el6]" date="1536926400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
- [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-754.6.3.el6]" date="1537272000">- [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
- [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
- [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]</changelog>
</package>
<package pkgid="035bc1d58f1d86ab2cc500d654c629b0e1a52846aa738cae3815b0992c30be4b" name="kernel-devel" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-752.el6]" date="1525348800">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
- [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
- [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
- [net] security: export security_sk_clone (Marcelo Leitner) [1571357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-753.el6]" date="1526040000">- [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
- [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
- [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
</package>
<package pkgid="b13f65ca8763bb35c1a60aff3c16a2133a83748ac722f2accdefb5fe8c3bad2d" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="573.12.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.10.1.el6]" date="1446811200">- [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
- [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
- [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
- [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
- [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
- [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
- [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.11.1.el6]" date="1447416000">- [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
- [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.12.1.el6]" date="1448280000">- Revert: [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]</changelog>
</package>
<package pkgid="11f6b75405495ed2258051d9d11a1ef48d3182d0b46115839cc22882e7648ca5" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="573.22.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.20.1.el6]" date="1453464000">- [sched] kernel: sched: Fix nohz load accounting -- again (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Move sched_avg_update to update_cpu_load (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure more NO_HZ load average woes (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure load average vs NO_HZ woes (Rafael Aquini) [1300349 1167755]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.21.1.el6]" date="1456142400">- [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1310148 1302223] {CVE-2016-0774}
- [fs] gfs2: Add missing else in trans_add_meta/data (Robert S Peterson) [1304332 1267995]
- [fs] fs-cache: Synchronise object death state change vs operation submission (David Howells) [1308471 1096893]
- [fs] fs-cache: Reduce cookie ref count if submit fails (David Howells) [1308471 1096893]
- [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1302763 1294400]
- [x86] fix corruption of XMM registers when interrupt handlers use FPU (Mikulas Patocka) [1298994 1259023]
- [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1303044 1292300]
- [net] add inet_sk_transparent() helper (Florian Westphal) [1303044 1292300]
- [net] ipv6: tcp_ipv6 policy route issue (Florian Westphal) [1303044 1292300]
- [net] ipv6: reuse rt6_need_strict (Florian Westphal) [1303044 1292300]
- [net] tcp: resets are misrouted (Florian Westphal) [1303044 1292300]
- [net] tcp: tcp_v4_send_reset: binding oif to iif in no sock case (Florian Westphal) [1303044 1292300]
- [crypto] api: Only abort operations on fatal signal (Herbert Xu) [1296014 1272314]
- [crypto] testmgr: don't use interruptible wait in tests (Herbert Xu) [1296014 1272314]
- [kernel] sched: add wait_for_completion_killable_timeout (Herbert Xu) [1296014 1272314]
- [net] sctp: add routing output fallback (Xin Long) [1307073 1229124]
- [net] sctp: fix dst leak (Xin Long) [1307073 1229124]
- [net] sctp: fix src address selection if using secondary addresses (Xin Long) [1307073 1229124]
- [net] sctp: reduce indent level on sctp_v4_get_dst (Xin Long) [1307073 1229124]
- [scsi] hpsa: Update driver revision to RH5 (Joseph Szczypek) [1306192 1244959]
- [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1306192 1244959]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.22.1.el6]" date="1458216000">- [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1318364 1309898]</changelog>
</package>
<package pkgid="eb7c9b79a5e3331173609b64e8bea7d405f1496af6fde30bc6eca2452de3b13f" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="573.26.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.24.1.el6]" date="1458907200">- [sched] fix KABI break (Seth Jennings) [1314878 1230310]
- [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] sched,perf: Fix periodic timers (Seth Jennings) [1314878 1230310]
- [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1314878 1230310]
- [sched] Cleanup bandwidth timers (Seth Jennings) [1314878 1230310]
- [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix unlocked reads of some cfs_b-&gt;quota/period (Seth Jennings) [1314878 1230310]
- [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq-&gt;lock (Seth Jennings) [1314878 1230310]
- [sched] Fix hrtimer_cancel/rq-&gt;lock deadlock (Seth Jennings) [1314878 1230310]
- [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1314878 1230310]
- [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [block] Fix q_suspended logic error for io submission (David Milburn) [1314209 1227342]
- [block] nvme: No lock while DMA mapping data (David Milburn) [1314209 1227342]
- [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1315706 1249244]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.25.1.el6]" date="1459857600">- [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [fs] anon_inodes implement dname (Aristeu Rozanski) [1322707 1296019]
- [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1320031 1302777]
- [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297421 1297422] {CVE-2015-8767}
- [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1319276 1299975]
- [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1315696 1309241]
- [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid10: submit_bio_wait returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1320863 1273546]
- [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]
- [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.26.1.el6]" date="1460462400">- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1326043 1324318]</changelog>
</package>
<package pkgid="94055d578420fd899d7bb813a69496015a2c0189a31842569ab7402708efeb33" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="573.3.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.1.1.el6]" date="1436875200">- [redhat] Update dracut dependency to pull in drbg module (Herbert Xu) [1241518 1241338]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.2.1.el6]" date="1437566400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
- [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
- [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
- [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
- [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
- [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
- [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.3.1.el6]" date="1439208000">- [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
- [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]</changelog>
</package>
<package pkgid="89fd2720630b715c741f382a1cad5d2c70624964a5b3788d128f5d707ff1a828" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.11.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.9.1.el6]" date="1475841600">- [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1381592 1367250]
- [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve Best) [1377472 1341758]
- [powerpc] eeh: Block PCI configuration space access during EEH (Gustavo Duarte) [1379596 1216944]
- [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347101 1347102] {CVE-2016-1583}
- [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1341546 1316461] {CVE-2016-2143}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.10.1.el6]" date="1476187200">- [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Maurizio Lombardi) [1382620 1341298]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="9eec6c2154ee118fcd279dedd57c085b93496b2d11f1f213817579045a4a937a" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.13.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
</package>
<package pkgid="4c4c832078f635becb5dc2d09f6970ac567226b1e8bb9060e9eedda24bc4e9ac" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.13.2.el6]" date="1487419200">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="78485a3ef75c1070d0d9a3c3586359679bb62c923b0d2e6636224e1cc9bb4e4b" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.15.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.14.1.el6]" date="1483617600">- [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
- [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
- [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
- [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
- [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
- [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
- [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
- [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
- [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
- [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
- [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.15.1.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="f125a8dd16852a9d251e80de642b80dd9407a85850df5fa645591cd432c668f7" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.3.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.1.1.el6]" date="1462536000">- [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1333571 1314774]
- [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1333571 1314774]
- [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1333571 1314774]
- [base] firmware: Add lock for firmware devices (Lyude Paul) [1333572 1309875]
- [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1333579 1321174]
- [md] dm: only initialize the request_queue once (Mike Snitzer) [1333575 1328329]
- [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1333581 1295969]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.2.1.el6]" date="1465214400">- [sched] Revert "kernel: sched: Cure load average vs NO_HZ woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Cure more NO_HZ load average woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Move sched_avg_update to update_cpu_load" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Fix nohz load accounting -- again" (Rafael Aquini) [1343015 1326373]
- [fs] lockd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [fs] nfsd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [isdn] avoid calling tty_ldisc_flush() in atomic context (Sabrina Dubroca) [1337443 1328115]
- [redhat] Update dracut dependency to pull in ecb module (Herbert Xu) [1334431 1315832]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
</package>
<package pkgid="5bd3788c57ba50371a9fe27df4ada8d3352c468949108df8b90817395c43fa43" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.4.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.2.el6]" date="1471262400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}</changelog>
</package>
<package pkgid="60345739d4b03b5e21e9983e5c4566fb802bcbb10709b82391778defd5b48eba" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.6.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
</package>
<package pkgid="68fd844e19f6d08fa7359df4004d2eae4ce32eff51204c2460bfb79faa40dc53" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.6.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.6.2.el6]" date="1477310400">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="d945a3ecc43d58b4b404495a939af9dee48015aa9bb7a184afaba9920e76d6b3" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.el6"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-640.el6]" date="1460116800">- [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-641.el6]" date="1460462400">- [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
- [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
- [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-642.el6]" date="1460462401">- [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
- [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
- [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]</changelog>
</package>
<package pkgid="260f9ad642f08d9100a572a96305a661ca619add94c6c9ef3e8141460f185366" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="8ba9a17c87744ab3b5edd58b5a827b280655e1feb60f0c3eaf8298dc9774515d" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="60886710a0f0435284b4c641f536b5d8cc3600966355a67c88c7ddeb594c814f" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="50a672a034c33c8f2c70b5260c034c684df6e9138f0caf37d12ee517f654b001" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="1f4f2c2a62a42d515e7ae0255c3f9a2a7d44a1751f93a4f93aacbd57c80eead0" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="38165086edde4ebb7d2022909e3e4173c327f9870a69e788cb3e5cb54e6c2068" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="98dcda697b4a49fa6e429456dc1f7cb4d66e4e9afeb255dda140d714073163dc" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="a83b458e5aab21dc60e2b8d864343aa78eb60f7eedb1325a08c932ca825e6a1c" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="003c50cde22c363878d37d01366349a19d4acaa164be8a6d1146db6716312965" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="794b66a512de1cad923e8b0e7a37c67dd111a401da93a3f6b7ececed26226e15" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="d4278db0a1770006bc79d268bec9eb12a67cde174c4956eb8bd1966f5dee59e0" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="035109327ad79de0d63188a9f5fedd072e2901be667e75c609240155bea334de" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="019f193d68652c61bc6b27688c42ea3351e25697123e80177f92d53d6205bb88" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="fb228f439e308f22fe95bb40c8040aa48aa10b1e9beab156632186a49bd5ab01" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="d9cd89b5755552488aa295527afcdfafb0f25d456b87a9200463a95bb864aa91" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.11.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.9.1.el6]" date="1542801600">- [block] make sure queue_lock is held when setting flag (Ming Lei) [1650024]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
</package>
<package pkgid="a06acfb19b7f582876446695b744f6f1921ef89a21033acd79d355a5bb3dfb63" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.12.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.12.1.el6]" date="1551960000">- [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
- [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
- [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
- [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
- [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
- [s390] detect etoken facility (Hendrik Brueckner) [1625381]
- [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
- [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
- [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
- [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
- [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
- [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
- [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
- [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
- [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]</changelog>
</package>
<package pkgid="9195910ccd4222d609c3ba9b0408915876688f2649237f41161c9824a7484f72" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.14.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.13.1.el6]" date="1554120000">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1686170]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.1.el6]" date="1555329600">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695496]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.2.el6]" date="1556107200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
</package>
<package pkgid="ebc1974ea07e5755fbff09deae0fe3511b2e96901867d6021b82e0570b3ca9a6" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.15.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.2.el6]" date="1559217600">- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.3.el6]" date="1560427200">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}</changelog>
</package>
<package pkgid="d93f41a04c12482def9428979c1111bbd32d3366de833f6af0269ee8e77d1f6b" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.17.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.16.1.el6]" date="1559044800">- [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
- [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
- [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
- [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
</package>
<package pkgid="8c87207a6731978c78d7cb69b184947d8e529594b3a2992a7c1569e930693d04" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.18.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.1.el6]" date="1562673600">- [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
- [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
- [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
- [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
- [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
- [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
- [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
- [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
- [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.2.el6]" date="1564056000">- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
</package>
<package pkgid="e29f995b78509d2d04f34728442ebb8c7ba9dc1f6a99b3c35086f2039082b75f" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.2.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.1.1.el6]" date="1529582400">- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
- [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
- [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
- [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change xstateregs_get()/set() to use -&gt;xsave.i387 rather than -&gt;fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] debug: Add KERN_&lt;LEVEL&gt; to bare printks, convert printks to pr_&lt;level&gt; (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Split up &lt;asm/i387.h&gt; into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.2.1.el6]" date="1530619200">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
- [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
- [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
- [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
- [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
- [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]</changelog>
</package>
<package pkgid="f6e8d330c588d48a1aea904943f917501bdad44202571e24def6df88cdde299c" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.22.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.19.1.el6]" date="1565438400">- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.20.1.el6]" date="1565784000">- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
</package>
<package pkgid="fc5f56359a8e3dc1ed19f769803abccf8a3545537655b039d66bdf0bc1223dd4" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.22.1.el6]" date="1565956801">- Rebuild</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
</package>
<package pkgid="aed7222ef4ac7cb673f27d39609ce38a716e3c5201ffc13c08119e771c07de57" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.24.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573041600">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="a86ec05a26576ff8c05d31335f8fcefbe0b42b7c93257472082a8466aff77643" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.24.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573128000">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.3.el6]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="615fa351cd7986dafec501b533bc5891316d70d4728170b16447a59de9c8631d" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.25.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.25.1.el6]" date="1574251200">- [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
- [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
- [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
- [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="bd7fcc9e693f1122eb8f6474f3ec7117e8d1ef0610ae4d429284353c2742db1d" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.26.1.el6]" date="1576670400">- [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
- [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
- [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
</package>
<package pkgid="2defbde25423ad053033684cde92f7e36331c7358e7cef50faaa60613aaccd70" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.29.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
</package>
<package pkgid="d5fc2eaa74a1164e87e0e4c89749626e01abb315781aa3723eef54d091cb717a" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.29.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.2.el6]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}</changelog>
</package>
<package pkgid="2d1d37b8b04c2b61f0c281324a1443f485fb142c57e294571ba002db7dc579e2" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.3.5.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.3.el6]" date="1533297600">- [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
- [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.4.el6]" date="1533729600">- [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.5.el6]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}</changelog>
</package>
<package pkgid="176c75f8d19c75db7f1c00844acd6777c12c2b16caa608896f6a369cdd48a785" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.30.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.2.el6]" date="1590753600">- x86/speculation: Provide SRBDS late microcode loading support (Waiman Long)
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}</changelog>
</package>
<package pkgid="6917b2ed40d0db1bd3b8c8df73aac89cfcaf899404b5a011eac2f809b50955f1" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.31.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
</package>
<package pkgid="89b9afcd74bc9bf1d0602ab37023b48695e0cea186a4612afb5a0697fd92cafa" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.33.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.32.1.el6]" date="1594036800">- [wireless] libertas: make lbs_ibss_join_existing() return error code on rates overflow (Jarod Wilson) [1776569]
- [wireless] libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held (Jarod Wilson) [1776569]
- [wireless] libertas: Fix two buffer overflows at parsing bss descriptor (Jarod Wilson) [1776569]
- [security] keys: Protect request_key() against a type with no match function (Patrick Talbert) [1433220] {CVE-2017-2647}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
</package>
<package pkgid="3d2c718136637743613cca4a746e3a2db77f754e1fb8641560311ed6a1bb0e00" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.35.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.34.1.el6]" date="1598356800">- [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705003]
- [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705003]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.35.1.el6]" date="1600257600">- [ata] libata: fix NULL sdev dereference race in atapi_qc_complete() (Kenneth Yin) [1876296]</changelog>
</package>
<package pkgid="182217b470b386612c394ee7b2a7a50a8431b8d552728b89ad0ae1bcd7d7d2e2" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.1.el6]" date="1535716800">- [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
- [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
- [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
- [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
- [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
- [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
- [block] Rename queue dead flag (Ming Lei) [1574568]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.2.el6]" date="1536926400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
- [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-754.6.3.el6]" date="1537272000">- [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
- [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
- [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]</changelog>
</package>
<package pkgid="bcab6f050c1497c8639cff2e9864bcb1fb473d29ce480038cc4c713ee447b8b3" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-752.el6]" date="1525348800">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
- [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
- [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
- [net] security: export security_sk_clone (Marcelo Leitner) [1571357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-753.el6]" date="1526040000">- [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
- [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
- [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
</package>
<package pkgid="eeacc4ff05945f3d5137d417c03a313bf77fe659e0c70389fea14e47341fef7e" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="573.12.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.10.1.el6]" date="1446811200">- [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
- [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
- [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
- [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
- [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
- [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
- [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.11.1.el6]" date="1447416000">- [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
- [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.12.1.el6]" date="1448280000">- Revert: [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]</changelog>
</package>
<package pkgid="1e17f297eece1f9c293dfd02e8dca6cd3485354f8fca675448f550c74ca07d83" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="573.22.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.20.1.el6]" date="1453464000">- [sched] kernel: sched: Fix nohz load accounting -- again (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Move sched_avg_update to update_cpu_load (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure more NO_HZ load average woes (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure load average vs NO_HZ woes (Rafael Aquini) [1300349 1167755]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.21.1.el6]" date="1456142400">- [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1310148 1302223] {CVE-2016-0774}
- [fs] gfs2: Add missing else in trans_add_meta/data (Robert S Peterson) [1304332 1267995]
- [fs] fs-cache: Synchronise object death state change vs operation submission (David Howells) [1308471 1096893]
- [fs] fs-cache: Reduce cookie ref count if submit fails (David Howells) [1308471 1096893]
- [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1302763 1294400]
- [x86] fix corruption of XMM registers when interrupt handlers use FPU (Mikulas Patocka) [1298994 1259023]
- [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1303044 1292300]
- [net] add inet_sk_transparent() helper (Florian Westphal) [1303044 1292300]
- [net] ipv6: tcp_ipv6 policy route issue (Florian Westphal) [1303044 1292300]
- [net] ipv6: reuse rt6_need_strict (Florian Westphal) [1303044 1292300]
- [net] tcp: resets are misrouted (Florian Westphal) [1303044 1292300]
- [net] tcp: tcp_v4_send_reset: binding oif to iif in no sock case (Florian Westphal) [1303044 1292300]
- [crypto] api: Only abort operations on fatal signal (Herbert Xu) [1296014 1272314]
- [crypto] testmgr: don't use interruptible wait in tests (Herbert Xu) [1296014 1272314]
- [kernel] sched: add wait_for_completion_killable_timeout (Herbert Xu) [1296014 1272314]
- [net] sctp: add routing output fallback (Xin Long) [1307073 1229124]
- [net] sctp: fix dst leak (Xin Long) [1307073 1229124]
- [net] sctp: fix src address selection if using secondary addresses (Xin Long) [1307073 1229124]
- [net] sctp: reduce indent level on sctp_v4_get_dst (Xin Long) [1307073 1229124]
- [scsi] hpsa: Update driver revision to RH5 (Joseph Szczypek) [1306192 1244959]
- [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1306192 1244959]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.22.1.el6]" date="1458216000">- [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1318364 1309898]</changelog>
</package>
<package pkgid="22ed88a9528d6619ff427e44025f54f3cefa607286ea0f30046d0f78c094f2e8" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="573.26.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.24.1.el6]" date="1458907200">- [sched] fix KABI break (Seth Jennings) [1314878 1230310]
- [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] sched,perf: Fix periodic timers (Seth Jennings) [1314878 1230310]
- [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1314878 1230310]
- [sched] Cleanup bandwidth timers (Seth Jennings) [1314878 1230310]
- [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix unlocked reads of some cfs_b-&gt;quota/period (Seth Jennings) [1314878 1230310]
- [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq-&gt;lock (Seth Jennings) [1314878 1230310]
- [sched] Fix hrtimer_cancel/rq-&gt;lock deadlock (Seth Jennings) [1314878 1230310]
- [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1314878 1230310]
- [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [block] Fix q_suspended logic error for io submission (David Milburn) [1314209 1227342]
- [block] nvme: No lock while DMA mapping data (David Milburn) [1314209 1227342]
- [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1315706 1249244]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.25.1.el6]" date="1459857600">- [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [fs] anon_inodes implement dname (Aristeu Rozanski) [1322707 1296019]
- [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1320031 1302777]
- [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297421 1297422] {CVE-2015-8767}
- [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1319276 1299975]
- [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1315696 1309241]
- [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid10: submit_bio_wait returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1320863 1273546]
- [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]
- [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.26.1.el6]" date="1460462400">- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1326043 1324318]</changelog>
</package>
<package pkgid="0f53c136b1cfae20234794b2e6b2ec9f9f1fa4246669e842eed2d13f24ca7ff0" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="573.3.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.1.1.el6]" date="1436875200">- [redhat] Update dracut dependency to pull in drbg module (Herbert Xu) [1241518 1241338]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.2.1.el6]" date="1437566400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
- [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
- [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
- [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
- [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
- [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
- [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.3.1.el6]" date="1439208000">- [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
- [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]</changelog>
</package>
<package pkgid="0f020bdf0a662a63f2f51a5a237dd15898902d682c9f8041c96f4bc19bf2f73d" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.11.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.9.1.el6]" date="1475841600">- [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1381592 1367250]
- [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve Best) [1377472 1341758]
- [powerpc] eeh: Block PCI configuration space access during EEH (Gustavo Duarte) [1379596 1216944]
- [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347101 1347102] {CVE-2016-1583}
- [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1341546 1316461] {CVE-2016-2143}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.10.1.el6]" date="1476187200">- [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Maurizio Lombardi) [1382620 1341298]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="bf1ee812e5e093dfbc8426baa67d9a6451ebb7a8466076a74fd3b87cb185a6a4" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.13.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
</package>
<package pkgid="46dba8452717d1b061f24f66bb13b68e1b70b1c575810c0b3938adaf0d0b765b" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.13.2.el6]" date="1487419200">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="ea7a83c7ad39c16c1778763d04ec50f47b625db07bb32549755d6356c6be723f" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.15.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.14.1.el6]" date="1483617600">- [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
- [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
- [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
- [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
- [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
- [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
- [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
- [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
- [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
- [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
- [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.15.1.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="ffa3eea0324bbbf03aa50500e6347abdbb478a4baa558892d34691e14bde4bf6" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.3.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.1.1.el6]" date="1462536000">- [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1333571 1314774]
- [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1333571 1314774]
- [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1333571 1314774]
- [base] firmware: Add lock for firmware devices (Lyude Paul) [1333572 1309875]
- [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1333579 1321174]
- [md] dm: only initialize the request_queue once (Mike Snitzer) [1333575 1328329]
- [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1333581 1295969]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.2.1.el6]" date="1465214400">- [sched] Revert "kernel: sched: Cure load average vs NO_HZ woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Cure more NO_HZ load average woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Move sched_avg_update to update_cpu_load" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Fix nohz load accounting -- again" (Rafael Aquini) [1343015 1326373]
- [fs] lockd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [fs] nfsd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [isdn] avoid calling tty_ldisc_flush() in atomic context (Sabrina Dubroca) [1337443 1328115]
- [redhat] Update dracut dependency to pull in ecb module (Herbert Xu) [1334431 1315832]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
</package>
<package pkgid="798e799de5c1244d69e47ad0c03b00cfce85bc28c002dd5713e7fc43d310d5d8" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.4.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.2.el6]" date="1471262400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}</changelog>
</package>
<package pkgid="554c8eb06816819f41d4c7ee41693b7f08379b5a4af468baf6a1d51739fad8ff" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.6.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
</package>
<package pkgid="4a0ebcc73c7cc2e0778d20d8dc081a4e69a93db18a832c370a1c7d5fb1574f08" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.6.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.6.2.el6]" date="1477310400">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="c748d770c969e1215262d23134f791f63747d52369a3d9c53ee5b086102e6817" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="642.el6"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-640.el6]" date="1460116800">- [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-641.el6]" date="1460462400">- [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
- [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
- [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-642.el6]" date="1460462401">- [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
- [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
- [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]</changelog>
</package>
<package pkgid="99251ff0907542bd7fd8bf2bd89548df6ab158d06b2591dc834cdf5c3146fc01" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="9594c4e6cc6c4d4945adf98516408763aac60dc405d8544f3b426cc0b9e7980e" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="a371ac93bb7655a3a4772cf1b19c4c83a10c261516039d28d008b0383871ca49" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="4aafa206050bfcd23af7a4e16e482a52c2e87dd3720204d08e8d1fd75e3d37f7" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="282cf7cf8d7501c367bda3adc1a4e44b35848ed17c9c1eb2eff1a63c946a13aa" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="f6a846095d12822036604909ee078ed1de46aa50ce5038e93335a868b331cc4a" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="98ebd887b572ae5f9cb3c3ce9459836e59fbacde6bfa2cc21ea0c874c00dce7a" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="3b84545e6af8f07a12faf5f1655d90f9a92ffc91184849d0401a8eb586c216c3" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="9fc57ca05209098a97c89b731751d8cd2b1bce16397550c932bb3d07b222611c" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="f54db38dee3a387fb1dd12286c3ef1d803d4b04c3aabb8ed933dc8c1cc3bb536" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="dfc8a64b1f5db453560506f2fc67d398d837cd5b8c46c9faaeb3d2762547ff6b" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="e1e041051fd43c93d0ceea9d42b32ddf16016f7062b6c34bf7fa497780a0e92f" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="9b8bfe574c3d0ab35c79b62c1f70699b0e98d3e99f57bc15527ca8007bdae1df" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="0c6698e1d158e5a5fc4bb241e1f330c8167ecff0ddddf6cd67d4f9e8c526f4ae" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="696.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="80afe0e5dbe79721c10b46ba211e4b4738b6af7cbe3834fff0f9ab456f91d044" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.11.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.9.1.el6]" date="1542801600">- [block] make sure queue_lock is held when setting flag (Ming Lei) [1650024]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
</package>
<package pkgid="ee86cd43a1dd0122b2e726d8fe7f004c17c33156993e7fbfdc95e5ab8c231ae5" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.12.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.12.1.el6]" date="1551960000">- [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
- [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
- [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
- [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
- [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
- [s390] detect etoken facility (Hendrik Brueckner) [1625381]
- [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
- [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
- [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
- [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
- [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
- [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
- [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
- [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
- [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]</changelog>
</package>
<package pkgid="95f00d7149fadae050b00249aea12b631ec171ca2c0cc8bff24a315623a627b7" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.14.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.13.1.el6]" date="1554120000">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1686170]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.1.el6]" date="1555329600">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695496]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.2.el6]" date="1556107200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
</package>
<package pkgid="6881f3ef3f48f6dfea8966f8b9c718ae4977ad23147944724c96415ba17ac068" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.15.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.2.el6]" date="1559217600">- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.3.el6]" date="1560427200">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}</changelog>
</package>
<package pkgid="d6eb649785de43e9eaabcc5b18bd4c9405cfd2ff40524467703ba5d63eb615f9" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.17.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.16.1.el6]" date="1559044800">- [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
- [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
- [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
- [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
</package>
<package pkgid="b4249a50dc5aff45878a137f33c62879f22ff8466f84d3efe29106adb5725164" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.18.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.1.el6]" date="1562673600">- [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
- [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
- [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
- [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
- [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
- [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
- [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
- [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
- [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.2.el6]" date="1564056000">- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
</package>
<package pkgid="6f98f13f8960365ad13a81c46a408d7c40089e966c557c0ee8261ca2b27356e5" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.2.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.1.1.el6]" date="1529582400">- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
- [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
- [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
- [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change xstateregs_get()/set() to use -&gt;xsave.i387 rather than -&gt;fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] debug: Add KERN_&lt;LEVEL&gt; to bare printks, convert printks to pr_&lt;level&gt; (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Split up &lt;asm/i387.h&gt; into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.2.1.el6]" date="1530619200">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
- [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
- [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
- [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
- [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
- [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]</changelog>
</package>
<package pkgid="dbdc8a9cb94f0610c942238f40ca385f25a2c6ef786bb3ca740f3f334275739f" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.22.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.19.1.el6]" date="1565438400">- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.20.1.el6]" date="1565784000">- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
</package>
<package pkgid="dbc6d52137509ae28af877af780e07dce4b2cc4d9f370bece38af6e7fb4fea54" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.22.1.el6]" date="1565956801">- Rebuild</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
</package>
<package pkgid="eb0de1c5f5022dd369e4811d21203ec45af3e4f10fc031e66f3ec7a12556d466" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.24.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573041600">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="e548f8e9f393db3e2dd773ecd7670b4654fbc4008a41becdec8876c133399eb9" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.24.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573128000">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.3.el6]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="34667f86a2fc275ba9f36d8f885840b5cff80bceeaaad217cb7768aff40cc203" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.25.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.25.1.el6]" date="1574251200">- [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
- [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
- [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
- [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="5a96c1d62011f5cc7044a4079ab4c4d4b805bf97094eebdc7075e330079dbda2" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.26.1.el6]" date="1576670400">- [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
- [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
- [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
</package>
<package pkgid="bd4c2ee33949073a2178159e42b89a1c8c00fa0a4138d734a972ef527ce91efd" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.29.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
</package>
<package pkgid="c115cfac5d1f31547e415ce6299dd8df41c6a3343d6b1f45ed870a4098f1ecdb" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.29.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.2.el6]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}</changelog>
</package>
<package pkgid="ea0a5bf9299f4878da671349438e1e1bcc90eeb8e49a93994345b5e7a9add988" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.3.5.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.3.el6]" date="1533297600">- [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
- [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.4.el6]" date="1533729600">- [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.5.el6]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}</changelog>
</package>
<package pkgid="8a9d803a8bf4395aa75086a462f5a2f75457ae2c2bd2c4bc07a40a3e648defb9" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.30.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.2.el6]" date="1590753600">- x86/speculation: Provide SRBDS late microcode loading support (Waiman Long)
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}</changelog>
</package>
<package pkgid="7d3a2a63f1a3e7bbc67de2f0ca9c68e7c3daaf0640e4835f9b060961a70b9095" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.31.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
</package>
<package pkgid="d760d7286eca3b52ddd6765fe10afa6d88eceeb4dc85f1ce020cae7e7cc040f3" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.33.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.32.1.el6]" date="1594036800">- [wireless] libertas: make lbs_ibss_join_existing() return error code on rates overflow (Jarod Wilson) [1776569]
- [wireless] libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held (Jarod Wilson) [1776569]
- [wireless] libertas: Fix two buffer overflows at parsing bss descriptor (Jarod Wilson) [1776569]
- [security] keys: Protect request_key() against a type with no match function (Patrick Talbert) [1433220] {CVE-2017-2647}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
</package>
<package pkgid="261ebda42bb7b07feafe9a41c9cd6496388092ad274663bda175b38075a9778b" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.35.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.34.1.el6]" date="1598356800">- [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705003]
- [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705003]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.35.1.el6]" date="1600257600">- [ata] libata: fix NULL sdev dereference race in atapi_qc_complete() (Kenneth Yin) [1876296]</changelog>
</package>
<package pkgid="e05690d00b11e3e32c33a30a04d257becd8c0c616f57233eb27840f3ae8b02fb" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.1.el6]" date="1535716800">- [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
- [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
- [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
- [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
- [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
- [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
- [block] Rename queue dead flag (Ming Lei) [1574568]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.2.el6]" date="1536926400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
- [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-754.6.3.el6]" date="1537272000">- [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
- [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
- [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]</changelog>
</package>
<package pkgid="7a17694fb784fd788cd409fd6cd60db8997f9977b902d1262403f61b797a7250" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="2.6.32" rel="754.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-752.el6]" date="1525348800">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
- [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
- [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
- [net] security: export security_sk_clone (Marcelo Leitner) [1571357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-753.el6]" date="1526040000">- [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
- [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
- [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
</package>
<package pkgid="2a6e711bc4d2508213e12730469f2cfabcfec5466cb931dfc93211654fe0771d" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.12.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.10.1.el6]" date="1446811200">- [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
- [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
- [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
- [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
- [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
- [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
- [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.11.1.el6]" date="1447416000">- [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
- [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.12.1.el6]" date="1448280000">- Revert: [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]</changelog>
</package>
<package pkgid="69db8e223fc4c91212af07e38568579bcbfb1d6ab524bbc9d5e2a9d3ced34700" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.22.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.20.1.el6]" date="1453464000">- [sched] kernel: sched: Fix nohz load accounting -- again (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Move sched_avg_update to update_cpu_load (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure more NO_HZ load average woes (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure load average vs NO_HZ woes (Rafael Aquini) [1300349 1167755]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.21.1.el6]" date="1456142400">- [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1310148 1302223] {CVE-2016-0774}
- [fs] gfs2: Add missing else in trans_add_meta/data (Robert S Peterson) [1304332 1267995]
- [fs] fs-cache: Synchronise object death state change vs operation submission (David Howells) [1308471 1096893]
- [fs] fs-cache: Reduce cookie ref count if submit fails (David Howells) [1308471 1096893]
- [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1302763 1294400]
- [x86] fix corruption of XMM registers when interrupt handlers use FPU (Mikulas Patocka) [1298994 1259023]
- [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1303044 1292300]
- [net] add inet_sk_transparent() helper (Florian Westphal) [1303044 1292300]
- [net] ipv6: tcp_ipv6 policy route issue (Florian Westphal) [1303044 1292300]
- [net] ipv6: reuse rt6_need_strict (Florian Westphal) [1303044 1292300]
- [net] tcp: resets are misrouted (Florian Westphal) [1303044 1292300]
- [net] tcp: tcp_v4_send_reset: binding oif to iif in no sock case (Florian Westphal) [1303044 1292300]
- [crypto] api: Only abort operations on fatal signal (Herbert Xu) [1296014 1272314]
- [crypto] testmgr: don't use interruptible wait in tests (Herbert Xu) [1296014 1272314]
- [kernel] sched: add wait_for_completion_killable_timeout (Herbert Xu) [1296014 1272314]
- [net] sctp: add routing output fallback (Xin Long) [1307073 1229124]
- [net] sctp: fix dst leak (Xin Long) [1307073 1229124]
- [net] sctp: fix src address selection if using secondary addresses (Xin Long) [1307073 1229124]
- [net] sctp: reduce indent level on sctp_v4_get_dst (Xin Long) [1307073 1229124]
- [scsi] hpsa: Update driver revision to RH5 (Joseph Szczypek) [1306192 1244959]
- [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1306192 1244959]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.22.1.el6]" date="1458216000">- [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1318364 1309898]</changelog>
</package>
<package pkgid="d88c6b926edfe1ca4db9db1800b6c89625f8789d381663ae220fd2c8d1df3d48" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.26.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.24.1.el6]" date="1458907200">- [sched] fix KABI break (Seth Jennings) [1314878 1230310]
- [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] sched,perf: Fix periodic timers (Seth Jennings) [1314878 1230310]
- [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1314878 1230310]
- [sched] Cleanup bandwidth timers (Seth Jennings) [1314878 1230310]
- [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix unlocked reads of some cfs_b-&gt;quota/period (Seth Jennings) [1314878 1230310]
- [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq-&gt;lock (Seth Jennings) [1314878 1230310]
- [sched] Fix hrtimer_cancel/rq-&gt;lock deadlock (Seth Jennings) [1314878 1230310]
- [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1314878 1230310]
- [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [block] Fix q_suspended logic error for io submission (David Milburn) [1314209 1227342]
- [block] nvme: No lock while DMA mapping data (David Milburn) [1314209 1227342]
- [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1315706 1249244]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.25.1.el6]" date="1459857600">- [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [fs] anon_inodes implement dname (Aristeu Rozanski) [1322707 1296019]
- [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1320031 1302777]
- [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297421 1297422] {CVE-2015-8767}
- [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1319276 1299975]
- [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1315696 1309241]
- [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid10: submit_bio_wait returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1320863 1273546]
- [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]
- [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.26.1.el6]" date="1460462400">- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1326043 1324318]</changelog>
</package>
<package pkgid="ae55b5f88761a136203cdc042e561e9813c63b0df5a0f57d3add7506c8d5d6de" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.3.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.1.1.el6]" date="1436875200">- [redhat] Update dracut dependency to pull in drbg module (Herbert Xu) [1241518 1241338]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.2.1.el6]" date="1437566400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
- [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
- [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
- [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
- [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
- [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
- [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.3.1.el6]" date="1439208000">- [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
- [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]</changelog>
</package>
<package pkgid="5322ea33c3814b5f8b74de629c39402d7edd4fbcd8afd06bc6bd9b86d30fb6e0" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.11.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.9.1.el6]" date="1475841600">- [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1381592 1367250]
- [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve Best) [1377472 1341758]
- [powerpc] eeh: Block PCI configuration space access during EEH (Gustavo Duarte) [1379596 1216944]
- [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347101 1347102] {CVE-2016-1583}
- [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1341546 1316461] {CVE-2016-2143}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.10.1.el6]" date="1476187200">- [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Maurizio Lombardi) [1382620 1341298]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="94712b4092fa6be444b4df15c944630903863ca328df8b3bc56ca17c74a244f2" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
</package>
<package pkgid="4e5f264c80f36c05a6e572a57e87bfd795ac5b6d8c3fee836c2860cf9971050e" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.13.2.el6]" date="1487419200">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="6ec6bdf1cb5d91994a8dd2e3be4c087e6091962c5aef9be0dc86025e8f1ce71e" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.15.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.14.1.el6]" date="1483617600">- [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
- [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
- [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
- [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
- [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
- [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
- [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
- [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
- [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
- [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
- [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.15.1.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="3d5f5376e34b2be2b24b8bd501f36eea5d6da22b9015ad0f53e6184be62694a0" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.3.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.1.1.el6]" date="1462536000">- [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1333571 1314774]
- [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1333571 1314774]
- [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1333571 1314774]
- [base] firmware: Add lock for firmware devices (Lyude Paul) [1333572 1309875]
- [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1333579 1321174]
- [md] dm: only initialize the request_queue once (Mike Snitzer) [1333575 1328329]
- [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1333581 1295969]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.2.1.el6]" date="1465214400">- [sched] Revert "kernel: sched: Cure load average vs NO_HZ woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Cure more NO_HZ load average woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Move sched_avg_update to update_cpu_load" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Fix nohz load accounting -- again" (Rafael Aquini) [1343015 1326373]
- [fs] lockd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [fs] nfsd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [isdn] avoid calling tty_ldisc_flush() in atomic context (Sabrina Dubroca) [1337443 1328115]
- [redhat] Update dracut dependency to pull in ecb module (Herbert Xu) [1334431 1315832]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
</package>
<package pkgid="4b1e9d489e97433a3352580d297bb1131503d0dcee096d7238b2a5ba84a7e9ae" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.4.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.2.el6]" date="1471262400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}</changelog>
</package>
<package pkgid="72f955819006afce3936323f4fd9b74b49523bdd3b5f309c580662af8e544767" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
</package>
<package pkgid="c39dface2319ec0c7c51010d96bbeec91b446c7c21c01d1426bd5542a558104c" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.6.2.el6]" date="1477310400">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="0a10a57dad100a100e3603a009c9171d0405b6fe0d0b0e7f6017b43f4a0d2513" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.el6"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-640.el6]" date="1460116800">- [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-641.el6]" date="1460462400">- [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
- [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
- [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-642.el6]" date="1460462401">- [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
- [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
- [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]</changelog>
</package>
<package pkgid="ebf56a961846da998ea9ab41ce2e5ac8a21afc1fcf7e0568eca2c4bea9fd8dec" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="330def9aaa3f2fdc79200893a87e6494e95af4b16f3877eb565b1588b65e195a" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="32df2d4f38370551805bdb6f17c448f1f645656ad1a67baf3691db7b323c9322" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="a99a9b667f63c1546194acb98666c6ca6a364b42acd73917be2b21b34c77c5b3" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="dce0cec4a195aed8aa28b2b4ea36a103892a56f50dc4dce79dde5a332a6ac6ac" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="e0f49a9c45e2820d6100ff031004034f2d8138ebc14ef8ba65aabde7e3197fe8" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="6fc7b8e330840a3db69edb72f7b61a44729b8eadc2a69b51ce98a9b2993f92ea" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="90e50b1c3f80f8dcd4bacc9c964157f86dd07df92f07248606b8a6597098abd1" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="d9279d0a9284211245e08b0fe093754b2bae853045452f16eaa5cd7b5ffc82ab" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="b31a0adb99cd1f7386a71d491e52bbf7ee0001d45947619b9a43431ab0caf803" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="a158e40a7c61184be95127decd7d2752ddfc5f91e896d3e32feb01d2ccc2061a" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="58d08d1fafacee4ccfdfc4b46b1a0357900c3065db11d1fc2d565089003d156a" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="c54ab158e5643850b2a19f2ecd8eb54be9a763226f54a12cdf88cbf63d49b376" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="3bec0ffb5267680541fdcabd94007d578e3764fb86af66c9e20c5a992b3409e7" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="57740db1a992a228a929a27f0dca0c7ce3d6979c2783b5ad681c55feb738cbe8" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.11.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.9.1.el6]" date="1542801600">- [block] make sure queue_lock is held when setting flag (Ming Lei) [1650024]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
</package>
<package pkgid="31cef48ffa3fec6e9b5ac51d540fe609b8c3a5e4f59487e201eb486f810415e2" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.12.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.12.1.el6]" date="1551960000">- [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
- [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
- [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
- [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
- [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
- [s390] detect etoken facility (Hendrik Brueckner) [1625381]
- [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
- [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
- [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
- [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
- [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
- [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
- [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
- [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
- [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]</changelog>
</package>
<package pkgid="8b61f10871e91d7390655f1926dff845665fee45a8d0df23e6d26e4e6ee2db6a" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.14.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.13.1.el6]" date="1554120000">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1686170]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.1.el6]" date="1555329600">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695496]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.2.el6]" date="1556107200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
</package>
<package pkgid="81de310adf30f19bc6d5fd8e314a875e77e40cc49bd2822918ab7a66bf1abf52" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.15.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.2.el6]" date="1559217600">- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.3.el6]" date="1560427200">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}</changelog>
</package>
<package pkgid="33b6b5e829accc30db3d9450694e247933878abc0830b72e6a63cc0e20dfdcab" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.17.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.16.1.el6]" date="1559044800">- [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
- [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
- [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
- [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
</package>
<package pkgid="2b5b386b69a82aba9edb489fcbc9e3194719838fbf68f7225b7703a3df12e282" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.18.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.1.el6]" date="1562673600">- [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
- [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
- [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
- [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
- [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
- [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
- [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
- [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
- [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.2.el6]" date="1564056000">- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
</package>
<package pkgid="6b7edbf8da19506399d69b2e7a1b6196be4bb11c609ff8bc58492078d9967ece" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.2.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.1.1.el6]" date="1529582400">- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
- [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
- [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
- [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change xstateregs_get()/set() to use -&gt;xsave.i387 rather than -&gt;fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] debug: Add KERN_&lt;LEVEL&gt; to bare printks, convert printks to pr_&lt;level&gt; (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Split up &lt;asm/i387.h&gt; into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.2.1.el6]" date="1530619200">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
- [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
- [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
- [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
- [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
- [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]</changelog>
</package>
<package pkgid="3a841eb5009e084651a6a8d9407ed60047190cb26a6c81beae60f60e8a23167c" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.22.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.19.1.el6]" date="1565438400">- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.20.1.el6]" date="1565784000">- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
</package>
<package pkgid="eb965586179b5bc3771dc25587b96063e0a38ba9ea45e03c9db089c57cc838a7" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.22.1.el6]" date="1565956801">- Rebuild</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
</package>
<package pkgid="ccb0956c7548198e34b4f14109d29b70bcbd6956ded52beb6341096d7833e9fe" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573041600">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="853f12cb57924e4a606ebbc024f5fd8be1be5d3d068ad41ae825d3c0d297258d" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573128000">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.3.el6]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="98f56c2064a15344857ed2d5ef910c0c12cf1d2d7817eb56d46c79f3b1d8fc88" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.25.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.25.1.el6]" date="1574251200">- [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
- [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
- [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
- [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="85c6fd176653526c0fe98d43e7a9106bca7757516af069c6cc14ac2e5821c537" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.26.1.el6]" date="1576670400">- [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
- [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
- [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
</package>
<package pkgid="2f794473871c2879d843c87283b748bead779813301d60791db9c82224a8f22f" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
</package>
<package pkgid="39ff3280d089ed98fa29b703636fcafa6851111551884f67357130ce5b031979" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.2.el6]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}</changelog>
</package>
<package pkgid="821dd9df396184d8032980b2a33f6fdb8d69d4e46b6ebffde72e1e9679b9eb3f" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.3.5.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.3.el6]" date="1533297600">- [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
- [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.4.el6]" date="1533729600">- [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.5.el6]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}</changelog>
</package>
<package pkgid="510a771f66e3c05cc7c14c62a0d53bfe7fe76fe67241d7f6346d404ba9a42ea1" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.30.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.2.el6]" date="1590753600">- x86/speculation: Provide SRBDS late microcode loading support (Waiman Long)
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}</changelog>
</package>
<package pkgid="07bf93535171ce1064739a31be94c259a07a774e7188990b2d310473347b39b0" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.31.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
</package>
<package pkgid="a1a4ad2948aa054aa6fad6f798175bf118c73b49431b1560bc846020d71474c4" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.33.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.32.1.el6]" date="1594036800">- [wireless] libertas: make lbs_ibss_join_existing() return error code on rates overflow (Jarod Wilson) [1776569]
- [wireless] libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held (Jarod Wilson) [1776569]
- [wireless] libertas: Fix two buffer overflows at parsing bss descriptor (Jarod Wilson) [1776569]
- [security] keys: Protect request_key() against a type with no match function (Patrick Talbert) [1433220] {CVE-2017-2647}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
</package>
<package pkgid="d2a44ac5b894962711bfab05af04598316ecbffbf65ce1256154432786d90ac5" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.35.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.34.1.el6]" date="1598356800">- [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705003]
- [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705003]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.35.1.el6]" date="1600257600">- [ata] libata: fix NULL sdev dereference race in atapi_qc_complete() (Kenneth Yin) [1876296]</changelog>
</package>
<package pkgid="4ee79d035b77fdb76acb748837aeec3d33c0484a1ba91834ea234c932cae5339" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.1.el6]" date="1535716800">- [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
- [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
- [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
- [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
- [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
- [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
- [block] Rename queue dead flag (Ming Lei) [1574568]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.2.el6]" date="1536926400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
- [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-754.6.3.el6]" date="1537272000">- [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
- [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
- [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]</changelog>
</package>
<package pkgid="13bc72f185ea22ce1d4d8a09c6d88154177801414afe2b015cb9e2ed47eb9a51" name="kernel-headers" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-752.el6]" date="1525348800">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
- [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
- [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
- [net] security: export security_sk_clone (Marcelo Leitner) [1571357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-753.el6]" date="1526040000">- [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
- [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
- [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
</package>
<package pkgid="69f3d457b22fa2265dba6a44f0964d350490ff872024be3141b0e3d07204efb2" name="kmod-openafs" arch="noarch">
  <version epoch="0" ver="1.6.17" rel="1.SL68.el6"/>
  <changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; - 1.6.10-1.SL66" date="1413806400">- Updated for SL 6.6</changelog>
  <changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; - 1.6.13-1.SL67" date="1437998400">- Updated for SL 6.7</changelog>
  <changelog author="Kevin M. Hill &lt;kevinh@fnal.gov&gt; = 1.6.17-1.SL68" date="1465819200">- Updated for SL 6.8</changelog>
</package>
<package pkgid="992d75a446ba1607f4c3c150da54734fdfd64ba16f3ef628e65ca949388786bc" name="kmod-openafs" arch="noarch">
  <version epoch="0" ver="1.6.20" rel="1.SL69.sl6"/>
  <changelog author="Kevin M. Hill &lt;kevinh@fnal.gov&gt; = 1.6.17-1.SL68" date="1465819200">- Updated for SL 6.8</changelog>
  <changelog author="Kevin M. Hill &lt;kevinh@fnal.gov&gt; = 1.6.18-1.SL68" date="1465992000">- Update to current afs version</changelog>
  <changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; - 1.6.20-1.SL69" date="1490270400">- Update to current afs version</changelog>
</package>
<package pkgid="2acf39e723919085e97abdd00b5c8c8a6b67fffa13ca88b7d78f549ab6ce3dbc" name="kmod-openafs" arch="noarch">
  <version epoch="0" ver="1.6.22.3" rel="1.SL610.el6"/>
  <changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; - 1.6.13-1.SL67" date="1437998400">- Updated for SL 6.7</changelog>
  <changelog author="Kevin M. Hill &lt;kevinh@fnal.gov&gt; = 1.6.17-1.SL68" date="1465819200">- Updated for SL 6.8</changelog>
  <changelog author="Kevin M. Hill &lt;kevinh@fnal.gov&gt; = 1.6.18-1.SL68" date="1465992000">- Update to current afs version</changelog>
</package>
<package pkgid="e2fba81c7371bb0ad3e9a1b25fa89df794a15ba2e1644d9be98782e21658a92f" name="kmod-openafs-573" arch="i686">
  <version epoch="0" ver="1.6.14" rel="219.sl6.573.3.1"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.13-215.SLx" date="1437998400">- update to release 1.6.13 (security release)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-218.SLx" date="1439467200">- update to release 1.6.14
- fixes a 1.6.13 regression in vlserver when volumes are queried by regex
- the "backup" util does this, unless vols are specified with ".*" or "" only</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-219.SLx" date="1446120000">- added OPENAFS-SA-2015-007.1.6.patch, fixes CVE-2015-7762 and CVE-2015-7763</changelog>
</package>
<package pkgid="ebd558d0b4ee1225489517530bc895eac69371f6962f88be4cd9de1bf2840fc9" name="kmod-openafs-573" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6.573.12.1"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="a602c05c981b77b749b3bfa83ac141395fbbb4dc325e60d9c884f8c9f001d643" name="kmod-openafs-642" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6.642"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="ecce29747c685e9fed37b040200a5382b1df7c1d5cce3cbeda62ac11cfbd42e1" name="kmod-openafs-642" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6.642.6.2"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="55eb788a0f93586611d5c0bf89d981553c58fc28bc9c5e726fa4960e797308d8" name="kmod-openafs-696" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6.696"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="aebd122bb5c3cf1d917256d42199becff9561b0a65fb1c82585aa8eed01d58bd" name="kmod-openafs-696" arch="i686">
  <version epoch="0" ver="1.6.20" rel="257.sl6.696"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-257.SLx" date="1512561600">- security update
- patch1086 to address OPENAFS-SA-2017-001</changelog>
</package>
<package pkgid="f7c3d82a64eddaabf9c98ac7d791ab6c61b46eeaedf4e14e2315cd948d99495c" name="kmod-openafs-754" arch="i686">
  <version epoch="0" ver="1.6.22.3" rel="286.sl6.754"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22-278.SLx" date="1512561600">- update to release 1.6.22 (security release)
- addresses OPENAFS-SA-2017-001</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
</package>
<package pkgid="0d1e1c93acb3b84d24c0512577bcf65732757b96ecce21967d2722ed9969d21d" name="kmod-openafs-754" arch="i686">
  <version epoch="0" ver="1.6.23" rel="289.sl6.754.3.5"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
</package>
<package pkgid="41e199bbd199176515d412e05f24930e7a0de6c2e045906c8effb780eb3ce955" name="kmod-openafs-754" arch="i686">
  <version epoch="0" ver="1.6.24" rel="290.sl6.754.23.1"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.24-290.SLx" date="1571832000">- update to release 1.6.24 (security release)
- addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
- fix build on EL 6.10</changelog>
</package>
<package pkgid="a82361b63700c4afe0ae5df7ede3154d2821226705c28eb0d3edda6dc6cda9dd" name="kpartx" arch="i686">
  <version epoch="0" ver="0.4.9" rel="100.el6"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.98" date="1481025600">- Add 0266-RHBZ-1401391-fix-prio-put.patch
  * don't try to drop a nonexistant prio handler
- Add 0267-RHBZ-1401769-orphan-status.patch
  * don't print out checker and device status for orphan paths
- Resolves: bz #1401391, #1401769</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.99" date="1481025601">- Change devicemapper Requires to &gt;= 1.02.117-10.el6 (bz #1344381)
- Resolves: #1344381</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.100" date="1483617600">- Modify 0261-RHBZ-1377532-disable-changed-paths.patch
  * add man page information
- Refresh 0265-RHBZ-1355669-max-sectors-kb.patch
- Related: #1377532</changelog>
</package>
<package pkgid="1fcad7779c1fb41ea66bfdbe9efbd46f3e7b0c37674102358736a22c37c933bb" name="krb5-appl-clients" arch="i686">
  <version epoch="0" ver="1.0.1" rel="10.el6_10"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.0.1-8" date="1335441600">- bump release number to sort newer than the recent 6.2 update</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.0.1-9" date="1585224000">- Fix CVE-2020-10188 (netclear()/nextitem() buffer overrun)
- Resolves: #1814774</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.0.1-10" date="1585224001">- Apply previous patch
- Resolves: #1814774</changelog>
</package>
<package pkgid="6110f465790a6b096d571a3497a2984b45b83f99bd91e881a594f6bdfe71cc07" name="krb5-appl-servers" arch="i686">
  <version epoch="0" ver="1.0.1" rel="10.el6_10"/>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; - 1.0.1-8" date="1335441600">- bump release number to sort newer than the recent 6.2 update</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.0.1-9" date="1585224000">- Fix CVE-2020-10188 (netclear()/nextitem() buffer overrun)
- Resolves: #1814774</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.0.1-10" date="1585224001">- Apply previous patch
- Resolves: #1814774</changelog>
</package>
<package pkgid="b41cb960faa9b5b45ce2db1aff3e9ccadbd7a2e76be41d3f98831fb9e939b629" name="krb5-devel" arch="i686">
  <version epoch="0" ver="1.10.3" rel="42z1.el6_7"/>
  <changelog author="Roland Mainz &lt;rmainz@redhat.com&gt; - 1.10.3-41" date="1427371200">- fix for CVE-2014-5353 (#1174543) "Fix LDAP misused policy
  name crash"</changelog>
  <changelog author="Roland Mainz &lt;rmainz@redhat.com&gt; - 1.10.3-42" date="1428667200">- fix for RH bug #1210704 ("Remove stray include in krb5's
  localauth_plugin.h"). This unnecessary #include statement
  was causing build failures on some systems by making libkrb5
  sources depend on gssapi.h (and as result to libcom_err,
  too).</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.10.3-42z1" date="1455278400">- Fix CVE-2015-8629 and CVE-2015-8631
- Also fix a spec trigger issue that prevents building
- Resolves: #1306973</changelog>
</package>
<package pkgid="0a79c4119d976945609c183d720c1707590f96cca998ee72a593a05c14716876" name="krb5-libs" arch="i686">
  <version epoch="0" ver="1.10.3" rel="42z1.el6_7"/>
  <changelog author="Roland Mainz &lt;rmainz@redhat.com&gt; - 1.10.3-41" date="1427371200">- fix for CVE-2014-5353 (#1174543) "Fix LDAP misused policy
  name crash"</changelog>
  <changelog author="Roland Mainz &lt;rmainz@redhat.com&gt; - 1.10.3-42" date="1428667200">- fix for RH bug #1210704 ("Remove stray include in krb5's
  localauth_plugin.h"). This unnecessary #include statement
  was causing build failures on some systems by making libkrb5
  sources depend on gssapi.h (and as result to libcom_err,
  too).</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.10.3-42z1" date="1455278400">- Fix CVE-2015-8629 and CVE-2015-8631
- Also fix a spec trigger issue that prevents building
- Resolves: #1306973</changelog>
</package>
<package pkgid="3052cbe41bb3c8de4fbb1593dc86253e8aaf76a9f52f700249df0b22f06fdd49" name="krb5-pkinit-openssl" arch="i686">
  <version epoch="0" ver="1.10.3" rel="42z1.el6_7"/>
  <changelog author="Roland Mainz &lt;rmainz@redhat.com&gt; - 1.10.3-41" date="1427371200">- fix for CVE-2014-5353 (#1174543) "Fix LDAP misused policy
  name crash"</changelog>
  <changelog author="Roland Mainz &lt;rmainz@redhat.com&gt; - 1.10.3-42" date="1428667200">- fix for RH bug #1210704 ("Remove stray include in krb5's
  localauth_plugin.h"). This unnecessary #include statement
  was causing build failures on some systems by making libkrb5
  sources depend on gssapi.h (and as result to libcom_err,
  too).</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.10.3-42z1" date="1455278400">- Fix CVE-2015-8629 and CVE-2015-8631
- Also fix a spec trigger issue that prevents building
- Resolves: #1306973</changelog>
</package>
<package pkgid="d5d7cbad4c1ae9dfd3cc481aa4e04fd60e01f6fafa2b8663dca4f2c8f0484625" name="krb5-server" arch="i686">
  <version epoch="0" ver="1.10.3" rel="42z1.el6_7"/>
  <changelog author="Roland Mainz &lt;rmainz@redhat.com&gt; - 1.10.3-41" date="1427371200">- fix for CVE-2014-5353 (#1174543) "Fix LDAP misused policy
  name crash"</changelog>
  <changelog author="Roland Mainz &lt;rmainz@redhat.com&gt; - 1.10.3-42" date="1428667200">- fix for RH bug #1210704 ("Remove stray include in krb5's
  localauth_plugin.h"). This unnecessary #include statement
  was causing build failures on some systems by making libkrb5
  sources depend on gssapi.h (and as result to libcom_err,
  too).</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.10.3-42z1" date="1455278400">- Fix CVE-2015-8629 and CVE-2015-8631
- Also fix a spec trigger issue that prevents building
- Resolves: #1306973</changelog>
</package>
<package pkgid="f23768a13145abadf89f357e16beb9825748501759a7d5750b963a588000ff9b" name="krb5-server-ldap" arch="i686">
  <version epoch="0" ver="1.10.3" rel="42z1.el6_7"/>
  <changelog author="Roland Mainz &lt;rmainz@redhat.com&gt; - 1.10.3-41" date="1427371200">- fix for CVE-2014-5353 (#1174543) "Fix LDAP misused policy
  name crash"</changelog>
  <changelog author="Roland Mainz &lt;rmainz@redhat.com&gt; - 1.10.3-42" date="1428667200">- fix for RH bug #1210704 ("Remove stray include in krb5's
  localauth_plugin.h"). This unnecessary #include statement
  was causing build failures on some systems by making libkrb5
  sources depend on gssapi.h (and as result to libcom_err,
  too).</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.10.3-42z1" date="1455278400">- Fix CVE-2015-8629 and CVE-2015-8631
- Also fix a spec trigger issue that prevents building
- Resolves: #1306973</changelog>
</package>
<package pkgid="a0812d99b3ea523ff4fc82325177a0eaecd6fc2c26081bc13fc6bfe23d6bae88" name="krb5-workstation" arch="i686">
  <version epoch="0" ver="1.10.3" rel="42z1.el6_7"/>
  <changelog author="Roland Mainz &lt;rmainz@redhat.com&gt; - 1.10.3-41" date="1427371200">- fix for CVE-2014-5353 (#1174543) "Fix LDAP misused policy
  name crash"</changelog>
  <changelog author="Roland Mainz &lt;rmainz@redhat.com&gt; - 1.10.3-42" date="1428667200">- fix for RH bug #1210704 ("Remove stray include in krb5's
  localauth_plugin.h"). This unnecessary #include statement
  was causing build failures on some systems by making libkrb5
  sources depend on gssapi.h (and as result to libcom_err,
  too).</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.10.3-42z1" date="1455278400">- Fix CVE-2015-8629 and CVE-2015-8631
- Also fix a spec trigger issue that prevents building
- Resolves: #1306973</changelog>
</package>
<package pkgid="4573de948933989e13edd23b1db3a1037e13589ababdf9ba59688d91ac18c32d" name="ksh" arch="i686">
  <version epoch="0" ver="20120801" rel="38.el6_10"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1509364800">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1454804</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516276800">- Fix a crash due to out of bounds write
  Resolves: #1506344</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-38" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790542</changelog>
</package>
<package pkgid="d4fe97fa879c55b1488eb98990754bc30bacb45c27a4f01b84374917ac00e5f5" name="ldb-tools" arch="i686">
  <version epoch="0" ver="1.1.13" rel="3.el6_7.1"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-2" date="1352203200">- resolves: rhbz#873422 - LDB 1.1.13 exports improper ABI</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3" date="1352203201">- use the proper %patch stanza to make rpmdiff happy
- related: rhbz#873422 - LDB 1.1.13 exports improper ABI</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3.1" date="1450094400">- Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                           in Samba LDAP server [rhel-7.2.z]
- Remove the patch from the previous commit, it doesn't fix a remotely
  eploitable issue. Add patches from upstream #11636 instead.</changelog>
</package>
<package pkgid="028731e08e6de2e51279a0e588aa6ad07137a15d0ca4be3de44c45e31d725e3d" name="ldb-tools" arch="i686">
  <version epoch="0" ver="1.1.25" rel="2.el6_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3.1" date="1450094400">- Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                           in Samba LDAP server [rhel-7.2.z]
- Remove the patch from the previous commit, it doesn't fix a remotely
  eploitable issue. Add patches from upstream #11636 instead.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459771200">- Rebase to upstream 1.1.25
- Related: rhbz#1322688</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-2" date="1459771201">- Fix the python-ldb requires
- Related: rhbz#1322688</changelog>
</package>
<package pkgid="fc1e2c0cb9c8c065f142af15b87a199b3cec252993d2c74dffa8c606bd557d25" name="ldns" arch="i686">
  <version epoch="0" ver="1.6.16" rel="7.el6.2"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.16-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.6.16-7.1" date="1439553600">- port the rhel-7 package version to rhel-6
- enabled ECDSA due to Unbound
- Fix issue in DSA algorithm (#1077799)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.6.16.7.2" date="1449748800">- bumping release to rebuild the package for Base RHEL (#1284961)</changelog>
</package>
<package pkgid="6337f4541d1cf4cb0ea63b653e1eb4989e5fecff1e8aa2c0a196822e70664715" name="ldns-devel" arch="i686">
  <version epoch="0" ver="1.6.16" rel="7.el6.2"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.16-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.6.16-7.1" date="1439553600">- port the rhel-7 package version to rhel-6
- enabled ECDSA due to Unbound
- Fix issue in DSA algorithm (#1077799)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.6.16.7.2" date="1449748800">- bumping release to rebuild the package for Base RHEL (#1284961)</changelog>
</package>
<package pkgid="0424b3b5d6649620d3fcda1eeab394b58af1cf2933637246ace4781aa1f41de9" name="ldns-doc" arch="noarch">
  <version epoch="0" ver="1.6.16" rel="7.el6.2"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.16-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.6.16-7.1" date="1439553600">- port the rhel-7 package version to rhel-6
- enabled ECDSA due to Unbound
- Fix issue in DSA algorithm (#1077799)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.6.16.7.2" date="1449748800">- bumping release to rebuild the package for Base RHEL (#1284961)</changelog>
</package>
<package pkgid="6130d309cb08dc3138414df64de5424de83039e7f96a18d43b1f2d3b3f7bfaf6" name="ldns-python" arch="i686">
  <version epoch="0" ver="1.6.16" rel="7.el6.2"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.6.16-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.6.16-7.1" date="1439553600">- port the rhel-7 package version to rhel-6
- enabled ECDSA due to Unbound
- Fix issue in DSA algorithm (#1077799)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.6.16.7.2" date="1449748800">- bumping release to rebuild the package for Base RHEL (#1284961)</changelog>
</package>
<package pkgid="06ed945dcf3f1b5200b929399f4c3ba00a6e99ed07ca887d8c6bb12485a391aa" name="lemon" arch="i686">
  <version epoch="0" ver="3.6.20" rel="1.el6_7.2"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 3.6.20-1" date="1258459200">- update to 3.6.20 (http://www.sqlite.org/releaselog/3_6_20.html)</changelog>
  <changelog author="Viktor Jancik &lt;vjancik@redhat.com&gt; - 3.6.20-1.el6_7.1" date="1437566400">- fix for CVE-2015-3416
  Resolves: #1244727</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.6.20-1.2" date="1438171200">- Add patch for compiler warnings highlighted by rpmdiff.
  Related: rhbz#1244727</changelog>
</package>
<package pkgid="7323a0f1a8a3b6c32d9adb3517cdddc916e3ef6e1f3e9bc3f8fe5b01d83e4b77" name="libX11" arch="i686">
  <version epoch="0" ver="1.6.4" rel="3.el6"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.6.4-1" date="1483358400">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
</package>
<package pkgid="f7b2e35a4af10b8d9346697dba79dda970f079c7a77ce54198f3596db2926259" name="libX11" arch="i686">
  <version epoch="0" ver="1.6.4" rel="4.el6_10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.4-4" date="1603886400">- Fix CVE-2020-14363 (#1873920)</changelog>
</package>
<package pkgid="e150e172456ecdfa04b94d1b51e87bf9734f157aba000ba3aea0b07265faf1b6" name="libX11-common" arch="noarch">
  <version epoch="0" ver="1.6.4" rel="3.el6"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.6.4-1" date="1483358400">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
</package>
<package pkgid="cc943401aa5342763c1624d94045f07d846bcf5ed5f93b752144769100b82d9d" name="libX11-common" arch="noarch">
  <version epoch="0" ver="1.6.4" rel="4.el6_10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.4-4" date="1603886400">- Fix CVE-2020-14363 (#1873920)</changelog>
</package>
<package pkgid="da0cc100ca39054fcb327e7575c400d1f90c059ef61e577e78e83df429ede433" name="libX11-devel" arch="i686">
  <version epoch="0" ver="1.6.4" rel="3.el6"/>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.6.4-1" date="1483358400">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
</package>
<package pkgid="68f1dfbc7ea52eaaa0793c63f6f2488bab061f0e21af1c8cd8f88ad67b030d5e" name="libX11-devel" arch="i686">
  <version epoch="0" ver="1.6.4" rel="4.el6_10"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.4-4" date="1603886400">- Fix CVE-2020-14363 (#1873920)</changelog>
</package>
<package pkgid="1dfddfac566a877e0216d0c141b413cf05d4b27ed772e5d06e9dbf53bb2f1006" name="libXfixes" arch="i686">
  <version epoch="0" ver="5.0.3" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 5.0.1-2.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 5.0.2-2" date="1464350400">- require libX11 1.6</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 5.0.3-1" date="1475668800">- LibXfixes 5.0.3
- fixes CVE-2016-7944 (#1406220)</changelog>
</package>
<package pkgid="077f398bfd8f98348243518d5a2f2582272089a2fe8faf3440a40038997a4833" name="libXfixes-devel" arch="i686">
  <version epoch="0" ver="5.0.3" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 5.0.1-2.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 5.0.2-2" date="1464350400">- require libX11 1.6</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 5.0.3-1" date="1475668800">- LibXfixes 5.0.3
- fixes CVE-2016-7944 (#1406220)</changelog>
</package>
<package pkgid="ea16a0f758e29ce196048ab0327551c67d7aa517391a6db4063e35020e645893" name="libXfont" arch="i686">
  <version epoch="0" ver="1.4.5" rel="5.el6_7"/>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.4.5-3" date="1389182400">- cve-2013-6462.patch: sscanf overflow (bug 1049684)
- sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)</changelog>
  <changelog author="Benjamin Tissoires &lt;btissoir@redhat.com&gt; 1.4.5-4" date="1415880000">- CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
- CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
- CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.4.5-5" date="1441108800">- CVE-2015-1802: missing range check in bdfReadProperties (bug 1258892)
- CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258892)
- CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258892)</changelog>
</package>
<package pkgid="935ad069f19cbedcf487a8364025bd3a5fd5f2858cb676668bd496883dfb3699" name="libXfont-devel" arch="i686">
  <version epoch="0" ver="1.4.5" rel="5.el6_7"/>
  <changelog author="Soren Sandmann &lt;ssp@redhat.com&gt; 1.4.5-3" date="1389182400">- cve-2013-6462.patch: sscanf overflow (bug 1049684)
- sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)</changelog>
  <changelog author="Benjamin Tissoires &lt;btissoir@redhat.com&gt; 1.4.5-4" date="1415880000">- CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163602, bug 1163601)
- CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163602, bug 1163601)
- CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163602, bug 1163601)</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.4.5-5" date="1441108800">- CVE-2015-1802: missing range check in bdfReadProperties (bug 1258892)
- CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258892)
- CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258892)</changelog>
</package>
<package pkgid="19b2eb4d9eff88f1eac56bafbdbb8be9fb9db25adccd72b2171a88feeee11650" name="libXi" arch="i686">
  <version epoch="0" ver="1.7.8" rel="1.el6"/>
  <changelog author="Benjamin Tissoires &lt;btissoir@redhat.com&gt; 1.7.2-2.2" date="1405339200">- fix disttag</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.7.4-1" date="1447675200">- libXi 1.7.4</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.7.8-1" date="1484827200">- libXi 1.7.8
- fixes CVE-2016-7945, CVE-2016-7946 (#1406221)</changelog>
</package>
<package pkgid="4662323d61500018ec5d818f0e06ddbb667fcfec6bdbc7df3b16ae63674ae5f3" name="libXi-devel" arch="i686">
  <version epoch="0" ver="1.7.8" rel="1.el6"/>
  <changelog author="Benjamin Tissoires &lt;btissoir@redhat.com&gt; 1.7.2-2.2" date="1405339200">- fix disttag</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.7.4-1" date="1447675200">- libXi 1.7.4</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.7.8-1" date="1484827200">- libXi 1.7.8
- fixes CVE-2016-7945, CVE-2016-7946 (#1406221)</changelog>
</package>
<package pkgid="c13506bb3318f1e900ec69804f86cbfb543c061347dc092e2824540a91e44863" name="libXrandr" arch="i686">
  <version epoch="0" ver="1.5.1" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.1-2.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.4.2-1" date="1447416000">- libXrandr 1.4.2</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.5.1-1" date="1484827200">- libXrandr 1.5.1
- fixes CVE-2016-7947, CVE-2016-7948 (#1406222)</changelog>
</package>
<package pkgid="e1540e0fa118695364b4cc74097de8682f0064e7b15dacafc055a6ffb3e4d008" name="libXrandr-devel" arch="i686">
  <version epoch="0" ver="1.5.1" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.1-2.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.4.2-1" date="1447416000">- libXrandr 1.4.2</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.5.1-1" date="1484827200">- libXrandr 1.5.1
- fixes CVE-2016-7947, CVE-2016-7948 (#1406222)</changelog>
</package>
<package pkgid="97162c4b07565ec4e168f868c1cccd813239b4d0fe5f0574eb2722070a499ebd" name="libXrender" arch="i686">
  <version epoch="0" ver="0.9.10" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.9.8-2.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 0.9.8-3" date="1461585600">- Fix request length calculation for XRenderCompositeText32
  (#1328578)</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 0.9.10-1" date="1475668800">- libXrender 0.9.10
- fixes CVE-2016-7949, CVE-2016-7950 (#1406212)</changelog>
</package>
<package pkgid="27c9f398a6550afdfffaf221977485bdcb7fecde5fd6122a44c080c83035db12" name="libXrender-devel" arch="i686">
  <version epoch="0" ver="0.9.10" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.9.8-2.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 0.9.8-3" date="1461585600">- Fix request length calculation for XRenderCompositeText32
  (#1328578)</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 0.9.10-1" date="1475668800">- libXrender 0.9.10
- fixes CVE-2016-7949, CVE-2016-7950 (#1406212)</changelog>
</package>
<package pkgid="71d5d8f07dbd1d8f9708c6bf5841c746255c898be9f54d303c40e6caa724e2d5" name="libXtst" arch="i686">
  <version epoch="0" ver="1.2.3" rel="1.el6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.2-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.2-2.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.2.3-1" date="1484827200">- libXtst 1.2.3
- fixes CVE-2016-7951, CVE-2016-7952 (#1406214)</changelog>
</package>
<package pkgid="5645f74f95374ab11e0097ff505f05014f56d22cba41105730370f0995e58442" name="libXtst-devel" arch="i686">
  <version epoch="0" ver="1.2.3" rel="1.el6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.2-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.2-2.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.2.3-1" date="1484827200">- libXtst 1.2.3
- fixes CVE-2016-7951, CVE-2016-7952 (#1406214)</changelog>
</package>
<package pkgid="4e241d4d9f3d3583c88155cf27a2e3c4b8bb0be3b99d5c38e8c0f92fc4385b26" name="libXv" arch="i686">
  <version epoch="0" ver="1.0.11" rel="1.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.10-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.10-4" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.0.11-1" date="1475668800">- libXv 1.0.11
- fixes CVE-2016-5407 (#1406216)</changelog>
</package>
<package pkgid="e95fbfa14fb734fbf440582a4a07c1c6de0cd1621dec8b285edc1af8e8219617" name="libXv-devel" arch="i686">
  <version epoch="0" ver="1.0.11" rel="1.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.10-3" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.10-4" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.0.11-1" date="1475668800">- libXv 1.0.11
- fixes CVE-2016-5407 (#1406216)</changelog>
</package>
<package pkgid="90449fb358b2dfa50d7385ea0e9b4e8cfc0246500034ac4f10b44e9ac8cd6b93" name="libXvMC" arch="i686">
  <version epoch="0" ver="1.0.10" rel="1.el6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.0.8-2.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.0.10-1" date="1484827200">- libXvMC 1.0.10
- fixes CVE-2016-7953 (#1406215)</changelog>
</package>
<package pkgid="8d0fe522b9e0b1bd527d4bdeed7ec48210d1d7a49942b8ef3579171c0f8a2ce9" name="libXvMC-devel" arch="i686">
  <version epoch="0" ver="1.0.10" rel="1.el6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.0.8-2.1" date="1392206400">- Mass rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.0.10-1" date="1484827200">- libXvMC 1.0.10
- fixes CVE-2016-7953 (#1406215)</changelog>
</package>
<package pkgid="0d098393bca197c17b24812e720f46a9c3c6861bd527aeda349a494b81a79696" name="libarchive" arch="i686">
  <version epoch="0" ver="2.8.3" rel="7.el6_8"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.8.3-5" date="1468843200">- enable testsuite
- CVE batch in summer 2016</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.8.3-6" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365774)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.8.3-7" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
</package>
<package pkgid="79e98076171fa574efed22a6553519e7cf086778aad8502aaec25d4749c7b9f0" name="libarchive-devel" arch="i686">
  <version epoch="0" ver="2.8.3" rel="7.el6_8"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.8.3-5" date="1468843200">- enable testsuite
- CVE batch in summer 2016</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.8.3-6" date="1470916800">- Fixes CVE-2016-5418: Archive Entry with type 1 (hardlink) causes file overwrite (#1365774)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 2.8.3-7" date="1471003200">- Fixes variation of CVE-2016-5418: Hard links could include ".." in their path.</changelog>
</package>
<package pkgid="fee246e907116b83200a9581793848a9fbfd868413c345e03bc491bd8dc7a060" name="libbasicobjects" arch="i686">
  <version epoch="0" ver="0.1.1" rel="13.el6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-11" date="1401796800">- Do not package built objects in dhash-devel
- Fix NVR in the previous changelog entry
- Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-12" date="1474977600">- Related: rhbz#1377213 - ding-libs don't parse lines without an equal sign</changelog>
  <changelog author="Michal Zidek &lt;mzidek@redhat.com&gt; - 0.4.0-13" date="1518091200">- Resolves: rhbz#1538061 - sssd/libini_config" cannot parse configuration file
                           with line longer than 5102</changelog>
</package>
<package pkgid="5ebd0accaaac4bdb4152afb870fadac8d4f9c9f1a9bd7cffb5b9e0ff15903596" name="libbasicobjects-devel" arch="i686">
  <version epoch="0" ver="0.1.1" rel="13.el6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-11" date="1401796800">- Do not package built objects in dhash-devel
- Fix NVR in the previous changelog entry
- Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-12" date="1474977600">- Related: rhbz#1377213 - ding-libs don't parse lines without an equal sign</changelog>
  <changelog author="Michal Zidek &lt;mzidek@redhat.com&gt; - 0.4.0-13" date="1518091200">- Resolves: rhbz#1538061 - sssd/libini_config" cannot parse configuration file
                           with line longer than 5102</changelog>
</package>
<package pkgid="f08224d5daa0b4954a4859f875943889a12ce17510efd1106b452c3198a1cf2a" name="libcollection" arch="i686">
  <version epoch="0" ver="0.6.2" rel="13.el6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-11" date="1401796800">- Do not package built objects in dhash-devel
- Fix NVR in the previous changelog entry
- Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-12" date="1474977600">- Related: rhbz#1377213 - ding-libs don't parse lines without an equal sign</changelog>
  <changelog author="Michal Zidek &lt;mzidek@redhat.com&gt; - 0.4.0-13" date="1518091200">- Resolves: rhbz#1538061 - sssd/libini_config" cannot parse configuration file
                           with line longer than 5102</changelog>
</package>
<package pkgid="50d721a6318f8d3f60d56700a2a7166d1ac3e3b96500ab77c09f3acc61fddec0" name="libcollection-devel" arch="i686">
  <version epoch="0" ver="0.6.2" rel="13.el6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-11" date="1401796800">- Do not package built objects in dhash-devel
- Fix NVR in the previous changelog entry
- Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-12" date="1474977600">- Related: rhbz#1377213 - ding-libs don't parse lines without an equal sign</changelog>
  <changelog author="Michal Zidek &lt;mzidek@redhat.com&gt; - 0.4.0-13" date="1518091200">- Resolves: rhbz#1538061 - sssd/libini_config" cannot parse configuration file
                           with line longer than 5102</changelog>
</package>
<package pkgid="5bbc01fe12b11dcaff88c84555839fa0d8ced7475befb2ef0645fe82c53d72fa" name="libcurl" arch="i686">
  <version epoch="0" ver="7.19.7" rel="53.el6_9"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-51" date="1452859200">- SSH: make CURLOPT_SSH_PUBLIC_KEYFILE treat "" as NULL (#1260742)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-52" date="1454068800">- fix a bug in DNS caching code that causes a memory leak (#1302893)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-53" date="1488888000">- treat Negotiate authentication as connection-oriented (CVE-2017-2628)</changelog>
</package>
<package pkgid="b723bd289740d91c37ead4ad92e9ee01d201e59e0d10944afff717028d913729" name="libcurl-devel" arch="i686">
  <version epoch="0" ver="7.19.7" rel="53.el6_9"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-51" date="1452859200">- SSH: make CURLOPT_SSH_PUBLIC_KEYFILE treat "" as NULL (#1260742)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-52" date="1454068800">- fix a bug in DNS caching code that causes a memory leak (#1302893)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-53" date="1488888000">- treat Negotiate authentication as connection-oriented (CVE-2017-2628)</changelog>
</package>
<package pkgid="ede915479152cf110a58d829c14cb9b91d3c575fedaba1bdbb9e5879ce17401b" name="libdhash" arch="i686">
  <version epoch="0" ver="0.4.3" rel="13.el6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-11" date="1401796800">- Do not package built objects in dhash-devel
- Fix NVR in the previous changelog entry
- Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-12" date="1474977600">- Related: rhbz#1377213 - ding-libs don't parse lines without an equal sign</changelog>
  <changelog author="Michal Zidek &lt;mzidek@redhat.com&gt; - 0.4.0-13" date="1518091200">- Resolves: rhbz#1538061 - sssd/libini_config" cannot parse configuration file
                           with line longer than 5102</changelog>
</package>
<package pkgid="af8bc0fad701bbf1c52b18aaabe7cb47ded7d5fb465b7a00921f15480b287413" name="libdhash-devel" arch="i686">
  <version epoch="0" ver="0.4.3" rel="13.el6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-11" date="1401796800">- Do not package built objects in dhash-devel
- Fix NVR in the previous changelog entry
- Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-12" date="1474977600">- Related: rhbz#1377213 - ding-libs don't parse lines without an equal sign</changelog>
  <changelog author="Michal Zidek &lt;mzidek@redhat.com&gt; - 0.4.0-13" date="1518091200">- Resolves: rhbz#1538061 - sssd/libini_config" cannot parse configuration file
                           with line longer than 5102</changelog>
</package>
<package pkgid="b743e8450c88b270fbba3511486c873722199d4142d196195afd96417c4cc16e" name="libdrm" arch="i686">
  <version epoch="0" ver="2.4.65" rel="2.el6"/>
  <changelog author="J&#xE9;r&#xF4;me Glisse &lt;jglisse@redhat.com&gt; 2.4.59-2" date="1424088000">- fix covscan issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 2.4.65-1" date="1447675200">- libdrm 2.4.65</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 2.4.65-2" date="1454587200">- Add more Skylake PCI IDs</changelog>
</package>
<package pkgid="1148dc0813a83ac46909b98b22ab780628e2ada944aa769c7e7515e3eaa11a34" name="libdrm-devel" arch="i686">
  <version epoch="0" ver="2.4.65" rel="2.el6"/>
  <changelog author="J&#xE9;r&#xF4;me Glisse &lt;jglisse@redhat.com&gt; 2.4.59-2" date="1424088000">- fix covscan issue</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 2.4.65-1" date="1447675200">- libdrm 2.4.65</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 2.4.65-2" date="1454587200">- Add more Skylake PCI IDs</changelog>
</package>
<package pkgid="b16d1dc786ac3609059f48d5009bcdf26ce4ec148e07fd8c40fbcc90ffc4bd7f" name="libepoxy" arch="i686">
  <version epoch="0" ver="1.2" rel="3.el6"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Lyude &lt;cpaul@redhat.com&gt; 1.2-3" date="1452513600">- Fix some issues with the RHEL6 backport that caused headers to be generated
  incorrectly</changelog>
</package>
<package pkgid="6b93f9aa48711920a991339f8a125534638754bdb9c6c8e756c618f7fdb9959e" name="libepoxy-devel" arch="i686">
  <version epoch="0" ver="1.2" rel="3.el6"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Lyude &lt;cpaul@redhat.com&gt; 1.2-3" date="1452513600">- Fix some issues with the RHEL6 backport that caused headers to be generated
  incorrectly</changelog>
</package>
<package pkgid="fd97fabaddebacd5760e7459f731528d0c67345d9e8b6017062e2cb3032fcf4b" name="libevdev" arch="i686">
  <version epoch="0" ver="1.4.5" rel="2.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.4.4-1" date="1441108800">- libevdev 1.4.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.4.5-1" date="1447243200">- libevdev 1.4.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.4.5-2" date="1450785600">- Fix coverity warnings
- Fix a potential race condition when checking uinput device's syspath</changelog>
</package>
<package pkgid="eb07f6a9e0e3b0e8191f7462ce10218d03c3380706a68d568a5e9d6d64367906" name="libevdev-devel" arch="i686">
  <version epoch="0" ver="1.4.5" rel="2.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.4.4-1" date="1441108800">- libevdev 1.4.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.4.5-1" date="1447243200">- libevdev 1.4.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.4.5-2" date="1450785600">- Fix coverity warnings
- Fix a potential race condition when checking uinput device's syspath</changelog>
</package>
<package pkgid="2f50b9ca168e0b339f818bfe1d80ee1a84009e9ea6f3618fad017d7edbc071f1" name="libevdev-utils" arch="i686">
  <version epoch="0" ver="1.4.5" rel="2.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.4.4-1" date="1441108800">- libevdev 1.4.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.4.5-1" date="1447243200">- libevdev 1.4.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.4.5-2" date="1450785600">- Fix coverity warnings
- Fix a potential race condition when checking uinput device's syspath</changelog>
</package>
<package pkgid="ace0d218fe2af9d4388e16cd74e56407fc84d7449c4734e5083f896cec0965a3" name="libexif" arch="i686">
  <version epoch="0" ver="0.6.21" rel="6.el6_10"/>
  <changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 0.6.16-4.1" date="1259582400">- Rebuilt for RHEL 6</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.21-5" date="1346932800">- Update to version 0.6.21 fixing many bugs and CVEs
- Remove upstreamed patches
- Resolves: #839916</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.21-6" date="1591272000">- Add patch for CVE-2020-13112
- Resolves: #1840948</changelog>
</package>
<package pkgid="9879765aaf062b70cd05712af8a56585fe8b7183b876064046e3b52a00fb039b" name="libexif-devel" arch="i686">
  <version epoch="0" ver="0.6.21" rel="6.el6_10"/>
  <changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 0.6.16-4.1" date="1259582400">- Rebuilt for RHEL 6</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.21-5" date="1346932800">- Update to version 0.6.21 fixing many bugs and CVEs
- Remove upstreamed patches
- Resolves: #839916</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.21-6" date="1591272000">- Add patch for CVE-2020-13112
- Resolves: #1840948</changelog>
</package>
<package pkgid="7b45e6ed65eefc24a22f1b1175b86116aeb8c6cfac6a151808dcd41946367412" name="libgcrypt" arch="i686">
  <version epoch="0" ver="1.4.5" rel="12.el6_8"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.5-10" date="1333627200">- Add GCRYCTL_SET_ENFORCED_FIPS_FLAG command</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.5-11" date="1381406400">- fix CVE-2013-4242 GnuPG/libgcrypt susceptible to cache side-channel attack</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.4.5-12" date="1477396800">- fix CVE-2016-6313 - predictable PRNG output (#1366105)</changelog>
</package>
<package pkgid="04234acdc46b31bf7c556d0d525a578e00c1c7f0190a67d46b6923ceb53b49fe" name="libgcrypt-devel" arch="i686">
  <version epoch="0" ver="1.4.5" rel="12.el6_8"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.5-10" date="1333627200">- Add GCRYCTL_SET_ENFORCED_FIPS_FLAG command</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.4.5-11" date="1381406400">- fix CVE-2013-4242 GnuPG/libgcrypt susceptible to cache side-channel attack</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.4.5-12" date="1477396800">- fix CVE-2016-6313 - predictable PRNG output (#1366105)</changelog>
</package>
<package pkgid="9f6dd5d39417b489153c66e23c5aa4fc33766f5c6346715033feb549ce1bead0" name="libicu" arch="i686">
  <version epoch="0" ver="4.2.1" rel="15.el6_10"/>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 4.2.1-13" date="1448020800">- Resolves: rhbz#674328 fix freeserif crash</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 4.2.1-14" date="1456920000">- Resolves: rhbz#1247977 add (x86-32) to Requires for multi-arch systems</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.2.1-15" date="1583928000">- Apply icu.13634.integer.overflow.patch
- Apply icu.20958.segv.mapper.patch
- Resolves: rhbz#1809876</changelog>
</package>
<package pkgid="04b271467d8f55f0a0dd1dd8140c1339c5cf90defa0d44599d795095deac8b04" name="libicu-devel" arch="i686">
  <version epoch="0" ver="4.2.1" rel="15.el6_10"/>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 4.2.1-13" date="1448020800">- Resolves: rhbz#674328 fix freeserif crash</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 4.2.1-14" date="1456920000">- Resolves: rhbz#1247977 add (x86-32) to Requires for multi-arch systems</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.2.1-15" date="1583928000">- Apply icu.13634.integer.overflow.patch
- Apply icu.20958.segv.mapper.patch
- Resolves: rhbz#1809876</changelog>
</package>
<package pkgid="eb4363fa5c07c028aa3ef1c29c7b7b76c301338ea9ca9ce73eb140cceef386e0" name="libicu-doc" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="15.el6_10"/>
  <changelog author="Caolan McNamara &lt;caolanm@redhat.com&gt; - 4.2.1-13" date="1448020800">- Resolves: rhbz#674328 fix freeserif crash</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 4.2.1-14" date="1456920000">- Resolves: rhbz#1247977 add (x86-64) to Requires for multi-arch systems</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 4.2.1-15" date="1583928000">- Apply icu.13634.integer.overflow.patch
- Apply icu.20958.segv.mapper.patch
- Resolves: rhbz#1809876</changelog>
</package>
<package pkgid="01cef74903ff483de6c4500b261f04a95713f0c0d2bfa1bc22703ba6c76c272e" name="libini_config" arch="i686">
  <version epoch="0" ver="1.1.0" rel="13.el6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-11" date="1401796800">- Do not package built objects in dhash-devel
- Fix NVR in the previous changelog entry
- Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-12" date="1474977600">- Related: rhbz#1377213 - ding-libs don't parse lines without an equal sign</changelog>
  <changelog author="Michal Zidek &lt;mzidek@redhat.com&gt; - 0.4.0-13" date="1518091200">- Resolves: rhbz#1538061 - sssd/libini_config" cannot parse configuration file
                           with line longer than 5102</changelog>
</package>
<package pkgid="768cab28447cc0e6b09607f85bb9d3ec386b76cd70112a4a3df10495c8922323" name="libini_config-devel" arch="i686">
  <version epoch="0" ver="1.1.0" rel="13.el6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-11" date="1401796800">- Do not package built objects in dhash-devel
- Fix NVR in the previous changelog entry
- Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-12" date="1474977600">- Related: rhbz#1377213 - ding-libs don't parse lines without an equal sign</changelog>
  <changelog author="Michal Zidek &lt;mzidek@redhat.com&gt; - 0.4.0-13" date="1518091200">- Resolves: rhbz#1538061 - sssd/libini_config" cannot parse configuration file
                           with line longer than 5102</changelog>
</package>
<package pkgid="db4339a6bd7e0549570f85333690eb589ea00193d5158566d9572898e5375543" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="b2ea9419477416c827a1455ddf43b38cfc856557241fe08e740f1831b3cdf329" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="555a93797c152ba2d9fb1201bd9c48c6facaa9642390ad8c81b5d39a5aff5125" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="e7addd4a7e53765d1a51539fc7cd2d74ab19a36567a892b16f1fcf86db60f701" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="171e25c270bbb6112a18012279302cd64e268a83a061a2b4b4921396de0ec1f7" name="libipa_hbac-python" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="021e97eedf82747d7531748525707588a8ba698de61cc0994cc5325a48c6412c" name="libldb" arch="i686">
  <version epoch="0" ver="1.1.13" rel="3.el6_7.1"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-2" date="1352203200">- resolves: rhbz#873422 - LDB 1.1.13 exports improper ABI</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3" date="1352203201">- use the proper %patch stanza to make rpmdiff happy
- related: rhbz#873422 - LDB 1.1.13 exports improper ABI</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3.1" date="1450094400">- Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                           in Samba LDAP server [rhel-7.2.z]
- Remove the patch from the previous commit, it doesn't fix a remotely
  eploitable issue. Add patches from upstream #11636 instead.</changelog>
</package>
<package pkgid="00ffad3e228a5e9e337716ffef80468b03db443c6830e152f694317de66905b1" name="libldb" arch="i686">
  <version epoch="0" ver="1.1.25" rel="2.el6_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3.1" date="1450094400">- Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                           in Samba LDAP server [rhel-7.2.z]
- Remove the patch from the previous commit, it doesn't fix a remotely
  eploitable issue. Add patches from upstream #11636 instead.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459771200">- Rebase to upstream 1.1.25
- Related: rhbz#1322688</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-2" date="1459771201">- Fix the python-ldb requires
- Related: rhbz#1322688</changelog>
</package>
<package pkgid="0e99e9c30540f8e386555da338f5dc70422723d8c04e37606ee9b41812d77be1" name="libldb-devel" arch="i686">
  <version epoch="0" ver="1.1.13" rel="3.el6_7.1"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-2" date="1352203200">- resolves: rhbz#873422 - LDB 1.1.13 exports improper ABI</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3" date="1352203201">- use the proper %patch stanza to make rpmdiff happy
- related: rhbz#873422 - LDB 1.1.13 exports improper ABI</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3.1" date="1450094400">- Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                           in Samba LDAP server [rhel-7.2.z]
- Remove the patch from the previous commit, it doesn't fix a remotely
  eploitable issue. Add patches from upstream #11636 instead.</changelog>
</package>
<package pkgid="e84bb62900bc3005a44fa30ffc8f830529fcd156ef7b461091fddd46a541e052" name="libldb-devel" arch="i686">
  <version epoch="0" ver="1.1.25" rel="2.el6_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3.1" date="1450094400">- Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                           in Samba LDAP server [rhel-7.2.z]
- Remove the patch from the previous commit, it doesn't fix a remotely
  eploitable issue. Add patches from upstream #11636 instead.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459771200">- Rebase to upstream 1.1.25
- Related: rhbz#1322688</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-2" date="1459771201">- Fix the python-ldb requires
- Related: rhbz#1322688</changelog>
</package>
<package pkgid="f635c88959ef8d0aaaa62809764178398025409a2ec98264f8faa4afbe63fa90" name="libnl3" arch="i686">
  <version epoch="0" ver="3.2.21" rel="8.el6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.2.21-6" date="1395403200">- fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
- fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
- fix printing in nl_msec2str for whole seconds
- don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
- backport nl_has_capability function</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.2.21-7" date="1398772800">- Add local header file linux/can/netlink.h to build on rhel-6</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.2.21-8" date="1448193600">- properly return NLE_OPNOTSUPP on rtnl_link_get_kernel() failure (rh #1168915)</changelog>
</package>
<package pkgid="7a26d52442ffc746114c34525099543456633de02702d9dedd5573e8e2767c5d" name="libnl3-cli" arch="i686">
  <version epoch="0" ver="3.2.21" rel="8.el6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.2.21-6" date="1395403200">- fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
- fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
- fix printing in nl_msec2str for whole seconds
- don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
- backport nl_has_capability function</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.2.21-7" date="1398772800">- Add local header file linux/can/netlink.h to build on rhel-6</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.2.21-8" date="1448193600">- properly return NLE_OPNOTSUPP on rtnl_link_get_kernel() failure (rh #1168915)</changelog>
</package>
<package pkgid="74d44d151bae34939111c896eef2902edb8b79748fe659ec14c1fadc969f43dc" name="libnl3-devel" arch="i686">
  <version epoch="0" ver="3.2.21" rel="8.el6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.2.21-6" date="1395403200">- fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
- fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
- fix printing in nl_msec2str for whole seconds
- don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
- backport nl_has_capability function</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.2.21-7" date="1398772800">- Add local header file linux/can/netlink.h to build on rhel-6</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.2.21-8" date="1448193600">- properly return NLE_OPNOTSUPP on rtnl_link_get_kernel() failure (rh #1168915)</changelog>
</package>
<package pkgid="2f48d0601c21f30e55565fb04229b00f0542d31a52da0b6f6d04ff84b4e379ee" name="libnl3-doc" arch="i686">
  <version epoch="0" ver="3.2.21" rel="8.el6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.2.21-6" date="1395403200">- fix rtnl_link_get_stat() for IPSTATS_MIB_* after kernel API breakage
- fix parsing IFLA_PROTINFO which broke on older kernels (rh #1062533)
- fix printing in nl_msec2str for whole seconds
- don't reset route scope in rtnl_route_build_msg if set to RT_SCOPE_NOWHERE
- backport nl_has_capability function</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.2.21-7" date="1398772800">- Add local header file linux/can/netlink.h to build on rhel-6</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.2.21-8" date="1448193600">- properly return NLE_OPNOTSUPP on rtnl_link_get_kernel() failure (rh #1168915)</changelog>
</package>
<package pkgid="d1d62919e0d32969404a6212e688bdcfe9f9063d722b99af9dab7673fa0ca818" name="libntirpc" arch="i686">
  <version epoch="0" ver="1.4.3" rel="4.el6"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; 1.4.3-2" date="1494244800">- Resolves: rhbz#1448862</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; 1.4.3-3" date="1494244801">- Resolves: rhbz#1448862, rhgs-3.2</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; 1.4.3-4" date="1494244802">- Resolves: rhbz#1448862, rhgs-3.2, again (rpmdiff)</changelog>
</package>
<package pkgid="6db84c38548e80079fcbc259fb45bd999980f5d82cddf3aea8bda63ccace1ce5" name="libntirpc-devel" arch="i686">
  <version epoch="0" ver="1.4.3" rel="4.el6"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; 1.4.3-2" date="1494244800">- Resolves: rhbz#1448862</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; 1.4.3-3" date="1494244801">- Resolves: rhbz#1448862, rhgs-3.2</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; 1.4.3-4" date="1494244802">- Resolves: rhbz#1448862, rhgs-3.2, again (rpmdiff)</changelog>
</package>
<package pkgid="72b48cfdcda7f1099ec1cc389bc25de0b447180d842933ead9c26fc0a9b45f92" name="libpath_utils" arch="i686">
  <version epoch="0" ver="0.2.1" rel="13.el6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-11" date="1401796800">- Do not package built objects in dhash-devel
- Fix NVR in the previous changelog entry
- Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-12" date="1474977600">- Related: rhbz#1377213 - ding-libs don't parse lines without an equal sign</changelog>
  <changelog author="Michal Zidek &lt;mzidek@redhat.com&gt; - 0.4.0-13" date="1518091200">- Resolves: rhbz#1538061 - sssd/libini_config" cannot parse configuration file
                           with line longer than 5102</changelog>
</package>
<package pkgid="4f1f22ca45e0cb670ff892f0404086918ffea02ccc4624b95845ed226af56d50" name="libpath_utils-devel" arch="i686">
  <version epoch="0" ver="0.2.1" rel="13.el6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-11" date="1401796800">- Do not package built objects in dhash-devel
- Fix NVR in the previous changelog entry
- Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-12" date="1474977600">- Related: rhbz#1377213 - ding-libs don't parse lines without an equal sign</changelog>
  <changelog author="Michal Zidek &lt;mzidek@redhat.com&gt; - 0.4.0-13" date="1518091200">- Resolves: rhbz#1538061 - sssd/libini_config" cannot parse configuration file
                           with line longer than 5102</changelog>
</package>
<package pkgid="5fbbfa564e70243903ce88629be9faf834c205e72ebf8c65505a4c9c492dc744" name="libpng" arch="i686">
  <version epoch="2" ver="1.2.49" rel="2.el6_7"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.48-1" date="1331467200">- Update to libpng 1.2.48, for minor security issues (CVE-2011-3045)
Resolves: #801664</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.49-1" date="1334750400">- Update to libpng 1.2.49, for minor security issues (CVE-2011-3048)
Resolves: #812715</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 2:1.2.49-2" date="1448280000">- Security fix for CVE-2015-7981 and CVE-2015-8126
- Resolves: #1283572</changelog>
</package>
<package pkgid="c23ff52e73275dc9be07d998a028bca6effe2f81437601376170a35c4b3964c5" name="libpng-devel" arch="i686">
  <version epoch="2" ver="1.2.49" rel="2.el6_7"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.48-1" date="1331467200">- Update to libpng 1.2.48, for minor security issues (CVE-2011-3045)
Resolves: #801664</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.49-1" date="1334750400">- Update to libpng 1.2.49, for minor security issues (CVE-2011-3048)
Resolves: #812715</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 2:1.2.49-2" date="1448280000">- Security fix for CVE-2015-7981 and CVE-2015-8126
- Resolves: #1283572</changelog>
</package>
<package pkgid="13361f244a0fdd4211494e7622963c8b2e5084ea61cbba58c12b4a7ac171f070" name="libpng-static" arch="i686">
  <version epoch="2" ver="1.2.49" rel="2.el6_7"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.48-1" date="1331467200">- Update to libpng 1.2.48, for minor security issues (CVE-2011-3045)
Resolves: #801664</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 2:1.2.49-1" date="1334750400">- Update to libpng 1.2.49, for minor security issues (CVE-2011-3048)
Resolves: #812715</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 2:1.2.49-2" date="1448280000">- Security fix for CVE-2015-7981 and CVE-2015-8126
- Resolves: #1283572</changelog>
</package>
<package pkgid="d71021432eb17e2ef574e7cb0590d839d20d79087658c114dbf8b7067cffa2b1" name="libref_array" arch="i686">
  <version epoch="0" ver="0.1.4" rel="13.el6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-11" date="1401796800">- Do not package built objects in dhash-devel
- Fix NVR in the previous changelog entry
- Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-12" date="1474977600">- Related: rhbz#1377213 - ding-libs don't parse lines without an equal sign</changelog>
  <changelog author="Michal Zidek &lt;mzidek@redhat.com&gt; - 0.4.0-13" date="1518091200">- Resolves: rhbz#1538061 - sssd/libini_config" cannot parse configuration file
                           with line longer than 5102</changelog>
</package>
<package pkgid="5aef64408024aee64de86cf459f7a6b18b054f90140844252116e5655fadb7e8" name="libref_array-devel" arch="i686">
  <version epoch="0" ver="0.1.4" rel="13.el6"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-11" date="1401796800">- Do not package built objects in dhash-devel
- Fix NVR in the previous changelog entry
- Related: rhbz#1069287 - Rebase ding-libs to latest version in 6.6</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.4.0-12" date="1474977600">- Related: rhbz#1377213 - ding-libs don't parse lines without an equal sign</changelog>
  <changelog author="Michal Zidek &lt;mzidek@redhat.com&gt; - 0.4.0-13" date="1518091200">- Resolves: rhbz#1538061 - sssd/libini_config" cannot parse configuration file
                           with line longer than 5102</changelog>
</package>
<package pkgid="f010f33f7c239107289afc57ba1a727114df6ac8f0fcf11136ef9a0de49b19af" name="librelp" arch="i686">
  <version epoch="0" ver="1.2.7" rel="3.el6_9.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 1.2.7-2" date="1401710400">- add a patch to prevent a segfault when using TCP KEEPALIVE
  resolves: #966974</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 1.2.7-3" date="1401710401">- add patches to resolve issues reported by Coverity
  resolves: #966974</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.7-3.1" date="1522238400">- fixed CVE-2018-1000140
- resolved: rhbz#1561230</changelog>
</package>
<package pkgid="9acda4ddbc02530ecfbc5e7a779fbf429b2fd0ea3ae728f8a85561e2d3fcff12" name="librelp-devel" arch="i686">
  <version epoch="0" ver="1.2.7" rel="3.el6_9.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 1.2.7-2" date="1401710400">- add a patch to prevent a segfault when using TCP KEEPALIVE
  resolves: #966974</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 1.2.7-3" date="1401710401">- add patches to resolve issues reported by Coverity
  resolves: #966974</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.7-3.1" date="1522238400">- fixed CVE-2018-1000140
- resolved: rhbz#1561230</changelog>
</package>
<package pkgid="487243b158c2e3cfaecbbedbdd6ebb5c46aa9c98c6a54b6675c459baac01d8a1" name="libreoffice" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="9377f2a8df84a8ddd65463a0c5de96793912c22704da6307901e6b95ee3874d0" name="libreoffice" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="92733745b32615067d8474bf2bf0b1c82096768b0e9cfe1d886b9899f2665aff" name="libreoffice" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="e515e361d418ddb439b18590a518a0540ccc1205852241f3b28ebd43d43e7afe" name="libreoffice-base" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="506acad8976565e077046af2e7d2889598ffc2531fbfb6b5890937f83c41ba3c" name="libreoffice-base" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="b1916d10e76b2031614dbef19548fd340623fcbce3befe3306dffb694d069899" name="libreoffice-base" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="5225450c152090b8215993f146f31db340bd71c89e84bad9e6a4891bf4639203" name="libreoffice-bsh" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="831e9b18a7a65f37281dd3ed927fff65240e1a3d4c76a08237cd94c022023af5" name="libreoffice-bsh" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="b0c27db0a357f92b6197acd0ea7fb93a1a88d1d95d930229295282c74d96985b" name="libreoffice-bsh" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="c91f772a9310c63ee4b3563c419445aa745f2c107ad4c91fa6fc2eb47d55c756" name="libreoffice-calc" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="3f3bff1d76250aebcc4f424919bcf61952e4bcc80ffdd47e5145995a096c4ae1" name="libreoffice-calc" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="995292e114e786dc17f78f1ec49085f215c34a5c99a062ad366f0e66e1a543e4" name="libreoffice-calc" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="6b79b3a241a906477316b1e4c3eb9d211b8edf64f6bb30c34e8c6bdef2537f09" name="libreoffice-core" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="4a65c3bc1c624c899f7d9500aefe352c0208a661b6ea7936208b3ea468a75478" name="libreoffice-core" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="c5b8722f8eee0eacd8500041f7ca01b4854511b529134f4082fdeac2906eff36" name="libreoffice-core" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="8021b1e9559439532cd22e5e645409c0154bd2fc4403b83ea2c5daf316384a2a" name="libreoffice-draw" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="ec95e2ad8d67a5379dc3a19717d7807ed9a31a5c15498d2ad70f3264dcded3b5" name="libreoffice-draw" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="0950ab181379d509c224df47845f534faae321025e8962a5b2efa2467d1b1703" name="libreoffice-draw" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="e8b6a729aa3b34497c10a4f6e2d8ddb8db02396f8edd73e396e00dd9e6d6e728" name="libreoffice-emailmerge" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="df0792c572cbaef75aad281b1fa620567774cd8676ffd42e968a25b798451c73" name="libreoffice-emailmerge" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="c7f53d3f56d86c332efa49058ab2908569eb9e09c0565a97ebf79c6c5a1477f2" name="libreoffice-emailmerge" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="d2119cf0df46e8758af1efff49340edf3cc5cd8f8488019df0f91c064f362e79" name="libreoffice-filters" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="ec5bfaf6aafe709e89451e8bb88d6095e4706c0c0538344be71203b559a36ebc" name="libreoffice-filters" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="4f64458f063eaa30a43ca5332a20d93d68058ee5267dd68de1ce31d9502ef80b" name="libreoffice-filters" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="3218a9d13d7f147c81543a0ef4bb1c1bfe8005f7e9a6e26973c3c2d0de7b2043" name="libreoffice-gdb-debug-support" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="7b3afd43e8fb2ee32149e9c20afd31b989e127434cb0ede1290c4e82ff40bd27" name="libreoffice-gdb-debug-support" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="bfb1bc193f33dd22c13450c5e948a53560880519420198b9c326ae1112c49248" name="libreoffice-gdb-debug-support" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="198d2a311237a2ae4d50e7a7f0ab80a5755ae7cf9ce4005fa6eb4cf24e00682c" name="libreoffice-glade" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="9a80c906e2cd1e8f7ae5471346e70a27b5ca52f4818d4d22a7b3ee9dacb82cff" name="libreoffice-glade" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="44011b279e699f7af2551db2ea402f935fd5154aac0679709051bbd9384919ff" name="libreoffice-glade" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="ef4c1803db99da5a3d044ac002d34b252b285598be535360913decfe607c232a" name="libreoffice-graphicfilter" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="0df36ad3c998e237371ef76b63e18d071eb3842339d5b43df7f7894b1be5bcae" name="libreoffice-graphicfilter" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="46a5f06fb2e2f1878d810761d6469e4da9c0fa1f263dfb55dd3a8d64b60bcbd5" name="libreoffice-graphicfilter" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="77942c9c63f2a69f3b2887779471eec71da4494429e9e0a14a1c5c4e4fe3db6e" name="libreoffice-headless" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="3a9aa3d3c76550b319e5d9e51697b8063717c15dd7debfe9d3abb12e700d7d74" name="libreoffice-headless" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="b9e1c7644ab7882b251063cced0cc0de4dd50e1e14acd262918acd2577bf671c" name="libreoffice-headless" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="3fcbae18b389ae5f043550e51d0a9c24005c01dd9aea3808ec0a4dd571562144" name="libreoffice-impress" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="c389d05be65ae587bcdfb95391960ce02833cc9918e328368c84b7c8011e9343" name="libreoffice-impress" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="529382e8fd8607245e88a4011e5b69da5617e43b6c13943caa1e18bbeff6bba6" name="libreoffice-impress" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="9240c3903f472a7a3ae184ccfbd8816fccabaae34ab5ae89968e4fd9f9899882" name="libreoffice-langpack-af" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="d19d7a3ea59106cb0de76167c421c1d5ef84b5c6e3e75ea47865de5faf8a9742" name="libreoffice-langpack-af" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="be68a6967b609c2c0cc519895ec74de2437986812d2b67bc18c6d7945f77825d" name="libreoffice-langpack-af" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="5a5a29cb4f5d9ac17ef4919ac8627c4ac4a1b966fb89c92a052fa1e9e94b79f3" name="libreoffice-langpack-ar" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="e243a34f6f2161bfd9b25568f27476951e429db9a7b7f4f5362c93806bd9b2f0" name="libreoffice-langpack-ar" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="206b8f7ed71769391c2e2535ca3767d38c9432cbc1f6e6e206b6a81b3914deaf" name="libreoffice-langpack-ar" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="44c4dde9a6707d8ea8925e78c0e986a826cbb22e4d10a7627c23fe313928dca1" name="libreoffice-langpack-as" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="89c8a06dc022745eab2a76f29427272193aca72f78c943a608cd6506ec2ef9f3" name="libreoffice-langpack-as" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="a4962286cc9249773d62763531aae47e39ee59dcb0d8a9bc58e691262ce20375" name="libreoffice-langpack-as" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="838ef435715b41e6552d8cc327ee85f1086cde93eb9a9ed42e76a8480b460c8d" name="libreoffice-langpack-bg" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="35e6aad0390d3ba1ce60f8caedb9b5ce91ba067de6a0ba3909ed92e08d572c86" name="libreoffice-langpack-bg" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="b432e5f12ca47b09b965e77a0dd4618f98635d48aedf38af78bc58ef5ec5d287" name="libreoffice-langpack-bg" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="0d3401d4704fd5e5834a7f99bcb16eed6ce5c5499b49102c3db2dc5cad71ac78" name="libreoffice-langpack-bn" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="4d902e97a51c8e4be2eaf927724856129c52bc87c25f959d024f6504ae80e7f6" name="libreoffice-langpack-bn" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="a7d88246ecb9a38f792abd67dcaef6e8ed54d1b1abb87d5635ed1d8ca535c4af" name="libreoffice-langpack-bn" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="91c1513ebb3ef3ac41d7c38325334f26d9ba92c0b5c8a16c360525c0a1476a6d" name="libreoffice-langpack-ca" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="3eb28393aa22bf34c799fa59d19c0cf0d3aa055952f57518910cbc6765a8a0b8" name="libreoffice-langpack-ca" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="663bf89328b71f5796b5c912442077bfd52f795fee3eee279c9355b97b0e5bde" name="libreoffice-langpack-ca" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="cf7e11062e914af1420159e874e02efb38dd60695b1d54108c5c02b18065e008" name="libreoffice-langpack-cs" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="111b8373fde085efebfe58ced1fc2d66f26dd3240ad8fcf6ca067176a71cb72f" name="libreoffice-langpack-cs" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="c11aef4980a4827b42fd979f7e0d991ee4bb623a97980e3b3414644fb5909d36" name="libreoffice-langpack-cs" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="30a664c58f289bf438955c195e3f4262644565049018f0dca62ac08d7767015d" name="libreoffice-langpack-cy" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="75b47e0786a13523c8769b40a92e9fd9d04fe60cf6f94b3dd43908f68706e2f0" name="libreoffice-langpack-cy" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="2ab06f8b8dc18515478dec8bbda31857e7d2371fd2fb35c38ebbe0b87c150945" name="libreoffice-langpack-cy" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="9e16fbd9c1afeb8ce0faf9410ca640d372d7c8c171e32763c7a280e0062a5236" name="libreoffice-langpack-da" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="d06c03f7d157e1ed60de245b132ec378c643514dca5391575d57226353d55b5f" name="libreoffice-langpack-da" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="6d310df7505e6b473bfd5f7ddb875b81583a51847a72ebbd039d214662aee654" name="libreoffice-langpack-da" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="948ec6209f2c5a074663c068bd4d5b71b3d5570ba1841201ea7092929a2cd623" name="libreoffice-langpack-de" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="22ac22ffe71df390855a52b3cd2d80372039efd456e923495445f567ee660a4c" name="libreoffice-langpack-de" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="12bccd3f93a6baeb209c7eb58eb7b9691c219083c17450b3317a246a5ee0bcd7" name="libreoffice-langpack-de" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="05626322a0e72929c52f6a289846cd23246231df946767fb518d967594369d33" name="libreoffice-langpack-dz" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="29754b09cfa04fdda6c6b4d720123b0a7048b363d33a891ecfab21b563564e50" name="libreoffice-langpack-dz" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="024fa7aa51d32cff79e50a1c06c62f1b77dc16a717e8b5ef24aa692b8bcda95a" name="libreoffice-langpack-dz" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="63326dea27becc139fda15a6c96740e8078e0817ad4079991a9b1ff31030eb39" name="libreoffice-langpack-el" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="1f8ad3c7e05155b677963bfeaf63ee76218197ff2897190d059906f7753ea9ed" name="libreoffice-langpack-el" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="40e65c5e3d5182f493dfe86560feb11f53042dd0ea731c2c329f875d5a24af6a" name="libreoffice-langpack-el" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="5c71f5423367ecff7d98362a87bc622b905480bc1f628d56ae4e323a3c94c04d" name="libreoffice-langpack-en" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="97cc9544f72273ecccedf2605a6dc2a70e0345964ca8231d2c6afe17a9cff32b" name="libreoffice-langpack-en" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="8bc1b29f6258524e117fbd8032b92548ef95f6a20910d76c42f976c02b8f9c3f" name="libreoffice-langpack-en" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="e5660c1ef67a8de2cd3f311eeb8403f6cf8d09faab4305110fcc8d438d6c6b49" name="libreoffice-langpack-es" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="6749e90b47ef0dbc14f68f6b42c0225e133b0eced195f38dd368c9e6bd316130" name="libreoffice-langpack-es" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="b5d838eca3e8474bfe51b673d9de68fe3b5e559070d5efa8f05cdc1566844727" name="libreoffice-langpack-es" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="6de67c2282c280ed12f6e00de2640fa47d305b3e45c20b759e0e46b96939a91d" name="libreoffice-langpack-et" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="8ba11180c040b91f173febf2b6161c470499f713fd80ff7bced79dbf493408eb" name="libreoffice-langpack-et" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="efb2a028ca75efd09fd2f598dc181aed42bfa971b7aa40b11b5278c8c0e68ffe" name="libreoffice-langpack-et" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="8c2912cf39a212fd6805e062a5d24380011464a46ebd930d9780173c11419e83" name="libreoffice-langpack-eu" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="810a03b3ea1bd53d2bba51bd46689a557d2f83c2fa08307db41fa8b8472606cf" name="libreoffice-langpack-eu" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="a6e9c0eed8317aa17f91e01cda9c7b2ef2656ee05ef2754c705afa21b90cc050" name="libreoffice-langpack-eu" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="4982cdf1b98ca47d37319d813468171cc8848a6144d2fd9d03078f7e01ab73a2" name="libreoffice-langpack-fi" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="47752445b5ce6fffd2d54a9b3b89c4f5b9044870c6b83e957bfcca951cbbc5d2" name="libreoffice-langpack-fi" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="94139008223f4cf1661e7a42f9792c86ae3ea37db9b09c9ae407c4bfcbacf99d" name="libreoffice-langpack-fi" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="4444871512a4f874c35937fff76ec1c4eeb0827e40c9128bb155c0b3c72cf246" name="libreoffice-langpack-fr" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="5df27ce6fd66be699756b3039e2d7eb65f2e16408425f6833aeaddd858d00786" name="libreoffice-langpack-fr" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="3d2636b9b787cdb08563dae304adad61361b0ccddd9101bfcee4edf2e372387f" name="libreoffice-langpack-fr" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="f4068aaa21db7fb3cf54de0a5def6db8a39941cd0164694b18444dc3237103ba" name="libreoffice-langpack-ga" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="5c6f8413684576890bc98fff3a73b6d21b86d5b41ee2b35ef821128339a26c31" name="libreoffice-langpack-ga" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="af15f34516482826e0109fbffd9895eccfd303e5c411dade2b8a6fdfd2c2c1d5" name="libreoffice-langpack-ga" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="b57eb69cdf5666a676634e66d623a2e67651168e6360f67c1ce64c460aa9c9b0" name="libreoffice-langpack-gl" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="6ec6bdc9853be5ebb431c94f5d63087048b16509165d7dfc4d1b3018010a77ca" name="libreoffice-langpack-gl" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="471016054ba88d6cd28c3541a17aaecfb5e9c3894eb58777b769c4ad6ec4e0c5" name="libreoffice-langpack-gl" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="aaafe2088b31e708648aac20d3c62c25f6c02e6ca0986c5b1a0e11a2601f0fda" name="libreoffice-langpack-gu" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="f6e1a18fb10b7f8a2a8cf6bc61fe75af7c82e2c549780f828943a39154df6f5e" name="libreoffice-langpack-gu" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="fe6cd2ee01eff4e43d0755ee39fa2250336467fa1b06c4b49918ef215fb88ae0" name="libreoffice-langpack-gu" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="b7904f1a01b8ceae10bedb7659b2343152a7001eda2d47822ae36125d5a41b9a" name="libreoffice-langpack-he" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="4f68b571f6559763b3c1585463b3da983d0c47586ccf35467ef755a13cb8ea80" name="libreoffice-langpack-he" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="1d10e373f54838f93bcab4ece038948bb060e4d5c6beaca95efd74c0a6c574a0" name="libreoffice-langpack-he" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="1829b77396b34a17901973de38b77ae9eec74b93f3372392f1e00eacb731ef15" name="libreoffice-langpack-hi" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="8d598eeb756f0cbd541a87182f48312bf1a9a86c588c9b357a5dc7cfb826f543" name="libreoffice-langpack-hi" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="744fb93aacdf219e978ea0947242b64295f7225408d7489a5f10f07d44823c28" name="libreoffice-langpack-hi" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="02c2afbb16c1d6b46d8314ce19458c0267c121beb1b19bc2e4d3693c4fb6db67" name="libreoffice-langpack-hr" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="b80c3dbe83eccc5524940aefbce38ad1059e45c25732f1363e1492a13a27ef3c" name="libreoffice-langpack-hr" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="386ae18cc457056345e36119871b9b55e41cdd2b49ba75f7f4da276e4828b297" name="libreoffice-langpack-hr" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="eba668f9fd934358fbfd95afca5a6dc8ded54a8f11fb476f4fabce8bd1828c66" name="libreoffice-langpack-hu" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="b3fe4dcd5eb26538971160e0cf33d5ca3de2ba6cd230e0967061bcb2e3ae3d70" name="libreoffice-langpack-hu" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="867545533250dda3e51ecf38aff73b0cfe82a6e2401e38d96da0ed96278d3774" name="libreoffice-langpack-hu" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="9f6855167c3ce5b5c55d1fce88bfb2581d316f2af441ed4e93c2f4f6932d5608" name="libreoffice-langpack-it" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="5983f9da296f0adddd723fc74c3986e43eefeb3d1d9399d81bf2f4798d422a85" name="libreoffice-langpack-it" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="b1a51df76346478fa2ef61a6f9d0a17b5c5c7dd36ab412946409b80cbc3cbc68" name="libreoffice-langpack-it" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="360b529b1685bd43291557e4d4f51ae435a3ffd4d98af384566f8a804eca7476" name="libreoffice-langpack-ja" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="21fcf2d902eac9db1658f2a845121a8374cc4ffa72c90b901cb11ef7cc37bea4" name="libreoffice-langpack-ja" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="256145229df59b80f51ed907f2072c4f8bec6d9fd8b30638ac3d001e156544a8" name="libreoffice-langpack-ja" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="6f4e454d48b10224371d90599a2b015b7abb4a7a31231132abf84667e8178a79" name="libreoffice-langpack-kn" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="f6d8b0e34788696ca7fcde2561f8055f7455775e0e92539e4b6fdfd4c006ab20" name="libreoffice-langpack-kn" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="20df4e3bbe3478ad782ce79fb596808fb21af72a5d87ea537d59cc3a26d50ff1" name="libreoffice-langpack-kn" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="61eedbe130889a064e99a0d91096cb6c7daba0e46137d9d16108b25bfcedb221" name="libreoffice-langpack-ko" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="ab563e813d17c535475338a13249a1e7b782d0bee93b40500e9288e6aaaddcb5" name="libreoffice-langpack-ko" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="a3844b10204cbfa130abfa09fd489306bf07b6adfc011af134676aa5315c29cd" name="libreoffice-langpack-ko" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="af1d127df246a31129014a5d4a1a3e7bf962049c13d2299c3b278b6a0f0a55a5" name="libreoffice-langpack-lt" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="f82f926b1159de08d3ffd50fb3a235800b94f9326b510f8307bdb58a52afd1d9" name="libreoffice-langpack-lt" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="5d67a010dc0c8467774164842917cf48ec04f68997229a1d811a75b8cfd5d5f8" name="libreoffice-langpack-lt" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="4b8dc7c722a9cb8940801076ac25e85b34e63b629b1eaa2549bd7b1eb9867802" name="libreoffice-langpack-mai" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="8e1806ca0061348db2b7ed1b37fc86c011864ad0da2580941b7183931f1ec3cb" name="libreoffice-langpack-mai" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="bd83268090ed4685e400075b2917cf455ed417776a8ebff76a9ff53a748ced6a" name="libreoffice-langpack-mai" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="85172074c25c8a494d386b2b454001dcf9a1cd8fe88e3cab5219596cb142cec9" name="libreoffice-langpack-ml" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="e4e611cb58c411d76270264bfcbfd6552f8657500867f1383bc663e0ef47ea7f" name="libreoffice-langpack-ml" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="cf12113da45a81098858af30ffb8e80d3802557774b0aa1f91177feb4d998e44" name="libreoffice-langpack-ml" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="a905bf6af0aff6ae341ae7f274ca0393b47b080e877c039639c28f8c289f6894" name="libreoffice-langpack-mr" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="ec998a0873d2d3a3f8377794c1d90f85ab28700b6093f2d83e693af233839cdb" name="libreoffice-langpack-mr" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="25f3229607abcd9c98b676a9c5df6f2958f8f21315e5a66451435847c1c187cc" name="libreoffice-langpack-mr" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="c341ca3e4870d16fceb7e21580efdd5ce622ad57c30c76e8c0345c9879c30b0c" name="libreoffice-langpack-ms" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="c3be62d8426d3d79671c97576597ccba66bf1283edc5642589549826e3f3b243" name="libreoffice-langpack-ms" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="913b48ea5b67d4020722cbc1a15ca628f07ec0cf8de7c4c9f86a894a4bc017da" name="libreoffice-langpack-ms" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="2f0dbaafd6ae35d35453057dca81a5c62008cd6e12fe864a9cc898bdf1874eff" name="libreoffice-langpack-nb" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="29f89de220ce22ff4c05c3489e7a548449ff8bc8519bfe402d22acb87844e0bb" name="libreoffice-langpack-nb" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="c96b8fbcd54999bf971ad19a0175caca74c6cc5cda65f36e3011ca2b12f5cdb8" name="libreoffice-langpack-nb" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="c686d38d3229b9809b37cc6e7a943278cc1354ed9d9034128a7afc3a0a6c9589" name="libreoffice-langpack-nl" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="8470e50801dc9ba0a209f5cd7182c1c2764b69f1bfed3483107ee22e0bb710f0" name="libreoffice-langpack-nl" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="eac140e8cf22500d24c8411b822c663ffc55547d0b44c70053acb928dfb993e4" name="libreoffice-langpack-nl" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="3598e8b37bac90e41a869bb3cab9ef2735b41fce8cf5bc248daed708e9491bc6" name="libreoffice-langpack-nn" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="e30a4f6d6087a713aa2441d68e379280bf37de03eafb165d7530b0a7501a8114" name="libreoffice-langpack-nn" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="2ee73aab71ea96dd7469b26ae2be1df128cbff6a6eb4e6b09c184403d583ffe1" name="libreoffice-langpack-nn" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="8023cb9a8f1e4684c33c2ac5d59d7a0a068d2860162e2547cdcdecf6cf42dee4" name="libreoffice-langpack-nr" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="106270a7da6420b6735d7715f8457b598e2ca95481d07e17051392b8aa12117b" name="libreoffice-langpack-nr" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="d558c2645f4c241ce95aded9e72f6ba604edcb53c3c60656bd47c4de8f510510" name="libreoffice-langpack-nr" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="111bf1bdae5fd03ab78d5c87ff408ddca3dc795b9e9eb5614571d50778ff8b58" name="libreoffice-langpack-nso" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="c062fb74be32a4f63c712791373bdb489c9782bddc3042f4f85170da4497a679" name="libreoffice-langpack-nso" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="337e7012cc44f58eca846f9ed56d7a26dfe88909b527a7d93f31b611c10367ab" name="libreoffice-langpack-nso" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="79a20628d799cf78e8b0491dbcd7f62f4785095a133f4177d7238d61d3f6cbfa" name="libreoffice-langpack-or" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="f38709696b74c1e9a75fe76e43eefb2934dbe38e95d8ebc1db1abc90e6321154" name="libreoffice-langpack-or" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="67b1cda9ba58b696a41d98476fe0efdb9a4f243a8039c41aeffaa722dd030d6d" name="libreoffice-langpack-or" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="bc63fd1bcd54e195ed1775bacb52c396fcaa9e8ffc020fcff4c234a42513c46f" name="libreoffice-langpack-pa" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="a2a56141d757d0bc2f0ab1659564ac8099845919db93210202aff5f39e394ff1" name="libreoffice-langpack-pa" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="32ec33602fbe8442368cad3ff75bd5c4692cc339fc98b7a17baf8dbc3ccd5748" name="libreoffice-langpack-pa" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="75d076dd38342ebb3d7b02a49012284458071fbc1155441062fa8cdc4dba5351" name="libreoffice-langpack-pl" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="26183eb84140f030add069aaae4e805e3546163489b2064dce82a860427d82a5" name="libreoffice-langpack-pl" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="bd3beeccc300e5bf3488f2818757bd78fcf75e5f592e9e997f49a74045c20a93" name="libreoffice-langpack-pl" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="a38336de1bc6bfa910e058f59a5f3e64458e16ed11216d5a4cfb05f8f5defc84" name="libreoffice-langpack-pt-BR" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="e2a9ad44ff88c751a53e50bbc8c63f8ba0d0031bd16ba9a63e52513e224a5a34" name="libreoffice-langpack-pt-BR" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="25516d99278610e61c1a292e1e850c3fb85b8661404e0e5e29892e079cdc3de5" name="libreoffice-langpack-pt-BR" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="8a5fcd9bbd005a632ff32581ea2c36d34407093a9ca76ddddf3a02b55a5ca3a9" name="libreoffice-langpack-pt-PT" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="8963fd9f41cb62f119b31e361ed023cec73482e7dab4cb24aee7a143908dc6f0" name="libreoffice-langpack-pt-PT" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="fb023f05d767327b53cc0314a49fdf6eddd97456750c7d800c500f18e4a5d6f8" name="libreoffice-langpack-pt-PT" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="8c02ae475b15183180d25dfb0f27329ff53723a929de052a0af29de7e1615a30" name="libreoffice-langpack-ro" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="8d302f6f7073651770c31101bff8dbc9af60cac089993625f8baa83160d011fa" name="libreoffice-langpack-ro" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="2aa12189700ba359310dd5f8f6b76d34c67ef2fac2412cee4c066066acec1c9e" name="libreoffice-langpack-ro" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="1944101662e4b15939ede974be874aafbf3715524729ef6973314e2c4c6a450f" name="libreoffice-langpack-ru" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="43eed43736f55d5ddf07827a6a740dc35aea9d4d8f8d8a8b95f3600971d3f231" name="libreoffice-langpack-ru" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="6feb68c157a9cda83fc4cb9cf145acde9453a1e517792d566cf04b9da87fb562" name="libreoffice-langpack-ru" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="0d7970ccc88c754341e5311a4cebff3d41a5d671d6d16f832b61cd67496748d3" name="libreoffice-langpack-sk" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="3e9b2d48820ea7a025e61347111abf62cbf6d3b0d8e91019e43243d5a8bc5d02" name="libreoffice-langpack-sk" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="35dfeb61ea676c766938d08a5a30ac11b23eb4ab2ac91cf7fcc47db94ca00e70" name="libreoffice-langpack-sk" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="53e8b91f9c233f80df678ee5c09c91c2a8d9756138a57a46304cd239e95b1cfb" name="libreoffice-langpack-sl" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="be0fb4aca9a70dffd834beb3182142efae61a9fc1859a06a603ee81765c74b41" name="libreoffice-langpack-sl" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="537ad5628d85f12dccde04be1d8fc3dbc2ee4a5b6365b322c9f6e373446fcd09" name="libreoffice-langpack-sl" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="ad8d8906be351ee011fb42a8440951c43efb43f626e9b5d02948dad26c4dfebf" name="libreoffice-langpack-sr" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="7ba12e4bd6be2a18772e408d4d13fdd9e1ac82ef53c56728d7670ae88b7f62ca" name="libreoffice-langpack-sr" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="601e0f4ec36d9556916c1e59e7b1e795a3371263d6d1d35471caacd8a9c0676e" name="libreoffice-langpack-sr" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="29640cdf3a29eedc32d794ca9bc339e42ff4c5551d43e4eddfa104b4c1b322d8" name="libreoffice-langpack-ss" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="131259f4da9cc13b87efbb59bd57a1c2af375785146d376d1921a7e7f7f51ef8" name="libreoffice-langpack-ss" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="6dedcc049d7ab49dc482600fdf7813f4312123568ec3f7d730c50973f909059c" name="libreoffice-langpack-ss" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="d4527d4e16bd3ade3d18bd03b660adf2b3be9c771ccda6d4f7f01c5f058b7122" name="libreoffice-langpack-st" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="ea97f02ce661ea25819712058dfd30c42daedb86eb30cc1c4cabbad825f78d03" name="libreoffice-langpack-st" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="210e1117a7ed27153c1b3c5fc3b8a544195a9e438b48cd2685146afefcae79a6" name="libreoffice-langpack-st" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="fc66d4e4b45b74a4158b850c41669ddd50ca49879de6f2dcd85d2d97a9d63c85" name="libreoffice-langpack-sv" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="0009470cadd8d22fbe1c987995282c5d801ed4f4c4055fc239180a5b31557e9c" name="libreoffice-langpack-sv" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="a219d42842185d2a6ef76170afaea3706ca3c4cb36ca6410ea8e442348e0d47b" name="libreoffice-langpack-sv" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="b9b0d0db32ab6b073a89398bf88896a5664c68a6988a5c4ff8bf9b5071babb4c" name="libreoffice-langpack-ta" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="5b3997e43304af0ae2db21737aab8943e63a6cef4a086c96ae73d4825b048455" name="libreoffice-langpack-ta" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="29d3bdc6b7bfcf1c71c198e280e849adbbfdeccb870569098930ad209a397286" name="libreoffice-langpack-ta" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="7afa01767607c69aa091f9c6548177c583be3b51dbf069215cbca1a903b3436c" name="libreoffice-langpack-te" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="6cf4d4f32ae6e6761aacbee8edfc1644cb8797970156e9ae44772eddd0cb9663" name="libreoffice-langpack-te" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="0f6313bfe366cceae2e895036f4ffaf9b38c67462451e8685336670cfe96529c" name="libreoffice-langpack-te" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="460a03ad3438037b8229b194da3538849d2986ace2bd5a412db31be2c6ad1ebd" name="libreoffice-langpack-th" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="87d45f2d0f80a5d7b90f2b5327b8139a22f289e444828a2b27220fad75f43fc3" name="libreoffice-langpack-th" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="4a1119a3720221cdf06a181f6c7798e3f2a27243695d395df1b1b33e91db7d95" name="libreoffice-langpack-th" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="5ec49c63a7c6ae82784e47a6caf817d4012bca3cf636fa41b86bc88f48b8444a" name="libreoffice-langpack-tn" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="787b7159afe2db92cff82bf4f0a379045f196063ef897ca86ee5f76c82ee4960" name="libreoffice-langpack-tn" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="3c24754393a733d92b5b9c2c29ac275b0359f70cabe093ef39f694b144a5b89d" name="libreoffice-langpack-tn" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="fe8ed764ef70b5ab30a7ed23ec9596f151731e473ff731166b419c848b9db86c" name="libreoffice-langpack-tr" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="aa7ae29f9e3112b125db205de4cb5920c1a4efb4c386caf412d9d061a0bc41fc" name="libreoffice-langpack-tr" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="3d029dfed5456e47e5cda5918bfa51a563973c5d12121814e62d83577e6ed0fc" name="libreoffice-langpack-tr" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="2c5b3d2144fe6f9fe0e9449e4246b355348cbbbf2ba4e2afc11f55ce0fa6ec3c" name="libreoffice-langpack-ts" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="4564a01f7b8d1894c931e0ef2955ba73c48397594f9d154ab2dec58022d6fba4" name="libreoffice-langpack-ts" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="08a38b5e38e8074c57895e9976624de909d01a7c38d60d82660f05aa345b68c7" name="libreoffice-langpack-ts" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="eacdc27d5306e1fa4ba63e8469c24912a6ebf3e536b198090be3123e85619fc9" name="libreoffice-langpack-uk" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="f4b6b1cee6aff631d80a5858b047e6da5af5615740120899f30e1a54af2c241b" name="libreoffice-langpack-uk" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="1ce4c32e1d4d09758950ed3f13786b3d9d9189197993af685dae554529cca0bd" name="libreoffice-langpack-uk" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="6dae0c95e59eee798d2fd54538e594b4bf76f0e977edc4fcfaef63df9d2d1863" name="libreoffice-langpack-ur" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="fa67fea17f5de8d483f6ba19df48216c322a02ca335b560c487c476e97c154bd" name="libreoffice-langpack-ur" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="92e34418623ee3b932af8349cd6995cbfe7a226b0f9fa22fc08544a93dc8aaa1" name="libreoffice-langpack-ur" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="ce0ca1105d6a1d1a7502d01ba7e5ddc6b4c26dd373fb3320f05e14efbf20821f" name="libreoffice-langpack-ve" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="889ba5638ad258e9d5ab55e7d9c451e6a52810369b6ce5e895ab854d7a802851" name="libreoffice-langpack-ve" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="1fb11db85766bb4271d25d3613288fa2e57548cad3aee024ea6d63e17d80d7d6" name="libreoffice-langpack-ve" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="0b48b396886e72b132f66a187a7e9cdcd544886f7fe2d91e9baec105df18d187" name="libreoffice-langpack-xh" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="59bac6a9c6fe77c5b41422a9af522c9876d905da81fe477c43a88cb3f3c72a13" name="libreoffice-langpack-xh" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="a222365ccc0fe78627b9c5bbf9e22ce8efdf050381bb3513e65981b62de69278" name="libreoffice-langpack-xh" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="fa14c9c6bc46326e21fa0fc333dad30362b7654e99fe4ec7bdc16617815e6f63" name="libreoffice-langpack-zh-Hans" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="ee122225c9bcf75103e6d66aa377713b2b1309a61dd006962699d93c2800bb78" name="libreoffice-langpack-zh-Hans" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="40905b4946f8a76a961556641f7eb9c38b0d6a90ba2958f0b71273c98363d3ba" name="libreoffice-langpack-zh-Hans" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="798659fbf26d306c7999954837fb36596eb0481bced782f4425260971fc68407" name="libreoffice-langpack-zh-Hant" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="ff6c7d4c9d5548932cecbe13f23d04ba578dee91606b2e96d1f84c7c3c900852" name="libreoffice-langpack-zh-Hant" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="e8891f4ae8007bf30027f047e0b39a0329d1ca9c54765cae983baeec4efe1467" name="libreoffice-langpack-zh-Hant" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="fff30a6fb1b4e676b46808d8567009a5e566878f6302f54907b9753a53e175cc" name="libreoffice-langpack-zu" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="64a9328646fc65ca7c109015c56402b4cad85e94a5155ab4ad3ffe41075bcdc4" name="libreoffice-langpack-zu" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="fcaf645bcb19a826797c3e7dad5c1f9a56cb37bf59a123ea2cb15d9c4fce3d11" name="libreoffice-langpack-zu" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="fdf6c50fd56c3ffdd55e8bbef7edab608584c9e02471e1fb92863f3abd8c3b7b" name="libreoffice-librelogo" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="b963c58f4f347410ebd16c157208a3e2b3f18c840dfddc55f32c1b20d16eba5d" name="libreoffice-librelogo" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="50ec8b64eefc3a31b994a61199263d2f5cf464e3286a3afd821c6512e7a173e8" name="libreoffice-librelogo" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="b7c8e897324c94546fd84413d50525f0fbc29fc0b3023ab55b0a6ea53db502fe" name="libreoffice-math" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="0a14c47250b37d44745d3833de898febc0ba0e379696bf27d2c94ab887eae87c" name="libreoffice-math" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="ed502679f347fc93b1d6f5c1cf52be67e8d6a176281de76275a5ddc959a9421a" name="libreoffice-math" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="47066a2cce7690ddc6b9db2fa64e0f501595bba893122506a9c92d68f2e59f7f" name="libreoffice-nlpsolver" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="57f63c99fcf1ca5e580bdc92c3e0d0c013a82c8e0f8c4905ed52177205a96d86" name="libreoffice-nlpsolver" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="089c653403b238d36ee1b88710592f2752a5a550fd4b54f391068eca4fe7b8e8" name="libreoffice-nlpsolver" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="ead8d7682bcfb18d03b7251236afe54c0c964492d479f5c96444ffb5c47a1d95" name="libreoffice-officebean" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="1527277c4b281aeff0ea531fd576c171c0e085ec82916566ec1b5d51bbd1193c" name="libreoffice-officebean" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="9b7316c30f665a1d753f62b0732e685258a07dbf15527608c873e38e133b2091" name="libreoffice-ogltrans" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="cf3d643475013177fe8f8a50d8728792b1d388f6b607b17eaebebcf5220fa7d7" name="libreoffice-ogltrans" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="a0ec5181d3d9826b9ff648297bb736d11d0f5723586f7150600beb6df4f5493b" name="libreoffice-ogltrans" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="b141de5189fa7573646cbb08dc65d561b1beafe0edd68e5badf12a9e15e15802" name="libreoffice-opensymbol-fonts" arch="noarch">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="1191cc77a91c3df807a36005a7952c3118e995532ad8c13c3bdf9a657bf6c29b" name="libreoffice-opensymbol-fonts" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="02e0a9c46fa554aa4ef70ee9575008af88152c8fb9726eb6eafa92e44240bc34" name="libreoffice-opensymbol-fonts" arch="noarch">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="0213dd14b99a6dd68999cc21a70ed32c87f6d7f0655e297f3f6eb4e456afc232" name="libreoffice-pdfimport" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="48e19d4098f58617021ee86ed7a647924b9dc13d815a4af3299090415c350cf1" name="libreoffice-pdfimport" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="c0e9189960ac7a312c15443b53a93394135073a003273925818c8cef413af2de" name="libreoffice-pdfimport" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="c2aa46392ec3b225831758e0a1c40721938758c79a1da4a7193336ee53e3e913" name="libreoffice-pyuno" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="f15ff2a6655d397442023863302a525424f7a830e338ffe7433e01cbbcdfdc7a" name="libreoffice-pyuno" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="c7ad50f549a2460a9ba7518b505205ad6feff63d457fae779d8434298dc06766" name="libreoffice-pyuno" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="7dff346c8c0782ebb0fc180f2b4a972a56f3f22adfb969f8bdaefb4735c24f27" name="libreoffice-rhino" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="e38b5bbf23ad2176517dcc6a0c3ab7a874519244afd4881999f92a7e49062329" name="libreoffice-rhino" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="27229dfe50b61e52369126619e9b5309f971a58735be93bebb5bd548910039f8" name="libreoffice-rhino" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="5ce65f08c54a25261baef51a51489079e8ef66812e6b6f62de95ff27439d24cd" name="libreoffice-sdk" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="b86e6ad376234b895910d3f2a764e8302eb4506c3113773e727f4f527df7320c" name="libreoffice-sdk" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="ccbdff46c569c37a30646367a23b3556d3558f5a3238796af321811d9397dff6" name="libreoffice-sdk" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="21f7db50db52a2d6482680e386da0b00f15bcee5f3c6aa889efc010765fd8145" name="libreoffice-sdk-doc" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="f6099fddf1ec8d1786e4aa2ec670f93d7518f342d7023c1510aa6b648f6029cb" name="libreoffice-sdk-doc" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="4c4bbfc748337f316051c4fc9f98d89d5f6e79667cc9038fb1feacf3546a1d28" name="libreoffice-sdk-doc" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="d3cde476f870c0d01768daad3244ac91797a17e7df09eb437269f01b5057d9fa" name="libreoffice-ure" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="1284b459af30f725a9793f0ae806dab3c7bad8d6f973007fb61c9c9234f6085c" name="libreoffice-ure" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="eb6c1debdbc128c175689862271f6888527eb5592d944fad5173f3f9e2eedd0e" name="libreoffice-ure" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="2867fced4462bbd059ddfdcfcc8cbc56c5b839c3299a0c23c563ec917ba8a39f" name="libreoffice-wiki-publisher" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="46735614d89ed654e29d3696e3fe26c25128a97f4958fac2775ecdf25d68cbf2" name="libreoffice-wiki-publisher" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="9b92ca94fc82bfd809aa0a90469f467ff827e4eff01a7775f15cfe8d168d791b" name="libreoffice-wiki-publisher" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="ddd32c33882ef82dd13a5b4550a5a934fc5cfb630288347ea15decf67278411b" name="libreoffice-writer" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="e32fb280c5ae23d052c461a533ce9d3d89371efb9798cca7378fe0b643331e81" name="libreoffice-writer" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="166cc31dea09562aa58f2cd9bade5b01581f4a745713a4ca81cc1fe11026007b" name="libreoffice-writer" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="cf7d238915e26a234a84b963133da02aa24e26b191f85dbbe9d4e6be9190c78c" name="libreoffice-xsltfilter" arch="i686">
  <version epoch="1" ver="4.2.8.2" rel="11.el6_7.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11.1" date="1449057600">- Resolves: rhbz#1285818 various flaws
- CVE-2015-4551 Arbitrary file disclosure in Calc and Writer
- CVE-2015-5212 Integer underflow in PrinterSetup length
- CVE-2015-5213 Integer overflow in DOC files
- CVE-2015-5214 Bookmarks in DOC documents are insufficiently checked
  causing memory corruption</changelog>
</package>
<package pkgid="44663b9f70ea6f77da6eaa811f300ab51ee818fae08eef4603949cc12a7a2049" name="libreoffice-xsltfilter" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="7ebf077f1d96f0e9b9416ed6f8674a02ec6d3748f9e8ece13f88dbab58b477ff" name="libreoffice-xsltfilter" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="03b9262325e61d9abe8750e6d48c67986f91d8140ed6489f4cfc424a5add38a4" name="libreport" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="8b011981948e899d2f293ba13926cd93a4d488e594999bb931d64e5b6a13b840" name="libreport-cli" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="a7fdc4748f3bdc0cee7ea779b58f978f8661508a6291be81fb9fe2958bb9fbc2" name="libreport-compat" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="a74be01ce00b6c5025075ba87933f938bbeb2db838f51a6b3882353bce72ba49" name="libreport-devel" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="7a74d210a34ffd36036e2bdde6b5a95486674e2341265a33c0a7a8251020e542" name="libreport-filesystem" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="9413848196a8322dada57ecdc41abf96d3082a039289c1a3bed051a56423f4f7" name="libreport-gtk" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="2e3dffe9766526fc0a7e8dad43f103b02145363268e9f5781dcdf21da8cbe935" name="libreport-gtk-devel" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="16160a0c74656eed86788c4d9273bb910e1008aa593f35d269de5849cf3a661c" name="libreport-newt" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="a9a3603ce42e7a3644ddeb699e436d9e489345b5acb8ad28f1eca34255f8dbbb" name="libreport-plugin-bugzilla" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="4fbaf7e6e4150d86822fdc778ae3eb410150a72956a620a6fc6b94669e3f2cb3" name="libreport-plugin-kerneloops" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="aded2f59f2f243a61834e25754f313cfab3b856d4c860ec5a691455c93686220" name="libreport-plugin-logger" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="2e221fb9bdeda6eb4d1f3691269b88e87f52e09c60b11c0729cc5531c242421b" name="libreport-plugin-mailx" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="b90cf89f238622cda4dd921644342c2659760565f505b68c998bc6b924bc37a2" name="libreport-plugin-reportuploader" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="fd4ba4046ac65c4e0c7fc33787a97e08bfd83f2db7c3b1ded34b887a9da2c81f" name="libreport-plugin-rhtsupport" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="67629b285f662ad29f10564dc230749b1fcb6a3b334950177a8a883b01ceaa81" name="libreport-plugin-ureport" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="59cf6c4247e599dc3932fd1282de8ebb645f06b34afbb4efc459263a919fdd1d" name="libreport-python" arch="i686">
  <version epoch="0" ver="2.0.9" rel="25.el6_7"/>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-23" date="1431691200">- resolve symbolic and hard link vulnerabilities
- defend against directory traversal attack
- Resolves: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-24" date="1432296000">- switch ownership of new directories from "abrt:user" to "user:abrt"
- fix a bug allowing libreport to read files outside dump directories
- Related: #1212095</changelog>
  <changelog author="Jakub Filak &lt;jfilak@redhat.com&gt; - 2.0.9-25" date="1447588800">- save all files changed by the reporter in the reporting GUI
- Fixes CVE-2015-5302
- Resolves: #1282143</changelog>
</package>
<package pkgid="cc90458f0b10823729f153c51b08dc62c33d9d50dff97c472d38c3f1a2a2012b" name="libsmbclient" arch="i686">
  <version epoch="0" ver="3.6.23" rel="24.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-21" date="1442577600">- resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
- resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
</package>
<package pkgid="970f0d0fb5f6c4c54ee91c52ec26ba4f87c64d07749992ad06cd8155d0fb9b3a" name="libsmbclient" arch="i686">
  <version epoch="0" ver="3.6.23" rel="25.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-25" date="1457352000">- resolves: #1314668 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="bbaa32e640e6d08a2adf14bb4b3e819f42eeb67c34223c5a5b8916147d43958f" name="libsmbclient" arch="i686">
  <version epoch="0" ver="3.6.23" rel="30.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-28" date="1460376000">- related: #1322686 - Update manpages</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-29" date="1460462400">- related: #1322686 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-30" date="1460462401">- related: #1322686 - Update manpages</changelog>
</package>
<package pkgid="4a0002aa8a816a6c268a074466461530b88929e2488cdbc8022a585330f8de59" name="libsmbclient" arch="i686">
  <version epoch="0" ver="3.6.23" rel="41.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
</package>
<package pkgid="36045e2dd5b21702320d4b72e9f0af22ac29c5680250d06c54f192bd486f468e" name="libsmbclient" arch="i686">
  <version epoch="0" ver="3.6.23" rel="43.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
</package>
<package pkgid="9317c294344b61baeb5c01ab76b2c758ac63d957965a9734f31e72dad4c30fd9" name="libsmbclient" arch="i686">
  <version epoch="0" ver="3.6.23" rel="45.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="67c3f47bb100258ea8f95f5e2d10aeb2e2debab02712eeaa5835835a580a8b14" name="libsmbclient" arch="i686">
  <version epoch="0" ver="3.6.23" rel="51.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-49" date="1516708800">- resolves: #1536053 - Fix regression with non-wide symlinks to directories</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-50" date="1521028800">- resolves: #1553018 - Fix CVE-2018-1050</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-51" date="1522152000">- resolves: #1513877 - Fix memory leak in winbind</changelog>
</package>
<package pkgid="c515d7974bec80ea7d8c279994b1535f9d1071ae91775ddf310cc147dcc7ee36" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="24.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-21" date="1442577600">- resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
- resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
</package>
<package pkgid="8c3e0104715acff04c0f69ecea25f068effb7bef1a21e264827181a0ec5e49f3" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="25.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-25" date="1457352000">- resolves: #1314668 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="63ca85fa5693210f4a9c178cf6b3f8b4dd6a6a1b6ecad36edfc71412edab4d17" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="30.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-28" date="1460376000">- related: #1322686 - Update manpages</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-29" date="1460462400">- related: #1322686 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-30" date="1460462401">- related: #1322686 - Update manpages</changelog>
</package>
<package pkgid="a5368298e5623b69446a5746cfc72a8ec904db29682b022c5e8739fa90945c0d" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="41.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
</package>
<package pkgid="86e6d69a152889610144d8448772078da53bc421e15367aa3c36898f59b07fb7" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="43.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
</package>
<package pkgid="ec930cec2f3b8b4eecda96b461ac66c07f9104bb93695d286c7f493cf1b87ca6" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="45.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="ce2339c8bdb1b8d766c28a20286859134d906dbd8c337ede594227f78c5fc624" name="libsmbclient-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="51.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-49" date="1516708800">- resolves: #1536053 - Fix regression with non-wide symlinks to directories</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-50" date="1521028800">- resolves: #1553018 - Fix CVE-2018-1050</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-51" date="1522152000">- resolves: #1513877 - Fix memory leak in winbind</changelog>
</package>
<package pkgid="8c29d766c6f1cdae10f5262e4614b99d8f6cbb5a9e25dcf49075b57373dc0ea3" name="libssh2" arch="i686">
  <version epoch="0" ver="1.4.2" rel="2.el6_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-1" date="1342785600">- rebase to libssh2-1.4.2 (#745420, #749873, #804150, #806862)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-2" date="1370001600">- fix basic functionality of libssh2 in FIPS mode (#968575)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-2.el6_7.1" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
</package>
<package pkgid="237279527bd8da3b53a126e327aa5491f29e1ac8b0cd8f6ac37bbc1017ae4b63" name="libssh2" arch="i686">
  <version epoch="0" ver="1.4.2" rel="3.el6_10.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-2" date="1370001600">- fix basic functionality of libssh2 in FIPS mode (#968575)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-3" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-3.el6_10.1" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
</package>
<package pkgid="5e884b34406e42eb7cd1483951ec2699a723b93fb4eac7fcf5b13052ef9d0fae" name="libssh2-devel" arch="i686">
  <version epoch="0" ver="1.4.2" rel="2.el6_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-1" date="1342785600">- rebase to libssh2-1.4.2 (#745420, #749873, #804150, #806862)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-2" date="1370001600">- fix basic functionality of libssh2 in FIPS mode (#968575)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-2.el6_7.1" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
</package>
<package pkgid="c24fbf4975007cbc746bf3617fff9ef4f142f50a62f7b4d47da518835c79a1ae" name="libssh2-devel" arch="i686">
  <version epoch="0" ver="1.4.2" rel="3.el6_10.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-2" date="1370001600">- fix basic functionality of libssh2 in FIPS mode (#968575)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-3" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-3.el6_10.1" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
</package>
<package pkgid="4b943b7972d231d433c0dcc808c7626eb7dbf575cb5c1510640101d147227ca8" name="libssh2-docs" arch="i686">
  <version epoch="0" ver="1.4.2" rel="2.el6_7.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-1" date="1342785600">- rebase to libssh2-1.4.2 (#745420, #749873, #804150, #806862)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-2" date="1370001600">- fix basic functionality of libssh2 in FIPS mode (#968575)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-2.el6_7.1" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
</package>
<package pkgid="13b07846b877191a0bb18a81357594dcec0756249652645efb33e36cee8ed706" name="libssh2-docs" arch="i686">
  <version epoch="0" ver="1.4.2" rel="3.el6_10.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-2" date="1370001600">- fix basic functionality of libssh2 in FIPS mode (#968575)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-3" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.4.2-3.el6_10.1" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
</package>
<package pkgid="fa6118c519abdc987bbda91701a6f128554492ebd8273409ad87e32553d58f06" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="cdc10f09e6f423127d9488075ff911ba1b5003d9df1e8f7a642220697257edf0" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="3ade79c469ff096b32ee847713dbd025fc0dfaba66df18768baf270c6a40d0e1" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="f5228b6ebacd741b0a3332e5342172611ebd46e86a40463548de537c6235919e" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="3bbaa1de01ce497ba44e6008a764901610740b27808ee10c3181fa5ba6b6bc23" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="c5f12552619f7f16738987ea98eec9f98950df9efbe6f3e1ef36638c647b6965" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="1f49f6a6256493bdcd009e67277b4a62d99167c77f6ba2dfc44078cccc174cd6" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="7f4e769c220302573f0da9d326735ed8442241035778e4f776191d782f9f2a31" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="21d009fce78d2a7756b0e90dcbbbde871cefd43b097479935dcb352eac010a1a" name="libsss_nss_idmap-python" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="bdae24e57ec6d2f6e3742c29cfbf94ccbae5ad8e8acc8afee87f56b8170ec81e" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="cd147312cd12904812e7bb40c1bbaf80efecb403675a55728b4b0a76171cfc26" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="bd9e14d4fc3df0110af8039a1542212cd11f1480b09cc3daf8215d809d065b6c" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="3606b9513e98189a575f0635e749688b1b558b9a475802531b359514c993442b" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="5d3212cddad3aa31a6735f512b034e19949e994e50749b78e5b2532efba1073e" name="libtalloc" arch="i686">
  <version epoch="0" ver="2.1.5" rel="1.el6_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-1" date="1343908800">- New upstream version, resolves rhbz #766335
- Build python bindings to satisfy Samba4 BuildRequires</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-2" date="1349697600">- Obsolete older pytalloc{,-devel} releases to clear the upgrade path
  towards non-multilib pytalloc
- Resolves: rhbz#862062</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.1.5-1" date="1459512000">- Rebase to 2.1.5
- Remove upstreamed patch to enable verbose build
- Related: rhbz#1322688</changelog>
</package>
<package pkgid="c26bdc47dd05cd5c48118f6d3d2d8720c8081a6d8faabca35ba6e10acf00123b" name="libtalloc-devel" arch="i686">
  <version epoch="0" ver="2.1.5" rel="1.el6_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-1" date="1343908800">- New upstream version, resolves rhbz #766335
- Build python bindings to satisfy Samba4 BuildRequires</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-2" date="1349697600">- Obsolete older pytalloc{,-devel} releases to clear the upgrade path
  towards non-multilib pytalloc
- Resolves: rhbz#862062</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.1.5-1" date="1459512000">- Rebase to 2.1.5
- Remove upstreamed patch to enable verbose build
- Related: rhbz#1322688</changelog>
</package>
<package pkgid="d3f3209d31befdbc8923db13e156c505abc197836303c1215bab65afb009ef80" name="libtdb" arch="i686">
  <version epoch="0" ver="1.3.8" rel="1.el6_7"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.2.1-3" date="1302004800">- Resolves: rhbz#692251 - tdb_extend() can cause a memory-usage explosion if
-                         the size of its entries are very large</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.10-1" date="1343908800">- Resolves: rhbz#766334 - Rebase libtdb to match the version required
                          by Samba4
- Enable the Python bindings to satisfy samba4 BuildRequirements
- Obsoletes tdb-1.2.9-limit-tdb_expand.patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.8-1" date="1459512000">- Rebase libtdb to 1.3.8
- related: #1322688</changelog>
</package>
<package pkgid="05ca599ced4a6106bf22f25ae7dfd219e7d7e1d8b4442aba8e050d3900481896" name="libtdb-devel" arch="i686">
  <version epoch="0" ver="1.3.8" rel="1.el6_7"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.2.1-3" date="1302004800">- Resolves: rhbz#692251 - tdb_extend() can cause a memory-usage explosion if
-                         the size of its entries are very large</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.10-1" date="1343908800">- Resolves: rhbz#766334 - Rebase libtdb to match the version required
                          by Samba4
- Enable the Python bindings to satisfy samba4 BuildRequirements
- Obsoletes tdb-1.2.9-limit-tdb_expand.patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.8-1" date="1459512000">- Rebase libtdb to 1.3.8
- related: #1322688</changelog>
</package>
<package pkgid="65931d5cbc43af912199617d27f35883b09105ac2826f3f0b12fb3e86e62bb42" name="libtevent" arch="i686">
  <version epoch="0" ver="0.9.26" rel="2.el6_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.18-3" date="1375876800">- Resolves: rhnz#978962 - tevent_loop_wait() never finishes</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Remove upstreamed or no longer applicable patches
- Related: rhbz#1322688</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- temporarily disable make check, which keeps failing in mock despite
  working correctly on a full system
- Related: rhbz#1322688</changelog>
</package>
<package pkgid="cba1255522f5bda8d567f1bf1a4fa6c62246b4d541a800a0abacd48d3db29f98" name="libtevent-devel" arch="i686">
  <version epoch="0" ver="0.9.26" rel="2.el6_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.18-3" date="1375876800">- Resolves: rhnz#978962 - tevent_loop_wait() never finishes</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Remove upstreamed or no longer applicable patches
- Related: rhbz#1322688</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- temporarily disable make check, which keeps failing in mock despite
  working correctly on a full system
- Related: rhbz#1322688</changelog>
</package>
<package pkgid="2e9b30db0c8d728e746675c1bc9f5aee3519a80778e20e4865a0cd5d2ee61184" name="libtiff" arch="i686">
  <version epoch="0" ver="3.9.4" rel="18.el6_8"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-16" date="1469016000">- Add patches for CVEs:
- CVE-2016-3632 CVE-2016-3945 CVE-2016-3990
- CVE-2016-3991 CVE-2016-5320
- Related: #1335099</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-17" date="1469016001">- Fix patches for CVE-2016-3990 and CVE-2016-5320
- Related: #1335099</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-18" date="1469016002">- Update patch for CVE-2014-8127
- Related: #1335099</changelog>
</package>
<package pkgid="33d18b53a5c280266dba99dd5c4dfe8f83c919dcf987c7bd332f2241c5354921" name="libtiff" arch="i686">
  <version epoch="0" ver="3.9.4" rel="21.el6_8"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-19" date="1484308800">- Add patches for CVEs:
- CVE-2016-9533 CVE-2016-9534 CVE-2016-9535
- CVE-2016-9536 CVE-2016-9537 CVE-2016-9540
- CVE-2016-5652
- Resolves: #1412078</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-20" date="1484740800">- Fix CWE-476 defect found by covscan
- Related: #1412078</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-21" date="1484913600">- Fix patch for CVE-2016-5652
- Related: #1412078</changelog>
</package>
<package pkgid="feaaad3dd9c26fa03808af2816cd013d1486274a7c55f5f93874d0a92ed2e2a1" name="libtiff-devel" arch="i686">
  <version epoch="0" ver="3.9.4" rel="18.el6_8"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-16" date="1469016000">- Add patches for CVEs:
- CVE-2016-3632 CVE-2016-3945 CVE-2016-3990
- CVE-2016-3991 CVE-2016-5320
- Related: #1335099</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-17" date="1469016001">- Fix patches for CVE-2016-3990 and CVE-2016-5320
- Related: #1335099</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-18" date="1469016002">- Update patch for CVE-2014-8127
- Related: #1335099</changelog>
</package>
<package pkgid="bb284ebfc72c3b084d881df484aec2e5e1f41e908b29c2f08cec66489ba12220" name="libtiff-devel" arch="i686">
  <version epoch="0" ver="3.9.4" rel="21.el6_8"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-19" date="1484308800">- Add patches for CVEs:
- CVE-2016-9533 CVE-2016-9534 CVE-2016-9535
- CVE-2016-9536 CVE-2016-9537 CVE-2016-9540
- CVE-2016-5652
- Resolves: #1412078</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-20" date="1484740800">- Fix CWE-476 defect found by covscan
- Related: #1412078</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-21" date="1484913600">- Fix patch for CVE-2016-5652
- Related: #1412078</changelog>
</package>
<package pkgid="5843697df06363f43b3a2849597232e80bfb0c10aaa079554e5df01283aa9555" name="libtiff-static" arch="i686">
  <version epoch="0" ver="3.9.4" rel="18.el6_8"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-16" date="1469016000">- Add patches for CVEs:
- CVE-2016-3632 CVE-2016-3945 CVE-2016-3990
- CVE-2016-3991 CVE-2016-5320
- Related: #1335099</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-17" date="1469016001">- Fix patches for CVE-2016-3990 and CVE-2016-5320
- Related: #1335099</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-18" date="1469016002">- Update patch for CVE-2014-8127
- Related: #1335099</changelog>
</package>
<package pkgid="23b56ab2d0385235f6bdfddfd5fa963dfb7ea3bc9bb76327b7d8ab192074ea90" name="libtiff-static" arch="i686">
  <version epoch="0" ver="3.9.4" rel="21.el6_8"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-19" date="1484308800">- Add patches for CVEs:
- CVE-2016-9533 CVE-2016-9534 CVE-2016-9535
- CVE-2016-9536 CVE-2016-9537 CVE-2016-9540
- CVE-2016-5652
- Resolves: #1412078</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-20" date="1484740800">- Fix CWE-476 defect found by covscan
- Related: #1412078</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-21" date="1484913600">- Fix patch for CVE-2016-5652
- Related: #1412078</changelog>
</package>
<package pkgid="673b0dd782da045e1e013bd47f73ad01f66d95aca5118e470dff63ea35c28311" name="libtirpc" arch="i686">
  <version epoch="0" ver="0.2.1" rel="13.el6_9"/>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-12" date="1467028800">- clnt_vc_create: Do not hold a global mutex during connect (bz 1332520)</changelog>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-13" date="1481112000">- tirpc: fix taddr2uaddr for AF_LOCAL (bz 1285144)</changelog>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-13_9" date="1495022400">- Fix for CVE-2017-8779 (bz 1449458)</changelog>
</package>
<package pkgid="4da519285cdc69064862f451b80aad849653f092b821989e379548946bf293cd" name="libtirpc-devel" arch="i686">
  <version epoch="0" ver="0.2.1" rel="13.el6_9"/>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-12" date="1467028800">- clnt_vc_create: Do not hold a global mutex during connect (bz 1332520)</changelog>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-13" date="1481112000">- tirpc: fix taddr2uaddr for AF_LOCAL (bz 1285144)</changelog>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-13_9" date="1495022400">- Fix for CVE-2017-8779 (bz 1449458)</changelog>
</package>
<package pkgid="9f48b004098e617510e0b1de10df67f61106388ab810ec5fc230717159c65818" name="libuser" arch="i686">
  <version epoch="0" ver="0.56.13" rel="8.el6_7"/>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.56.13-6" date="1435320000">- Fix CVE-2015-3246
  Resolves: #1235518</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.56.13-7" date="1435406400">- Don’t use 512-bit RSA private keys in tests
  Related: #1235518
- Fix testsuite failures if more than one architecture is building concurrently
  Related: #1235518</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.56.13-8" date="1436356800">- Update CVE-2015-3246 patch based on review comments
  Resolves: #1235518</changelog>
</package>
<package pkgid="396d7c1e88fbbde67fdb51da92aa5f073b4b684341c1985a583f459d4d74aaac" name="libuser-devel" arch="i686">
  <version epoch="0" ver="0.56.13" rel="8.el6_7"/>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.56.13-6" date="1435320000">- Fix CVE-2015-3246
  Resolves: #1235518</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.56.13-7" date="1435406400">- Don’t use 512-bit RSA private keys in tests
  Related: #1235518
- Fix testsuite failures if more than one architecture is building concurrently
  Related: #1235518</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.56.13-8" date="1436356800">- Update CVE-2015-3246 patch based on review comments
  Resolves: #1235518</changelog>
</package>
<package pkgid="647925b09604d9b3358268b4a63bfbba726834d4a80702d8bca32b51fa46df01" name="libuser-python" arch="i686">
  <version epoch="0" ver="0.56.13" rel="8.el6_7"/>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.56.13-6" date="1435320000">- Fix CVE-2015-3246
  Resolves: #1235518</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.56.13-7" date="1435406400">- Don’t use 512-bit RSA private keys in tests
  Related: #1235518
- Fix testsuite failures if more than one architecture is building concurrently
  Related: #1235518</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.56.13-8" date="1436356800">- Update CVE-2015-3246 patch based on review comments
  Resolves: #1235518</changelog>
</package>
<package pkgid="d9ddc6cf4c8bca41b9848026a68de52e4d2c698471b11de40e3476c69d13f0c3" name="libvirt" arch="i686">
  <version epoch="0" ver="0.10.2" rel="62.el6_9.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-61" date="1476360000">- virsh: Properly display block job type (rhbz#1326653)
- spec: proper soft static allocation of qemu uid (rhbz#1351792)
- Revert "qemu: snapshot: Fix modification of vm object without job" (rhbz#1326652)
- qemu: snapshot: Fix job handling when creating snapshots (rhbz#1326652)
- tls: remove support for gnutls 1.x.x, require 2.2.0 (rhbz#1333415)
- configure: allow setting default TLS priority string (rhbz#1333415)
- rpc: allow priority string to be passed to TLS context (rhbz#1333415)
- libvirtd: add config option for TLS priority (rhbz#1333415)
- remote: allow TLS protocol/cipher priority override in URI (rhbz#1333415)
- Pass config file object through to driver open methods (rhbz#1333415)
- remote: allow TLS priority to be customized (rhbz#1333415)
- qemu: -numa doesn't (yet) support disjoint range (rhbz#1310122)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62" date="1477915200">- qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
- qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
- migration: add support for migrateURI configuration (rhbz#1347389)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
</package>
<package pkgid="4dc835d3b744ec618c883f3356c99bc0b7bc6b4ba96080b137851ab1ab3690c6" name="libvirt" arch="i686">
  <version epoch="0" ver="0.10.2" rel="62.el6_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62" date="1477915200">- qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
- qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
- migration: add support for migrateURI configuration (rhbz#1347389)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.2" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="38374c6e826f0499bf9f979349733133fcc4d73821eec8b326244a97c87eea4e" name="libvirt" arch="i686">
  <version epoch="0" ver="0.10.2" rel="64.el6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-63" date="1523361600">- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64" date="1526990400">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="34b79cd26626f3e461dc6c4b08b7202210ae939825000d6e948aa267bd7d9f2e" name="libvirt" arch="i686">
  <version epoch="0" ver="0.10.2" rel="64.el6_10.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-63" date="1523361600">- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64" date="1526990400">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64.el6_10.1" date="1555588800">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)</changelog>
</package>
<package pkgid="4ae6f6b1427086b6e395279dc843779132799cedb047585a4048ec2250a97c88" name="libvirt" arch="i686">
  <version epoch="0" ver="0.10.2" rel="64.el6_10.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64" date="1526990400">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64.el6_10.1" date="1555588800">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64.el6_10.2" date="1560945600">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)</changelog>
</package>
<package pkgid="0c214f9dc23f74366e7b81ec6a83481470a248fd63856b733fb3683515a4406b" name="libvirt-client" arch="i686">
  <version epoch="0" ver="0.10.2" rel="62.el6_9.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-61" date="1476360000">- virsh: Properly display block job type (rhbz#1326653)
- spec: proper soft static allocation of qemu uid (rhbz#1351792)
- Revert "qemu: snapshot: Fix modification of vm object without job" (rhbz#1326652)
- qemu: snapshot: Fix job handling when creating snapshots (rhbz#1326652)
- tls: remove support for gnutls 1.x.x, require 2.2.0 (rhbz#1333415)
- configure: allow setting default TLS priority string (rhbz#1333415)
- rpc: allow priority string to be passed to TLS context (rhbz#1333415)
- libvirtd: add config option for TLS priority (rhbz#1333415)
- remote: allow TLS protocol/cipher priority override in URI (rhbz#1333415)
- Pass config file object through to driver open methods (rhbz#1333415)
- remote: allow TLS priority to be customized (rhbz#1333415)
- qemu: -numa doesn't (yet) support disjoint range (rhbz#1310122)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62" date="1477915200">- qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
- qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
- migration: add support for migrateURI configuration (rhbz#1347389)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
</package>
<package pkgid="1c16b142cefa444632757eb3c83d9a1e0b58e0ecf0e25c85a8537c15afb040b4" name="libvirt-client" arch="i686">
  <version epoch="0" ver="0.10.2" rel="62.el6_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62" date="1477915200">- qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
- qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
- migration: add support for migrateURI configuration (rhbz#1347389)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.2" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="49866f2a628c34692feb0d8a43aad8ccb92aa31fdc5b296ffabc73e4afe3e63a" name="libvirt-client" arch="i686">
  <version epoch="0" ver="0.10.2" rel="64.el6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-63" date="1523361600">- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64" date="1526990400">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="2db665f301963c18e699bf6de58d71d46d9b58615941f95892aaffd80705d476" name="libvirt-client" arch="i686">
  <version epoch="0" ver="0.10.2" rel="64.el6_10.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-63" date="1523361600">- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64" date="1526990400">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64.el6_10.1" date="1555588800">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)</changelog>
</package>
<package pkgid="615765410c7a433b2bcca369eb4185b0bcbca4778ab1cf17badd1437f92f329e" name="libvirt-client" arch="i686">
  <version epoch="0" ver="0.10.2" rel="64.el6_10.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64" date="1526990400">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64.el6_10.1" date="1555588800">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64.el6_10.2" date="1560945600">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)</changelog>
</package>
<package pkgid="2c8093d006167a5a5603b0a421cd0c04fdac1f373a41396a829e1af085e95805" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="0.10.2" rel="62.el6_9.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-61" date="1476360000">- virsh: Properly display block job type (rhbz#1326653)
- spec: proper soft static allocation of qemu uid (rhbz#1351792)
- Revert "qemu: snapshot: Fix modification of vm object without job" (rhbz#1326652)
- qemu: snapshot: Fix job handling when creating snapshots (rhbz#1326652)
- tls: remove support for gnutls 1.x.x, require 2.2.0 (rhbz#1333415)
- configure: allow setting default TLS priority string (rhbz#1333415)
- rpc: allow priority string to be passed to TLS context (rhbz#1333415)
- libvirtd: add config option for TLS priority (rhbz#1333415)
- remote: allow TLS protocol/cipher priority override in URI (rhbz#1333415)
- Pass config file object through to driver open methods (rhbz#1333415)
- remote: allow TLS priority to be customized (rhbz#1333415)
- qemu: -numa doesn't (yet) support disjoint range (rhbz#1310122)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62" date="1477915200">- qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
- qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
- migration: add support for migrateURI configuration (rhbz#1347389)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
</package>
<package pkgid="383835676f08a1c3f7027d2e9f0e353724670baf70e920c34255ad9e48d94b3d" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="0.10.2" rel="62.el6_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62" date="1477915200">- qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
- qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
- migration: add support for migrateURI configuration (rhbz#1347389)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.2" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="267f287954964264c2736ab4d4b8a78f812c05af4b3cfe3ca374f230bb0e225c" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="0.10.2" rel="64.el6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-63" date="1523361600">- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64" date="1526990400">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="52a0b76a3c42f4f89feb1774130ba9c24c1b2586d708e52f6e93c9b7544c8415" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="0.10.2" rel="64.el6_10.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-63" date="1523361600">- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64" date="1526990400">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64.el6_10.1" date="1555588800">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)</changelog>
</package>
<package pkgid="7bae2df5101efc072b5dbe4af4e4f92796e251ca6be203da6416bedddab07232" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="0.10.2" rel="64.el6_10.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64" date="1526990400">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64.el6_10.1" date="1555588800">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64.el6_10.2" date="1560945600">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)</changelog>
</package>
<package pkgid="6e518479c26939c853c2820c72f1b45dadc08304413990e0e2cc9f83e118c590" name="libvirt-python" arch="i686">
  <version epoch="0" ver="0.10.2" rel="62.el6_9.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-61" date="1476360000">- virsh: Properly display block job type (rhbz#1326653)
- spec: proper soft static allocation of qemu uid (rhbz#1351792)
- Revert "qemu: snapshot: Fix modification of vm object without job" (rhbz#1326652)
- qemu: snapshot: Fix job handling when creating snapshots (rhbz#1326652)
- tls: remove support for gnutls 1.x.x, require 2.2.0 (rhbz#1333415)
- configure: allow setting default TLS priority string (rhbz#1333415)
- rpc: allow priority string to be passed to TLS context (rhbz#1333415)
- libvirtd: add config option for TLS priority (rhbz#1333415)
- remote: allow TLS protocol/cipher priority override in URI (rhbz#1333415)
- Pass config file object through to driver open methods (rhbz#1333415)
- remote: allow TLS priority to be customized (rhbz#1333415)
- qemu: -numa doesn't (yet) support disjoint range (rhbz#1310122)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62" date="1477915200">- qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
- qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
- migration: add support for migrateURI configuration (rhbz#1347389)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
</package>
<package pkgid="3acfaf532845b0271e6a32b8569909f21b8f3c103c5c1715bf38313f309cb7f0" name="libvirt-python" arch="i686">
  <version epoch="0" ver="0.10.2" rel="62.el6_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62" date="1477915200">- qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
- qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
- migration: add support for migrateURI configuration (rhbz#1347389)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.2" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="3c627eb84744d57e9028021db5eaee4d2777f3a6c15a097792cf66a7ea3293e0" name="libvirt-python" arch="i686">
  <version epoch="0" ver="0.10.2" rel="64.el6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-63" date="1523361600">- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64" date="1526990400">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="1b4d46a1290302b3bfc3122abb47bf406192f4304a82bfc3ad5fcc92b95690b4" name="libvirt-python" arch="i686">
  <version epoch="0" ver="0.10.2" rel="64.el6_10.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-63" date="1523361600">- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64" date="1526990400">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64.el6_10.1" date="1555588800">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)</changelog>
</package>
<package pkgid="2284db6c51fec1aba765a7063a2040104e8131130b795db6ed0b64e2eba51732" name="libvirt-python" arch="i686">
  <version epoch="0" ver="0.10.2" rel="64.el6_10.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64" date="1526990400">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64.el6_10.1" date="1555588800">- cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12130, CVE-2018-12127)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-64.el6_10.2" date="1560945600">- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)</changelog>
</package>
<package pkgid="6bae94f8d08ae08fb3da67090ee61204e786c79ef6ea6425e22425ea31b424c6" name="libvorbis" arch="i686">
  <version epoch="1" ver="1.2.3" rel="5.el6_9.1"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.3-4" date="1258977600">- Fix doc subpackage build (#540634)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.2.3-5" date="1328443200">- fix CVE-2012-0444 (#787077)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.2.3-5.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="800568f1205d4d9954c1b2fe6abf010836dc4482cd691dcf59da2c756bcb5664" name="libvorbis-devel" arch="i686">
  <version epoch="1" ver="1.2.3" rel="5.el6_9.1"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.3-4" date="1258977600">- Fix doc subpackage build (#540634)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.2.3-5" date="1328443200">- fix CVE-2012-0444 (#787077)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.2.3-5.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="e933d99a851c5f2e5b684c348d8c6d9936c3cf4bcb0a6b8feefaaafe2746e2a1" name="libvorbis-devel-docs" arch="noarch">
  <version epoch="1" ver="1.2.3" rel="5.el6_9.1"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.3-4" date="1258977600">- Fix doc subpackage build (#540634)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.2.3-5" date="1328443200">- fix CVE-2012-0444 (#787077)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.2.3-5.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="91e100060d6c7cb92dded33d39c9dd4787c5943dd59287a42cafae1214ab8c67" name="libwmf" arch="i686">
  <version epoch="0" ver="0.2.8.4" rel="25.el6_7"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.2.8.4-23" date="1402660800">- Resolves: rhbz#1104684 Adapt to standalone gdk-pixbuf</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.2.8.4-24" date="1433764800">- Resolves: rhbz#1227429 CVE-2015-0848 libwmf: heap overflow when decoding BMP images</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.2.8.4-25" date="1441195200">- Resolves: rhbz#1227428 - CVE-2015-0848 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696</changelog>
</package>
<package pkgid="c4dba2f81a41b70f008faf529729ad8851f85a8cc6bb06579131123762189379" name="libwmf-devel" arch="i686">
  <version epoch="0" ver="0.2.8.4" rel="25.el6_7"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.2.8.4-23" date="1402660800">- Resolves: rhbz#1104684 Adapt to standalone gdk-pixbuf</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.2.8.4-24" date="1433764800">- Resolves: rhbz#1227429 CVE-2015-0848 libwmf: heap overflow when decoding BMP images</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.2.8.4-25" date="1441195200">- Resolves: rhbz#1227428 - CVE-2015-0848 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696</changelog>
</package>
<package pkgid="aabf8d04324a9ac5fd2f0e75a2628c23cdd6b1a750eef94c00048810f1ae4c30" name="libwmf-lite" arch="i686">
  <version epoch="0" ver="0.2.8.4" rel="25.el6_7"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.2.8.4-23" date="1402660800">- Resolves: rhbz#1104684 Adapt to standalone gdk-pixbuf</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.2.8.4-24" date="1433764800">- Resolves: rhbz#1227429 CVE-2015-0848 libwmf: heap overflow when decoding BMP images</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.2.8.4-25" date="1441195200">- Resolves: rhbz#1227428 - CVE-2015-0848 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696</changelog>
</package>
<package pkgid="0e27055dc89be4776c9b28440fd8812b24a0398c06142eeee3462c3d7e52b71e" name="libxcb" arch="i686">
  <version epoch="0" ver="1.12" rel="4.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.11-2" date="1447156800">- Restore 64bit seqno patch</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.12-3" date="1484827200">- libxcb 1.12</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.12-4" date="1484827201">- Re-add back xprint, we already ship it in RHEL</changelog>
</package>
<package pkgid="8ffd90bf1e11a21ac34b9a9bd426f7e2b2deca946dfd375ab0fc2a4d79fae8e6" name="libxcb-devel" arch="i686">
  <version epoch="0" ver="1.12" rel="4.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.11-2" date="1447156800">- Restore 64bit seqno patch</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.12-3" date="1484827200">- libxcb 1.12</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.12-4" date="1484827201">- Re-add back xprint, we already ship it in RHEL</changelog>
</package>
<package pkgid="d4f228f0ecf8c6cc63ffe0a95ab390c5892b1eb3bdfb321ca9bb7c5c60f651ad" name="libxcb-doc" arch="noarch">
  <version epoch="0" ver="1.12" rel="4.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.11-2" date="1447156800">- Restore 64bit seqno patch</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.12-3" date="1484827200">- libxcb 1.12</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.12-4" date="1484827201">- Re-add back xprint, we already ship it in RHEL</changelog>
</package>
<package pkgid="c2157181fced0b43c7c18f0fabfb8268cc377b5b4683dfb49d0f1e831db070fa" name="libxcb-python" arch="i686">
  <version epoch="0" ver="1.12" rel="4.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.11-2" date="1447156800">- Restore 64bit seqno patch</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.12-3" date="1484827200">- libxcb 1.12</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.12-4" date="1484827201">- Re-add back xprint, we already ship it in RHEL</changelog>
</package>
<package pkgid="373c803309596f13709373660f446fdeeacb897546210a2371ea94ad139e5c6b" name="libxml2" arch="i686">
  <version epoch="0" ver="2.7.6" rel="20.el6_7.1"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.7.6-19.el6" date="1427112000">- Stop parsing on entities boundaries errors
- Fix missing entities after CVE-2014-3660 fix (rhbz#1149086)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.7.6-20.el6" date="1430913600">- CVE-2015-1819 Enforce the reader to run in constant memory(rhbz#1214163)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-20.1" date="1448884800">- Fix a series of CVEs (rhbz#1286495)
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- Libxml violates the zlib interface and crashes</changelog>
</package>
<package pkgid="6dd3f49101b77e722d3a9467414a73423ed45b2c4a9e8948edf2db872c5395c7" name="libxml2" arch="i686">
  <version epoch="0" ver="2.7.6" rel="21.el6_8.1"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-20.1" date="1448884800">- Fix a series of CVEs (rhbz#1286495)
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- Libxml violates the zlib interface and crashes</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.7.6-21.el6.8" date="1453636800">- Fix large parse of file from memory (rhbz#862969)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-21.el6.8.1" date="1465300800">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
</package>
<package pkgid="d86a6c87efd711dc3eba75616300adf4c370a336f90463a636861e617a6d80e0" name="libxml2-devel" arch="i686">
  <version epoch="0" ver="2.7.6" rel="20.el6_7.1"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.7.6-19.el6" date="1427112000">- Stop parsing on entities boundaries errors
- Fix missing entities after CVE-2014-3660 fix (rhbz#1149086)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.7.6-20.el6" date="1430913600">- CVE-2015-1819 Enforce the reader to run in constant memory(rhbz#1214163)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-20.1" date="1448884800">- Fix a series of CVEs (rhbz#1286495)
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- Libxml violates the zlib interface and crashes</changelog>
</package>
<package pkgid="6790c4313f8495dbf94713982866e072234eb919fe6e9f5b22641d767c0f7675" name="libxml2-devel" arch="i686">
  <version epoch="0" ver="2.7.6" rel="21.el6_8.1"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-20.1" date="1448884800">- Fix a series of CVEs (rhbz#1286495)
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- Libxml violates the zlib interface and crashes</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.7.6-21.el6.8" date="1453636800">- Fix large parse of file from memory (rhbz#862969)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-21.el6.8.1" date="1465300800">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
</package>
<package pkgid="d754321f58c5b827fced434d7dd0dcf398a15d5b71540b698a84c0ad7a26cfbf" name="libxml2-python" arch="i686">
  <version epoch="0" ver="2.7.6" rel="20.el6_7.1"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.7.6-19.el6" date="1427112000">- Stop parsing on entities boundaries errors
- Fix missing entities after CVE-2014-3660 fix (rhbz#1149086)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.7.6-20.el6" date="1430913600">- CVE-2015-1819 Enforce the reader to run in constant memory(rhbz#1214163)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-20.1" date="1448884800">- Fix a series of CVEs (rhbz#1286495)
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- Libxml violates the zlib interface and crashes</changelog>
</package>
<package pkgid="dce8b87f07e7e81f58b6837805b74d041f1035075de29ab5cf0fc7a6ccf42f28" name="libxml2-python" arch="i686">
  <version epoch="0" ver="2.7.6" rel="21.el6_8.1"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-20.1" date="1448884800">- Fix a series of CVEs (rhbz#1286495)
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- Libxml violates the zlib interface and crashes</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.7.6-21.el6.8" date="1453636800">- Fix large parse of file from memory (rhbz#862969)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-21.el6.8.1" date="1465300800">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
</package>
<package pkgid="087312c9ec65dd53f011274c593f2eac55df2e89ee7aed23b22869a58c876c1b" name="libxml2-static" arch="i686">
  <version epoch="0" ver="2.7.6" rel="20.el6_7.1"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.7.6-19.el6" date="1427112000">- Stop parsing on entities boundaries errors
- Fix missing entities after CVE-2014-3660 fix (rhbz#1149086)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.7.6-20.el6" date="1430913600">- CVE-2015-1819 Enforce the reader to run in constant memory(rhbz#1214163)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-20.1" date="1448884800">- Fix a series of CVEs (rhbz#1286495)
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- Libxml violates the zlib interface and crashes</changelog>
</package>
<package pkgid="27abe57c00d6b0818c0f006ff79bd9747e47101f4ef89b16d04a5cbba107f8a9" name="libxml2-static" arch="i686">
  <version epoch="0" ver="2.7.6" rel="21.el6_8.1"/>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-20.1" date="1448884800">- Fix a series of CVEs (rhbz#1286495)
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- Libxml violates the zlib interface and crashes</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.7.6-21.el6.8" date="1453636800">- Fix large parse of file from memory (rhbz#862969)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.7.6-21.el6.8.1" date="1465300800">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
</package>
<package pkgid="bd2303fe6c7aac220ef0e53cdb38d650b5dba47641994d73f8b52b5804f6ef57" name="libxshmfence" arch="i686">
  <version epoch="0" ver="1.2" rel="1.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.1-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.1-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 1.2-1" date="1420200000">- Update to 1.2</changelog>
</package>
<package pkgid="add430edd131a4b33fbb1030c9e6fe2c28aff270cc08fa060dc965f05b005dca" name="libxshmfence-devel" arch="i686">
  <version epoch="0" ver="1.2" rel="1.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.1-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.1-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 1.2-1" date="1420200000">- Update to 1.2</changelog>
</package>
<package pkgid="43327275451f1693339275dabb815ccbff279f0d2da17350fc1072f1db7cc0c9" name="lvm2" arch="i686">
  <version epoch="0" ver="2.02.143" rel="12.el6"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-10" date="1479988800">- Disable queueing on mpath devs in blk-availability initscript.
- Add new -m|--mpathoption disablequeueing to blkdeactivate.
- Prevent only repair for non-synced raid1 unless --force, not other raid types.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-11" date="1481630400">- Fix handling of transient failure of a PV holding RAID sub LVs.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-12" date="1484136000">- Allow transiently failed RAID LV to be refreshed.</changelog>
</package>
<package pkgid="95c811c56605cf68ef4d3b18f0a826d037f43e93d730628150aff4066f919101" name="lvm2-cluster" arch="i686">
  <version epoch="0" ver="2.02.143" rel="12.el6"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-10" date="1479988800">- Disable queueing on mpath devs in blk-availability initscript.
- Add new -m|--mpathoption disablequeueing to blkdeactivate.
- Prevent only repair for non-synced raid1 unless --force, not other raid types.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-11" date="1481630400">- Fix handling of transient failure of a PV holding RAID sub LVs.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-12" date="1484136000">- Allow transiently failed RAID LV to be refreshed.</changelog>
</package>
<package pkgid="1721bdbb6cd733281fab1fe13cbe67846a4db3f3cb0d63ba7ee3efbecd42be38" name="lvm2-devel" arch="i686">
  <version epoch="0" ver="2.02.143" rel="12.el6"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-10" date="1479988800">- Disable queueing on mpath devs in blk-availability initscript.
- Add new -m|--mpathoption disablequeueing to blkdeactivate.
- Prevent only repair for non-synced raid1 unless --force, not other raid types.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-11" date="1481630400">- Fix handling of transient failure of a PV holding RAID sub LVs.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-12" date="1484136000">- Allow transiently failed RAID LV to be refreshed.</changelog>
</package>
<package pkgid="78d40aeee2b883fb970bd23854a5b365d0ad5c50cf8cd648860c09eef4acf597" name="lvm2-libs" arch="i686">
  <version epoch="0" ver="2.02.143" rel="12.el6"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-10" date="1479988800">- Disable queueing on mpath devs in blk-availability initscript.
- Add new -m|--mpathoption disablequeueing to blkdeactivate.
- Prevent only repair for non-synced raid1 unless --force, not other raid types.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-11" date="1481630400">- Fix handling of transient failure of a PV holding RAID sub LVs.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-12" date="1484136000">- Allow transiently failed RAID LV to be refreshed.</changelog>
</package>
<package pkgid="6e4fdcb3aae07ec349978aeb14f8931720e94d0243a67cccf5d1ed1aeca93b80" name="mailman" arch="i686">
  <version epoch="3" ver="2.1.12" rel="26.el6_9.3"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.12-26.1" date="1518782400">- Resolves: #1545967 - Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.12-26.2" date="1519992000">- Resolves: #1545967 - Fix XSS vulnerability in web UI. Add sanitizer</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.12-26.3" date="1520251200">- Related: #1545967 - Add missed import</changelog>
</package>
<package pkgid="797c644e19f3b6724154cd95af268222527597075c6edbe676b28b1b09c51069" name="memcached" arch="i686">
  <version epoch="0" ver="1.4.4" rel="3.el6_8.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 0:1.4.4-2" date="1263902400">- remove -selinux subpackage (#540451)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 0:1.4.4-3" date="1273147200">- don't run the test suite as root (#558913)
- init script updates for LSB compliance (#571733)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 0:1.4.4-3.el6_8.1" date="1478520000">- fix vulnerabilities allowing remote code execution (CVE-2016-8704,
  CVE-2016-8705, CVE-2016-8706)</changelog>
</package>
<package pkgid="7fac4bb44e8640626fc40daae583b353d4dd159b4a74174cd62345accb3e8c5e" name="memcached-devel" arch="i686">
  <version epoch="0" ver="1.4.4" rel="3.el6_8.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 0:1.4.4-2" date="1263902400">- remove -selinux subpackage (#540451)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 0:1.4.4-3" date="1273147200">- don't run the test suite as root (#558913)
- init script updates for LSB compliance (#571733)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 0:1.4.4-3.el6_8.1" date="1478520000">- fix vulnerabilities allowing remote code execution (CVE-2016-8704,
  CVE-2016-8705, CVE-2016-8706)</changelog>
</package>
<package pkgid="2bbe3999bc75c583f7ead09c59cf15dd53857ed9de842156fa3d88cc3e3afd86" name="mercurial" arch="i686">
  <version epoch="0" ver="1.4" rel="5.el6_9"/>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 1.4-3" date="1268395200">- replaced instances of #!/usr/bin/env python with #!/usr/bin/python
  Fixed: #528797</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.4-4" date="1431691200">- Fixed troubles with SSl connection
- Fixed adding of broken symlink when 'copy -A'
- Fixed permissions for */hgk - Thanks to Dave Johanse &lt;davejohansen@gmail.com&gt;
  Resolves: #784079 #928301 #1006457</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.4-5" date="1497528000">- Fixes CVE-2017-9462</changelog>
</package>
<package pkgid="885aa88d2c50a1c88031ed44bfd65788d5bf578032a8d9901508d3c735b758ec" name="mercurial-hgk" arch="i686">
  <version epoch="0" ver="1.4" rel="5.el6_9"/>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 1.4-3" date="1268395200">- replaced instances of #!/usr/bin/env python with #!/usr/bin/python
  Fixed: #528797</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.4-4" date="1431691200">- Fixed troubles with SSl connection
- Fixed adding of broken symlink when 'copy -A'
- Fixed permissions for */hgk - Thanks to Dave Johanse &lt;davejohansen@gmail.com&gt;
  Resolves: #784079 #928301 #1006457</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.4-5" date="1497528000">- Fixes CVE-2017-9462</changelog>
</package>
<package pkgid="67fdba0194f7b8419d1e27468fde765800df6ce5bc513b160c0986c266a49081" name="mesa-demos" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="c3f6de4cc46d99051366f1010e9ed561c914084eb28e2e67b657d1d744d08a8b" name="mesa-dri-drivers" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="f4c49e4e3f28664485d921575be3e48697807c8f33be99b5428b34ef57f34100" name="mesa-dri-filesystem" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="953f58e9b628f0bc46ac7870557f65d9217066680c298ac181060687d4b516d5" name="mesa-libEGL" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="8a74ac52ddb93b4b5ed97d30a3b9894de230b2dbd61c8ed0d036807b89711c74" name="mesa-libEGL-devel" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="15dc9a4a8b66c187c723a49df2bb82827f5db5e949962ab83ed3dd95113e80a9" name="mesa-libGL" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="ca23018c4cb38d518ad8602c202909c19b6aa04802e9ad4ccf44fdc0aa36ae1f" name="mesa-libGL-devel" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="26b3f41dd43f0cf64823dc225a42375f7018755f9a7d8620490b7bce31416f4a" name="mesa-libGLU" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="0ecee5f18793088f9ce6321e11c8f3c6a7939f7e0766c52e95548f280f739ee6" name="mesa-libGLU-devel" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="aa9e24ac6893c70cfd04323daaae225def45ada0f050ab74045ffe679db7ace0" name="mesa-libOSMesa" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="914cbee17d4554b5361c52dda775405909c52cc961959c4f2c3ad311fcf8fb2d" name="mesa-libOSMesa-devel" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="683cab64e80872b1dbcf73fec8deb0012e313ea8f554090f87640460424916aa" name="mesa-libgbm" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="a97374b3d10655f6717a8775c43acf5623a37716fd3b4a552c5a4e4259067d08" name="mesa-libgbm-devel" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="70d8a52ed86afe2d61a968536425227fa51c5f3d7d41e946fa311a79b3e73309" name="mesa-libxatracker" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="9c5adf09981c315f0d85d711956eaf7ebbeae1b7bfe09e119e50c3f6b89fc6e4" name="mesa-libxatracker-devel" arch="i686">
  <version epoch="0" ver="11.0.7" rel="4.el6"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 10.6.9-6" date="1449403200">- final stage - reenable everything, 10.6.9</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 11.0.7-1" date="1449662400">- 11.0.7 rebase + enable llvmpipe on x86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 11.0.7-4" date="1457438400">- Updates for new skylake parts</changelog>
</package>
<package pkgid="0d9e98a0430aa7a9767186725d58cdb802159a3eda631fc919167ee963005cde" name="mesa-private-llvm" arch="i686">
  <version epoch="0" ver="3.6.2" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.4-1" date="1398081600">- m-p-l 3.4 plus radeonsi backport</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.4-3" date="1398686400">- Fix specfile so %postun isn't interpreted as a shell script</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 3.6.2-1" date="1447848000">- m-p-l 3.6.2 + gcc 4.8 + python 2.7.8</changelog>
</package>
<package pkgid="4e36f3e61d42b21d019d99a90c870196f1ba26cc49f2505ec6e9f53fa9ce0e40" name="mesa-private-llvm-devel" arch="i686">
  <version epoch="0" ver="3.6.2" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.4-1" date="1398081600">- m-p-l 3.4 plus radeonsi backport</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.4-3" date="1398686400">- Fix specfile so %postun isn't interpreted as a shell script</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 3.6.2-1" date="1447848000">- m-p-l 3.6.2 + gcc 4.8 + python 2.7.8</changelog>
</package>
<package pkgid="c4e884c935aa0e32ce622d763ee4493aeb114fcc28294005dc399f1e291096a2" name="microcode_ctl" arch="i686">
  <version epoch="1" ver="1.17" rel="25.2.el6_9"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25" date="1487592000">- Revert microcode_amd_fam15h.bin to version from amd-ucode-2012-09-10
- Resolves: #1322525</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.1" date="1501070400">- Update microcode data file to 20170707 revision.
- Resolves: #1465143</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Add amd microcode_amd_fam17h.bin data file
- Resolves: #1527357</changelog>
</package>
<package pkgid="36e24646eacef60e0cd5cd9ae50d417b189f9be72ccd460d46b07ab6037eaba4" name="microcode_ctl" arch="i686">
  <version epoch="1" ver="1.17" rel="25.4.el6_9"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Add amd microcode_amd_fam17h.bin data file
- Resolves: #1527357</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.3" date="1515758400">- Revert Microcode from Intel and AMD for Side Channel attack
- Resolves: #1533978</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.4" date="1516017600">- Use right upstream source for revert
- Resolves: #1533978</changelog>
</package>
<package pkgid="3554b2c167a3a377cafa48f09e73d1a0c7a2f30d58ebabce3111e5c50f66ed56" name="microcode_ctl" arch="i686">
  <version epoch="1" ver="1.17" rel="25.6.el6_9"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.4" date="1516017600">- Use right upstream source for revert
- Resolves: #1533978</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.5" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575563</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.6" date="1526385600">- Update disclaimer text
- Resolves: #1575563</changelog>
</package>
<package pkgid="cd817b19a6cfba4dcbe70b6a4628847ba3283d18b772001bb59a8efa1a28ac1e" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="1.17" rel="33.11.el6_10"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:1.17-33.9" date="1536321600">- Fix disclaimer path in %post script.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:1.17-33.10" date="1557144000">- Intel CPU microcode update to 20190312 (#1697960).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:1.17-33.11" date="1557403200">- Intel CPU microcode update to 20190507_Public_DEMO (#1697960).</changelog>
</package>
<package pkgid="2f47f6520509729b2db205f2bb9fb27da378323b451bd97a7892a28c19ce73a2" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="1.17" rel="33.26.el6_10"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:1.17-33.24" date="1589457600">- Narrow down SKL-SP/W/X blacklist to exclude Server/FPGA/Fabric segment
  models (#1835555).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:1.17-33.25" date="1590235200">- Update Intel CPU microcode to microcode-20200520 release (#1839193):
  - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
    up to 0x621;
  - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
    up to 0x71a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
    up to 0x78.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:1.17-33.26" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795353, #1795357, #1827186):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
</package>
<package pkgid="a51bcc846e579faa86cbdc292e5a17f7d35632294b015f4fe151bd08ffe7d819" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="1.17" rel="33.31.el6_10"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:1.17-33.29" date="1592395200">- Update Intel CPU microcode to microcode-20200609 release (#1826590):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:1.17-33.30" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:1.17-33.31" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893243, #1893238):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode (in microcode.dat)
    at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    microcode.dat) at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode (in microcode.dat)
    at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode (in microcode.dat)
    at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat)
    at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode (in
    microcode.dat) at revision 0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    microcode-06-4e-03.dat) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    microcode-06-55-04.dat) from revision 0x2006906 up to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    microcode-06-5e-03.dat) from revision 0xdc up to 0xe2;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    (in microcode.dat) from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode (in microcode.dat)
    from revision 0x1000157 up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode (in microcode.dat)
    from revision 0x4002f01 up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode (in
    microcode.dat) from revision 0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode (in microcode.dat) from
    revision 0x38 up to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode (in microcode.dat)
    from revision 0x16 up to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode (in microcode.dat)
    from revision 0x16 up to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode (in microcode.dat)
    from revision 0x78 up to 0xa0;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in microcode.dat)
    from revision 0xd6 up to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    microcode.dat) from revision 0xd6 up to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    microcode.dat) from revision 0xd6 up to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in microcode.dat)
    from revision 0xd6 up to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in microcode.dat) from revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    microcode.dat) from revision 0xd6 up to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    microcode.dat) from revision 0xd6 up to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in microcode.dat)
    from revision 0xd6 up to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    microcode.dat) from revision 0xd6 up to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    microcode.dat) from revision 0xd6 up to 0xde;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode (in microcode.dat)
    from revision 0xca up to 0xe0.</changelog>
</package>
<package pkgid="5208fdc5fc8cc0129b7865ab323d56d9acca12a09c52c1c7ad35eef8a3d3321a" name="mod_dav_svn" arch="i686">
  <version epoch="0" ver="1.6.11" rel="15.el6_7"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-13" date="1425297600">- retain file properties on foreign repo merge (#922718)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-14" date="1425470400">- fix excessive socket use for fsfs memcache caching (#1039085)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-15" date="1438689600">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3187</changelog>
</package>
<package pkgid="b334f26ff0aac0d01ce66ce90e5b0a1636db50305012b734231e8878e4aef81b" name="mod_perl" arch="i686">
  <version epoch="0" ver="2.0.4" rel="12.el6_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.0.4-10" date="1260273600">- add security fix for CVE-2009-0796 (#544455)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.0.4-11" date="1397649600">- fix a race condition in tipool management (#1072766)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.0.4-12" date="1535544000">- Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
  account via a user-owned .htaccess) (bug #1626272)</changelog>
</package>
<package pkgid="998c1f690955ed5f658eff6d8d2da9c4b49b1684ca58a4096641a1bd30c920e7" name="mod_perl-devel" arch="i686">
  <version epoch="0" ver="2.0.4" rel="12.el6_10"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.0.4-10" date="1260273600">- add security fix for CVE-2009-0796 (#544455)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.0.4-11" date="1397649600">- fix a race condition in tipool management (#1072766)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.0.4-12" date="1535544000">- Fix CVE-2011-2767 (arbitrary Perl code execution in the context of the user
  account via a user-owned .htaccess) (bug #1626272)</changelog>
</package>
<package pkgid="54960ad97179a7b42618d6d77f7fbbf8def47d1c43111482d4b47ee0997e41a8" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.2.15" rel="47.sl6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-46" date="1439208000">- core: fix chunk header parsing defect (CVE-2015-3183)</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-47" date="1439899200">- fix regressions caused by fix for CVE-2015-3183</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1440417600">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="7185004ee5340e4ffe5f0e5318b3e0f6b1f20d51862bcc1b9bc2b6cb66f0ab16" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.2.15" rel="54.sl6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 2.2.15-53" date="1454587200">- core: fix possible long graceful restart caused by race condition between
  httpd children processes (#1301758)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.15-54" date="1468324800">- add security fix for CVE-2016-5387</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1468843200">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="3e1116894f8fee4c847c536cbe25668dc4b0d19f25e5af091c32352970aba046" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.2.15" rel="60.sl6.4"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.3" date="1498737600">- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.4" date="1499428800">- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1499774400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="811cf2254cc49e3bccee085cfd681d4c6bf6ffc5fff1021122c5f546b6ddb776" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.2.15" rel="60.sl6.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.4" date="1499428800">- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.5" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1502798400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="e9221783af9d79298e80c8548d8aec60e493799bc5eaba6511f1bc1a57b7139b" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.2.15" rel="60.sl6.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.5" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.6" date="1505822400">- Resolves: #1493061 - CVE-2017-9798 httpd: various flaws</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1508414400">- Added Source: httpd-spec_sl_index.html.sl.patch
--&gt;  The index.html file is outside of the source tarball, so we need to patch it in the install step
- Ran Regex: vstring Red Hat =&gt; vstring Scientific Linux
--&gt;  This package must not feature TUVs branding
- Ran Regex: distro Red Hat =&gt; distro Scientific Linux
--&gt;  This package must not feature TUVs branding
- Added Source: httpd-sl_index.html.sl.patch
--&gt;  This patch removes TUV branding from the default index.html
- Added Source: httpd.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="b76f67314c3c2c9196470fce18312aa92c67ebfd27c901659808e637fb8f2d1a" name="mutt" arch="i686">
  <version epoch="5" ver="1.5.20" rel="9.20091214hg736b6a.el6"/>
  <changelog author="Jan Pacner &lt;jpacner@redhat.com&gt; - 5:1.5.20-7.20091214hg736b6a" date="1406289600">- Resolves: #690409 (mutt crash - seg fault in mx_update_context), attempt No. 3</changelog>
  <changelog author="Matej Muzila &lt;mmuzila@redhat.com&gt; - 5:1.5.20-8.20091214hg736b6a" date="1476964800">- Resolves #1196787 (System default CA bundle not set as default in compiled-in
  default or config)
- Resolves #1212646 (mutt sends e-mail with broken "From" header, which has no
  host part)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 5:1.5.20-9.20091214hg736b6a" date="1532606400">- Resolves: CVE-2018-14354 CVE-2018-14357 CVE-2018-14362</changelog>
</package>
<package pkgid="4238037acbbe6e7b0d751fde2a3841b4d9f1112067e25dbcf2bb1ab7a691345d" name="mysql" arch="i686">
  <version epoch="0" ver="5.1.73" rel="8.el6_8"/>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.1.73-7" date="1456401600">- Fixed reload_acl_and_cache
  Resolves: #1281370</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.1.73-8" date="1481457600">- Fix CVE-2016-6662 and CVE-2016-6663
  Resolves: #1397309</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1485259200">- Added Patch: mysql_events_2.result.patch
--&gt;  Scientific Linux is an Enterprise Linux, modify the script to know this
- Added Source: mysql.ini
--&gt;  Config file for automated patch script</changelog>
</package>
<package pkgid="724a34065729bd48c2b62eac6d6d110f64df06891172cebd8136f1e8e706975a" name="mysql-bench" arch="i686">
  <version epoch="0" ver="5.1.73" rel="8.el6_8"/>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.1.73-7" date="1456401600">- Fixed reload_acl_and_cache
  Resolves: #1281370</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.1.73-8" date="1481457600">- Fix CVE-2016-6662 and CVE-2016-6663
  Resolves: #1397309</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1485259200">- Added Patch: mysql_events_2.result.patch
--&gt;  Scientific Linux is an Enterprise Linux, modify the script to know this
- Added Source: mysql.ini
--&gt;  Config file for automated patch script</changelog>
</package>
<package pkgid="28a0929bdeec6c520eea383e9dc8f398a5572945528cee989287189b384f49a9" name="mysql-devel" arch="i686">
  <version epoch="0" ver="5.1.73" rel="8.el6_8"/>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.1.73-7" date="1456401600">- Fixed reload_acl_and_cache
  Resolves: #1281370</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.1.73-8" date="1481457600">- Fix CVE-2016-6662 and CVE-2016-6663
  Resolves: #1397309</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1485259200">- Added Patch: mysql_events_2.result.patch
--&gt;  Scientific Linux is an Enterprise Linux, modify the script to know this
- Added Source: mysql.ini
--&gt;  Config file for automated patch script</changelog>
</package>
<package pkgid="4254ef63aa37c4bfafff6c7a6f29b98271bc4a26a57191f8de0ec40caed2e725" name="mysql-embedded" arch="i686">
  <version epoch="0" ver="5.1.73" rel="8.el6_8"/>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.1.73-7" date="1456401600">- Fixed reload_acl_and_cache
  Resolves: #1281370</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.1.73-8" date="1481457600">- Fix CVE-2016-6662 and CVE-2016-6663
  Resolves: #1397309</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1485259200">- Added Patch: mysql_events_2.result.patch
--&gt;  Scientific Linux is an Enterprise Linux, modify the script to know this
- Added Source: mysql.ini
--&gt;  Config file for automated patch script</changelog>
</package>
<package pkgid="0ad1113c3e52b67a7f3fd05b3d7209c1f77b4a1bb6d35789bfe3d3dbe05577d0" name="mysql-embedded-devel" arch="i686">
  <version epoch="0" ver="5.1.73" rel="8.el6_8"/>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.1.73-7" date="1456401600">- Fixed reload_acl_and_cache
  Resolves: #1281370</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.1.73-8" date="1481457600">- Fix CVE-2016-6662 and CVE-2016-6663
  Resolves: #1397309</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1485259200">- Added Patch: mysql_events_2.result.patch
--&gt;  Scientific Linux is an Enterprise Linux, modify the script to know this
- Added Source: mysql.ini
--&gt;  Config file for automated patch script</changelog>
</package>
<package pkgid="3ae7749281395d87188923fc17a9e66871548f14f417203703dd07a0cd271a0b" name="mysql-libs" arch="i686">
  <version epoch="0" ver="5.1.73" rel="8.el6_8"/>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.1.73-7" date="1456401600">- Fixed reload_acl_and_cache
  Resolves: #1281370</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.1.73-8" date="1481457600">- Fix CVE-2016-6662 and CVE-2016-6663
  Resolves: #1397309</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1485259200">- Added Patch: mysql_events_2.result.patch
--&gt;  Scientific Linux is an Enterprise Linux, modify the script to know this
- Added Source: mysql.ini
--&gt;  Config file for automated patch script</changelog>
</package>
<package pkgid="e4e0a7c025c9cf50dac523c2efca50a63c2e9177ff515a6a81f6bbd0899653b3" name="mysql-server" arch="i686">
  <version epoch="0" ver="5.1.73" rel="8.el6_8"/>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.1.73-7" date="1456401600">- Fixed reload_acl_and_cache
  Resolves: #1281370</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.1.73-8" date="1481457600">- Fix CVE-2016-6662 and CVE-2016-6663
  Resolves: #1397309</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1485259200">- Added Patch: mysql_events_2.result.patch
--&gt;  Scientific Linux is an Enterprise Linux, modify the script to know this
- Added Source: mysql.ini
--&gt;  Config file for automated patch script</changelog>
</package>
<package pkgid="7e2e84a4b77347db31b016d4c96c34c5e5a3224391953e58a985b39bc07efe12" name="mysql-test" arch="i686">
  <version epoch="0" ver="5.1.73" rel="8.el6_8"/>
  <changelog author="Jakub Dor&#x148;&#xE1;k &lt;jdornak@redhat.com&gt; - 5.1.73-7" date="1456401600">- Fixed reload_acl_and_cache
  Resolves: #1281370</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 5.1.73-8" date="1481457600">- Fix CVE-2016-6662 and CVE-2016-6663
  Resolves: #1397309</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1485259200">- Added Patch: mysql_events_2.result.patch
--&gt;  Scientific Linux is an Enterprise Linux, modify the script to know this
- Added Source: mysql.ini
--&gt;  Config file for automated patch script</changelog>
</package>
<package pkgid="ff9af3b970d3c1185d2cc549822eac974abe04c26b3f39e01901e760412cbf9e" name="net-snmp" arch="i686">
  <version epoch="1" ver="5.5" rel="54.el6_7.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-53" date="1429876800">- Quicker loading of IP-MIB::ipAddressTable (#1191393)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-54" date="1430395200">- Quicker loading of IP-MIB::ipAddrTable (#1191393)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-54.el6_7.1" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248410)</changelog>
</package>
<package pkgid="b0a6b185d46fc86ea9a0695fcf16f69761759e48e4a1dd20c53617f6f9496eb4" name="net-snmp" arch="i686">
  <version epoch="1" ver="5.5" rel="60.el6_10.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6" date="1479902400">- fix reading of ipAddressTable from /proc/net/if_inet6 on Linux (#1396337)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6.1" date="1569499200">- fix fsync issue (#1703099)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6.2" date="1604491200">- fix CVE-2020-15862 (#1875960)</changelog>
</package>
<package pkgid="65851eadb0c449d4ba8576fc6a3b0dc194cfa84548d856a619fbe72818845a8a" name="net-snmp-devel" arch="i686">
  <version epoch="1" ver="5.5" rel="54.el6_7.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-53" date="1429876800">- Quicker loading of IP-MIB::ipAddressTable (#1191393)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-54" date="1430395200">- Quicker loading of IP-MIB::ipAddrTable (#1191393)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-54.el6_7.1" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248410)</changelog>
</package>
<package pkgid="963c5bce27f67b465c2db63793d574a1902c50438dc012fcf8fa1ba803b4e02a" name="net-snmp-devel" arch="i686">
  <version epoch="1" ver="5.5" rel="60.el6_10.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6" date="1479902400">- fix reading of ipAddressTable from /proc/net/if_inet6 on Linux (#1396337)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6.1" date="1569499200">- fix fsync issue (#1703099)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6.2" date="1604491200">- fix CVE-2020-15862 (#1875960)</changelog>
</package>
<package pkgid="de85cf7186b6bf46b6eb5b4b9645ca0a64b4afe6fa0d749842cc8709ecb28e05" name="net-snmp-libs" arch="i686">
  <version epoch="1" ver="5.5" rel="54.el6_7.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-53" date="1429876800">- Quicker loading of IP-MIB::ipAddressTable (#1191393)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-54" date="1430395200">- Quicker loading of IP-MIB::ipAddrTable (#1191393)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-54.el6_7.1" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248410)</changelog>
</package>
<package pkgid="c0c3aad58e11ebd52cd0a15fe50b7096ba65f974ce4c1210c4eeeb8816f9cdd5" name="net-snmp-libs" arch="i686">
  <version epoch="1" ver="5.5" rel="60.el6_10.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6" date="1479902400">- fix reading of ipAddressTable from /proc/net/if_inet6 on Linux (#1396337)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6.1" date="1569499200">- fix fsync issue (#1703099)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6.2" date="1604491200">- fix CVE-2020-15862 (#1875960)</changelog>
</package>
<package pkgid="29caa09298bfe4ae03f0cef304a47d9e0889246b0c8ac3a0c00a66316fec20a0" name="net-snmp-perl" arch="i686">
  <version epoch="1" ver="5.5" rel="54.el6_7.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-53" date="1429876800">- Quicker loading of IP-MIB::ipAddressTable (#1191393)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-54" date="1430395200">- Quicker loading of IP-MIB::ipAddrTable (#1191393)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-54.el6_7.1" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248410)</changelog>
</package>
<package pkgid="78325e85f40ab64bd0dadbc492e7f10fc8b8a4f7259825976bfd305e1ead81ac" name="net-snmp-perl" arch="i686">
  <version epoch="1" ver="5.5" rel="60.el6_10.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6" date="1479902400">- fix reading of ipAddressTable from /proc/net/if_inet6 on Linux (#1396337)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6.1" date="1569499200">- fix fsync issue (#1703099)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6.2" date="1604491200">- fix CVE-2020-15862 (#1875960)</changelog>
</package>
<package pkgid="9ad093076a4d2972bc5133c94e2d437203dd228b35aba251d54bb3e4c674909e" name="net-snmp-python" arch="i686">
  <version epoch="1" ver="5.5" rel="54.el6_7.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-53" date="1429876800">- Quicker loading of IP-MIB::ipAddressTable (#1191393)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-54" date="1430395200">- Quicker loading of IP-MIB::ipAddrTable (#1191393)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-54.el6_7.1" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248410)</changelog>
</package>
<package pkgid="750c0fbab335a796dc1f774a2ab43f7bc0c60a07a9b1185727fc4f59a7907930" name="net-snmp-python" arch="i686">
  <version epoch="1" ver="5.5" rel="60.el6_10.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6" date="1479902400">- fix reading of ipAddressTable from /proc/net/if_inet6 on Linux (#1396337)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6.1" date="1569499200">- fix fsync issue (#1703099)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6.2" date="1604491200">- fix CVE-2020-15862 (#1875960)</changelog>
</package>
<package pkgid="19c243e8aaacf13db7518fc8c39f0c84ab59ff7e0999f5244861c8889d8685f0" name="net-snmp-utils" arch="i686">
  <version epoch="1" ver="5.5" rel="54.el6_7.1"/>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-53" date="1429876800">- Quicker loading of IP-MIB::ipAddressTable (#1191393)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-54" date="1430395200">- Quicker loading of IP-MIB::ipAddrTable (#1191393)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1:5.5-54.el6_7.1" date="1438257600">- Fixed parsing of invalid variables in incoming packets (#1248410)</changelog>
</package>
<package pkgid="da403aaf1340ce50542256f9eb994c6fdff436e0c5011d4e23ba1b1a19dfefd3" name="net-snmp-utils" arch="i686">
  <version epoch="1" ver="5.5" rel="60.el6_10.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6" date="1479902400">- fix reading of ipAddressTable from /proc/net/if_inet6 on Linux (#1396337)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6.1" date="1569499200">- fix fsync issue (#1703099)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.5-60.el6.2" date="1604491200">- fix CVE-2020-15862 (#1875960)</changelog>
</package>
<package pkgid="416c0da42ad9684921a5e4823e36fcb556b2d8211e6e70ae34ac9f887c54ae57" name="nscd" arch="i686">
  <version epoch="0" ver="2.12" rel="1.166.el6_7.7"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.5" date="1452772800">- Fix CVE-2015-7547: getaddrinfo() stack-based buffer overflow (#1296028).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.6" date="1453723200">- Create helper threads with enough stack for POSIX AIO and timers (#1301625).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.166.7" date="1453982400">- Update fix for CVE-2015-7547 (#1296028).</changelog>
</package>
<package pkgid="0fc19e61ca6a68a0c751c32cd5603a87f35c3c8974fbe08fc070e33133c40f4c" name="nscd" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6"/>
  <changelog author="Martin Sebor &lt;msebor@redhat.com&gt; - 2.12-1.207" date="1476705600">- Use FL_CLOEXEC in internal calls to fopen (#1012343).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.208" date="1476792000">- Update tests for struct sockaddr_storage changes (#1338673)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
</package>
<package pkgid="8634c1b443b0338539739640f68b82b9d4b0214243df26dd1ec3f1710a02646b" name="nscd" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6_9.2"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.209.1" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437618).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209.2" date="1495800000">- Avoid large allocas in the dynamic linker (#1452711)</changelog>
</package>
<package pkgid="5a1aa01da3094a2054c728bf5a8031c158af12a1e85f3e0e63b879f0968a887d" name="nscd" arch="i686">
  <version epoch="0" ver="2.12" rel="1.212.el6"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.210" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437147).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.211" date="1497873600">- Avoid large allocas in the dynamic linker (#1452717)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.212" date="1510920000">- CVE-2017-15670: glob: Fix one-byte overflow with GLOB_TILDE (#1504810)
- CVE-2017-15804: glob: Fix buffer overflow in GLOB_TILDE unescaping (#1504810)</changelog>
</package>
<package pkgid="54537ff7d07641fbd16514fe1c1b8e590918d01c7123c4ac48c3cd1e257e9e1e" name="nspr" arch="i686">
  <version epoch="0" ver="4.10.8" rel="2.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-1" date="1402488000">- Rebase to nspr-4.10.6
- Resolves: rhbz#1099618 - Rebase nspr in RHEL 6.6 to NSPR 4.10.6</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427025600">- Rebase to nspr-4.10.8
- Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269360 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
</package>
<package pkgid="c5e676aa70286dc249c9056c7b89c291b3a2e425893b43c10ce1085677231bf6" name="nspr" arch="i686">
  <version epoch="0" ver="4.11.0" rel="0.1.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427025600">- Rebase to nspr-4.10.8
- Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269360 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-0.1" date="1453809600">- Rebase to NSPR 4.11</changelog>
</package>
<package pkgid="c8282437ee45e103a38ba6914fc2c814f2036cb35d719a98e3fdfc06a6dcab06" name="nspr" arch="i686">
  <version epoch="0" ver="4.11.0" rel="1.el6"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427025600">- Rebase to nspr-4.10.8
- Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269361 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297891 - Rebase RHEL 6.8 to NSPR 4.11 in preparation for Firefox 45</changelog>
</package>
<package pkgid="31ad93d87ec3d49c3aa20d7e249e6f98da687e2be9d77897411065ebb8b29b42" name="nspr" arch="i686">
  <version epoch="0" ver="4.13.1" rel="1.el6"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297891 - Rebase RHEL 6.8 to NSPR 4.11 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.0-1" date="1475496000">- Rebase to NSPR 4.13</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1" date="1477051200">- Rebase to NSPR 4.13.1</changelog>
</package>
<package pkgid="60d40c88c7221813bcec0ceca5f8a07d850f933940c14cd19502685d7b583dc2" name="nspr" arch="i686">
  <version epoch="0" ver="4.19.0" rel="1.el6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1510142400">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519819200">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520337600">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="3ec55d700846f9f7e59f2203aed75413c3393a4518541e28d30eae1594d03b98" name="nspr" arch="i686">
  <version epoch="0" ver="4.21.0" rel="1.el6_10"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519819200">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520337600">- Rebase to NSPR 4.19</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.21.0-1" date="1568635200">- Rebase to NSPR 4.21</changelog>
</package>
<package pkgid="90b3c35f27b4f4b8f9b7a5ade6b9579714c4f14311b38fc189ba017654817a94" name="nspr-devel" arch="i686">
  <version epoch="0" ver="4.10.8" rel="2.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-1" date="1402488000">- Rebase to nspr-4.10.6
- Resolves: rhbz#1099618 - Rebase nspr in RHEL 6.6 to NSPR 4.10.6</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427025600">- Rebase to nspr-4.10.8
- Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269360 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
</package>
<package pkgid="c2ed3824cffca55fe9a287df48581493e1ad8fc3d446a8811f0ce1babac6fd8b" name="nspr-devel" arch="i686">
  <version epoch="0" ver="4.11.0" rel="0.1.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427025600">- Rebase to nspr-4.10.8
- Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269360 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-0.1" date="1453809600">- Rebase to NSPR 4.11</changelog>
</package>
<package pkgid="f976e3d1fddc45108777a0ed3addc27da81dacb73d83386ea796999664f461f1" name="nspr-devel" arch="i686">
  <version epoch="0" ver="4.11.0" rel="1.el6"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427025600">- Rebase to nspr-4.10.8
- Resolves: Bug 1200920 - Rebase nspr to 4.10.8 for Firefox 38 ESR [RHEL-6.6]</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269361 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297891 - Rebase RHEL 6.8 to NSPR 4.11 in preparation for Firefox 45</changelog>
</package>
<package pkgid="f4f309881bfa4c15f55c075b10b0d60f6f082d5c22d2cde509933553ee3e93cb" name="nspr-devel" arch="i686">
  <version epoch="0" ver="4.13.1" rel="1.el6"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297891 - Rebase RHEL 6.8 to NSPR 4.11 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.0-1" date="1475496000">- Rebase to NSPR 4.13</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1" date="1477051200">- Rebase to NSPR 4.13.1</changelog>
</package>
<package pkgid="656406402782c64b31d0d4cd33831a0d4d74ae74e5fcc664116482de27402ddd" name="nspr-devel" arch="i686">
  <version epoch="0" ver="4.19.0" rel="1.el6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1510142400">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519819200">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520337600">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="371c05559f0ebb77332c15478ef85f3febc3ab84a5cf77f08f1f3a6325985f33" name="nspr-devel" arch="i686">
  <version epoch="0" ver="4.21.0" rel="1.el6_10"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519819200">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520337600">- Rebase to NSPR 4.19</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.21.0-1" date="1568635200">- Rebase to NSPR 4.21</changelog>
</package>
<package pkgid="a01fc67fe6ac145ad4e9114e4bee299c490c8b27bdcd03a55c3e4f17ea77cd20" name="nss" arch="i686">
  <version epoch="0" ver="3.19.1" rel="5.el6_7"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-3" date="1434196800">- Additional NULL initialization.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-4" date="1435233600">- Sync up with the rhel-6.6 branch
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-5" date="1445428800">- Rebuild against updated NSPR</changelog>
</package>
<package pkgid="df1b720196bfd38befc97ce2d63484557a02394829b3ed89daa5e1d8474c1dea" name="nss" arch="i686">
  <version epoch="0" ver="3.19.1" rel="8.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-4" date="1435233600">- Sync up with the rhel-6.6 branch
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-5" date="1445428800">- Rebuild against updated NSPR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-8" date="1450180800">- Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
- Resolves: Bug 1289881</changelog>
</package>
<package pkgid="6aefdc0d3469fa501a3626ec0c6af17192bc3d49335710c469d366829cb83e96" name="nss" arch="i686">
  <version epoch="0" ver="3.21.0" rel="0.3.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.1" date="1454068800">- Rebase to NSS-3.21</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.2" date="1456142400">- Ensure abi compatibility</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.3" date="1456228800">- Ensure all ssl.sh tests are executed</changelog>
</package>
<package pkgid="d26027f7e0f9dd771640120c2ffce75692f3aebe65256e7a9f4d6d59613fd2f9" name="nss" arch="i686">
  <version epoch="0" ver="3.21.3" rel="2.el6_8"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-8" date="1458648000">- Ensure all ssl.sh tests are executed</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.21.3-1" date="1477396800">- Rebase to NSS 3.21.3
- Resolves: #1383885</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.3-2" date="1478606400">- Mozilla #1314604 / Red Hat CVE-2016-8635
- remove disable_hw_gcm.patch which hasn't been used since 3.16.1</changelog>
</package>
<package pkgid="7cc5549f4579ec949595a04218a940b1a374e06b548b560adad9a037f3ae00f5" name="nss" arch="i686">
  <version epoch="0" ver="3.28.3" rel="3.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1488283200">- Rebase to 3.28.3
- Remove upstreamed moz-1282627-rh-1294606.patch,
  moz-1312141-rh-1387811.patch, moz-1315936.patch, and
  moz-1318561.patch
- Remove no longer necessary nss-duplicate-ciphers.patch
- Disable X25519 and exclude tests using it
- Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
</package>
<package pkgid="341424f107605e2efa56ea377f9da8108ae2db0ab0832e49c85ffc8568c9d84f" name="nss" arch="i686">
  <version epoch="0" ver="3.28.4" rel="1.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to 3.28.4</changelog>
</package>
<package pkgid="940c84198fcb3cb475c933f37cde222d15063ac62f6d07ae2755573b1bc52a5a" name="nss" arch="i686">
  <version epoch="0" ver="3.28.4" rel="3.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to 3.28.4</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-2" date="1493985600">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
</package>
<package pkgid="e2fa4797d2e8604936ee0cd028f74d80384fbbd2c33e1655aa39110c70fb212c" name="nss" arch="i686">
  <version epoch="0" ver="3.28.4" rel="4.el6_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-2" date="1493985600">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="4a1bc97a7418714dc51bbf0684a5f1b1c6f3a27af7e3c1475d8f0b4c43991606" name="nss" arch="i686">
  <version epoch="0" ver="3.36.0" rel="8.el6"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-6" date="1522238400">- Keep legacy code signing trust flags for backwards compatibility</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-7" date="1522324800">- rebuild</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-8" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="7653e2279deb2dca7db6a62952c1008fc94f45b10823b0f4f645c6b986e62d97" name="nss" arch="i686">
  <version epoch="0" ver="3.36.0" rel="9.el6_10"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-7" date="1522324800">- rebuild</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-8" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-9" date="1535457600">- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
  mistake (the symbol was not exported from libnss)</changelog>
</package>
<package pkgid="7cbd70bef055e0a871668e47ae1776c67a1a03bd86da3ff2ed88c5186e374539" name="nss" arch="i686">
  <version epoch="0" ver="3.44.0" rel="7.el6_10"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1571140800">- Turn off cp TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 by default</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1571140801">- Fix gtest failure detection</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1571832000">- Add back missing Mozilla Policy</changelog>
</package>
<package pkgid="7a1381bf5106d668800756454046c787122b6972b129557a3cb8e4b6e3f20f95" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.19.1" rel="5.el6_7"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-3" date="1434196800">- Additional NULL initialization.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-4" date="1435233600">- Sync up with the rhel-6.6 branch
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-5" date="1445428800">- Rebuild against updated NSPR</changelog>
</package>
<package pkgid="bba9318f45bb7a116e9cd5d807c883914e788a7fa8686011da7f6ad361b7bf22" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.19.1" rel="8.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-4" date="1435233600">- Sync up with the rhel-6.6 branch
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-5" date="1445428800">- Rebuild against updated NSPR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-8" date="1450180800">- Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
- Resolves: Bug 1289881</changelog>
</package>
<package pkgid="beffbcee5247aeacf7ef0761c0d19f58217ff23da12d69cc70b31762edb3d510" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.21.0" rel="0.3.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.1" date="1454068800">- Rebase to NSS-3.21</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.2" date="1456142400">- Ensure abi compatibility</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.3" date="1456228800">- Ensure all ssl.sh tests are executed</changelog>
</package>
<package pkgid="aaf32f62f91d2d057a56b2d373b1863a6679bc5a2d4d13a8451ab08316d123af" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.21.3" rel="2.el6_8"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-8" date="1458648000">- Ensure all ssl.sh tests are executed</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.21.3-1" date="1477396800">- Rebase to NSS 3.21.3
- Resolves: #1383885</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.3-2" date="1478606400">- Mozilla #1314604 / Red Hat CVE-2016-8635
- remove disable_hw_gcm.patch which hasn't been used since 3.16.1</changelog>
</package>
<package pkgid="ae63529e5db2fa9582131bbbb98bc449442e2786a033b39266cab1c9eec334a4" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="3.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1488283200">- Rebase to 3.28.3
- Remove upstreamed moz-1282627-rh-1294606.patch,
  moz-1312141-rh-1387811.patch, moz-1315936.patch, and
  moz-1318561.patch
- Remove no longer necessary nss-duplicate-ciphers.patch
- Disable X25519 and exclude tests using it
- Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
</package>
<package pkgid="162d85a3cba111cacafb841c6c71583a0e5c191ef3737455bbe74252f607b210" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="1.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to 3.28.4</changelog>
</package>
<package pkgid="b1866c36523619b7f0b6e2d01029b4102c185368fa29fcd9bf9fb5adab41956d" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="3.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to 3.28.4</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-2" date="1493985600">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
</package>
<package pkgid="953584e75a9b917aa31170dd53aee2f08fdcf6e780ed443943db8c923eb4fe9e" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="4.el6_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-2" date="1493985600">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="e7e436d23ae1ecd3e63654c4cdcae3bf954f4ffc11caa84686d0272d3846012e" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.36.0" rel="8.el6"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-6" date="1522238400">- Keep legacy code signing trust flags for backwards compatibility</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-7" date="1522324800">- rebuild</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-8" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="8a0df9c1531aeccfb5512a9380b92512e4d267f4af0f49e87015027b9b928758" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.36.0" rel="9.el6_10"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-7" date="1522324800">- rebuild</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-8" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-9" date="1535457600">- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
  mistake (the symbol was not exported from libnss)</changelog>
</package>
<package pkgid="f5cc0e653315b63ed8f33b022a23930206be9436d42ad2a4c3afe9bcc5bfe820" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.44.0" rel="7.el6_10"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1571140800">- Turn off cp TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 by default</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1571140801">- Fix gtest failure detection</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1571832000">- Add back missing Mozilla Policy</changelog>
</package>
<package pkgid="f6d95487c691c5632d09f3230d72a1779b02d0035d3ff84b12ea85230ab96738" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.19.1" rel="5.el6_7"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-3" date="1434196800">- Additional NULL initialization.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-4" date="1435233600">- Sync up with the rhel-6.6 branch
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-5" date="1445428800">- Rebuild against updated NSPR</changelog>
</package>
<package pkgid="281c82e96fedf37e04b93c03a8d0803e4a6962494a5bc9b6669cfa96aadfa068" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.19.1" rel="8.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-4" date="1435233600">- Sync up with the rhel-6.6 branch
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-5" date="1445428800">- Rebuild against updated NSPR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-8" date="1450180800">- Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
- Resolves: Bug 1289881</changelog>
</package>
<package pkgid="57618524405d87c19d15b907331ebaf74de51d525730566c54419617bb072b8a" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.21.0" rel="0.3.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.1" date="1454068800">- Rebase to NSS-3.21</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.2" date="1456142400">- Ensure abi compatibility</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.3" date="1456228800">- Ensure all ssl.sh tests are executed</changelog>
</package>
<package pkgid="98904ced1e2ea2fe4ad60d28b6f2b190ea0dea0f0a553ca53f6522a9a646c814" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.21.3" rel="2.el6_8"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-8" date="1458648000">- Ensure all ssl.sh tests are executed</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.21.3-1" date="1477396800">- Rebase to NSS 3.21.3
- Resolves: #1383885</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.3-2" date="1478606400">- Mozilla #1314604 / Red Hat CVE-2016-8635
- remove disable_hw_gcm.patch which hasn't been used since 3.16.1</changelog>
</package>
<package pkgid="8697078f567eaa7fc24ca4ceeb358539f0e7f4aa8b677907c8280596d7468b72" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="3.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1488283200">- Rebase to 3.28.3
- Remove upstreamed moz-1282627-rh-1294606.patch,
  moz-1312141-rh-1387811.patch, moz-1315936.patch, and
  moz-1318561.patch
- Remove no longer necessary nss-duplicate-ciphers.patch
- Disable X25519 and exclude tests using it
- Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
</package>
<package pkgid="61935696953f1d5b878e854c59245ded87a1bb771c82814cd6b617124c9c7641" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="1.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to 3.28.4</changelog>
</package>
<package pkgid="7e7b4c5e7627985d759cda289ab28108389fb43545d4192b9aaf41a3b282e939" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="3.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to 3.28.4</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-2" date="1493985600">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
</package>
<package pkgid="42e593d054692a06568abb413b86d6fa3fa686520cd215efc4cc820bcbcf1df6" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="4.el6_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-2" date="1493985600">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="ee086e9969f44c0e2e751191bfe182ff9da745839d4138f82861392531017a7d" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.36.0" rel="8.el6"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-6" date="1522238400">- Keep legacy code signing trust flags for backwards compatibility</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-7" date="1522324800">- rebuild</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-8" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="3955ebf933c501f7a77618de261c00ee4bff49630be140505a1914ab5cd7f869" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.36.0" rel="9.el6_10"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-7" date="1522324800">- rebuild</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-8" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-9" date="1535457600">- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
  mistake (the symbol was not exported from libnss)</changelog>
</package>
<package pkgid="c9ec26643fab67c23805dacaeceab64d9677edd959e2876ca109ec12a6265ec7" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.44.0" rel="7.el6_10"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1571140800">- Turn off cp TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 by default</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1571140801">- Fix gtest failure detection</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1571832000">- Add back missing Mozilla Policy</changelog>
</package>
<package pkgid="edba8e85df8c9badc0f106b54aa56f0b9ad5bf260900a0aacd20546150eb9a40" name="nss-softokn" arch="i686">
  <version epoch="0" ver="3.14.3" rel="23.el6_7"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.14.3-21" date="1421409600">- Require nss-softokn-freebl of at least the same version and release
- Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.14.3-22" date="1422446400">- fix permissions on dracut install file.
- Resolves: Bug 1182297</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-23" date="1439208000">- Pick up upstream freebl patch for CVE-2015-2730
- Check for P == Q or P ==-Q before adding P and Q</changelog>
</package>
<package pkgid="5f346059c0b817e31dd71c56b780c8c08f6d501a5bf6c5177eb8b72d91b7c83a" name="nss-softokn" arch="i686">
  <version epoch="0" ver="3.44.0" rel="5.el6_10"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1570449600">- add back old sqlite patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1571054400">- actually turn on the old sqlite patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1571140800">- include sqlite3_open_v2 in the patch</changelog>
</package>
<package pkgid="5e0e936804b3227ebd8b2d9b32ee55a2ea10c21e7d5fed428fd5e237c95f5e51" name="nss-softokn" arch="i686">
  <version epoch="0" ver="3.44.0" rel="6.el6_10"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1571054400">- actually turn on the old sqlite patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1571140800">- include sqlite3_open_v2 in the patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775909)</changelog>
</package>
<package pkgid="5bad8326dbacdc0e00c4598fed0472660a16616085ade853ab7966a7b3e02144" name="nss-softokn-devel" arch="i686">
  <version epoch="0" ver="3.14.3" rel="23.el6_7"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.14.3-21" date="1421409600">- Require nss-softokn-freebl of at least the same version and release
- Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.14.3-22" date="1422446400">- fix permissions on dracut install file.
- Resolves: Bug 1182297</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-23" date="1439208000">- Pick up upstream freebl patch for CVE-2015-2730
- Check for P == Q or P ==-Q before adding P and Q</changelog>
</package>
<package pkgid="7cd6baf9f77fe0889bd3df37ba0b69d1a8098718c9adda2cf6ab1d95f721602c" name="nss-softokn-devel" arch="i686">
  <version epoch="0" ver="3.44.0" rel="5.el6_10"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1570449600">- add back old sqlite patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1571054400">- actually turn on the old sqlite patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1571140800">- include sqlite3_open_v2 in the patch</changelog>
</package>
<package pkgid="f8e5626d1adbe04d2fdccf2581069434143452419c0079e25dc683f314fbf267" name="nss-softokn-devel" arch="i686">
  <version epoch="0" ver="3.44.0" rel="6.el6_10"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1571054400">- actually turn on the old sqlite patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1571140800">- include sqlite3_open_v2 in the patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775909)</changelog>
</package>
<package pkgid="4708139ddf6d3afb16125be2f6720086b662b2c8b99dda1f838be724d95dcaea" name="nss-softokn-freebl" arch="i686">
  <version epoch="0" ver="3.14.3" rel="23.el6_7"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.14.3-21" date="1421409600">- Require nss-softokn-freebl of at least the same version and release
- Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.14.3-22" date="1422446400">- fix permissions on dracut install file.
- Resolves: Bug 1182297</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-23" date="1439208000">- Pick up upstream freebl patch for CVE-2015-2730
- Check for P == Q or P ==-Q before adding P and Q</changelog>
</package>
<package pkgid="3ef47aa10369ef5e10b78e6e4d6871c8992140b3876acf2e67fda9822f68b021" name="nss-softokn-freebl" arch="i686">
  <version epoch="0" ver="3.44.0" rel="5.el6_10"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1570449600">- add back old sqlite patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1571054400">- actually turn on the old sqlite patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1571140800">- include sqlite3_open_v2 in the patch</changelog>
</package>
<package pkgid="70b6a495b8b23ee84cd4b9edf0b604356763656b1bcd51c6d3da401b2c880e2d" name="nss-softokn-freebl" arch="i686">
  <version epoch="0" ver="3.44.0" rel="6.el6_10"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1571054400">- actually turn on the old sqlite patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1571140800">- include sqlite3_open_v2 in the patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775909)</changelog>
</package>
<package pkgid="fdc3eb7a853448f5eaac64424577997a1a4b3bd1553a15020292e51fd21fdfe3" name="nss-softokn-freebl-devel" arch="i686">
  <version epoch="0" ver="3.14.3" rel="23.el6_7"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.14.3-21" date="1421409600">- Require nss-softokn-freebl of at least the same version and release
- Resolves: Bug 1182662 - nss-softokn-3.14.3-19.el6_6 breaking yum and rpm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.14.3-22" date="1422446400">- fix permissions on dracut install file.
- Resolves: Bug 1182297</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.14.3-23" date="1439208000">- Pick up upstream freebl patch for CVE-2015-2730
- Check for P == Q or P ==-Q before adding P and Q</changelog>
</package>
<package pkgid="9a5978576dc18065ac5080ce9c925d5ca9cca66e2d67e068daf38cbf70a4eaad" name="nss-softokn-freebl-devel" arch="i686">
  <version epoch="0" ver="3.44.0" rel="5.el6_10"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1570449600">- add back old sqlite patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1571054400">- actually turn on the old sqlite patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1571140800">- include sqlite3_open_v2 in the patch</changelog>
</package>
<package pkgid="9fbf5c0a6e9c9cbc4f659846e88b70d70a4a73f63f16219baeb4659ff1cf98dd" name="nss-softokn-freebl-devel" arch="i686">
  <version epoch="0" ver="3.44.0" rel="6.el6_10"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1571054400">- actually turn on the old sqlite patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1571140800">- include sqlite3_open_v2 in the patch</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775909)</changelog>
</package>
<package pkgid="b3e23ce5f0285beedc2b756754ced50c620b38d0359110c291b2551c26014871" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.19.1" rel="5.el6_7"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-3" date="1434196800">- Additional NULL initialization.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-4" date="1435233600">- Sync up with the rhel-6.6 branch
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-5" date="1445428800">- Rebuild against updated NSPR</changelog>
</package>
<package pkgid="eb59b172da9e2e746a29f777de04b11f4304b81fcb205995247841b427756864" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.19.1" rel="8.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-4" date="1435233600">- Sync up with the rhel-6.6 branch
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-5" date="1445428800">- Rebuild against updated NSPR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-8" date="1450180800">- Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
- Resolves: Bug 1289881</changelog>
</package>
<package pkgid="a70dee66793b4024d7471f4f7d9dd1294af362b49d40da0720dff85cc83c05ae" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.21.0" rel="0.3.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.1" date="1454068800">- Rebase to NSS-3.21</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.2" date="1456142400">- Ensure abi compatibility</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.3" date="1456228800">- Ensure all ssl.sh tests are executed</changelog>
</package>
<package pkgid="8b6ab67e04c0f4496ed608f1dba297c5d9babfa95d0ec3d6ba89010fc9dc6433" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.21.3" rel="2.el6_8"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-8" date="1458648000">- Ensure all ssl.sh tests are executed</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.21.3-1" date="1477396800">- Rebase to NSS 3.21.3
- Resolves: #1383885</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.3-2" date="1478606400">- Mozilla #1314604 / Red Hat CVE-2016-8635
- remove disable_hw_gcm.patch which hasn't been used since 3.16.1</changelog>
</package>
<package pkgid="9a5a85ceea1504001f1c259b66f85da82242fb54fa68a13ef4be8fc692b60bc9" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.28.3" rel="3.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1488283200">- Rebase to 3.28.3
- Remove upstreamed moz-1282627-rh-1294606.patch,
  moz-1312141-rh-1387811.patch, moz-1315936.patch, and
  moz-1318561.patch
- Remove no longer necessary nss-duplicate-ciphers.patch
- Disable X25519 and exclude tests using it
- Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
</package>
<package pkgid="c8ff4e583b62edc1ae770a1dc6b963cad8c0a38c02f83b5b232e62cabb0c55b0" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.28.4" rel="1.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to 3.28.4</changelog>
</package>
<package pkgid="76888f7d23a7ac5398d73c3cebd65d294d2390e671e4fb10312f206506df2268" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.28.4" rel="3.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to 3.28.4</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-2" date="1493985600">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
</package>
<package pkgid="383490d0bc5c623aa7b85ef1aa9f432e20df7ee37b1fa2cce47613a5d1b70545" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.28.4" rel="4.el6_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-2" date="1493985600">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="8bf4e30693f410c9046b518ef1fc9dbc04f4937dc08aabc762aefde7333c09ff" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.36.0" rel="8.el6"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-6" date="1522238400">- Keep legacy code signing trust flags for backwards compatibility</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-7" date="1522324800">- rebuild</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-8" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="815ebece774b416cc306cb60fadc77b659a0925658e1cc2ce47b4e5927b8be02" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.36.0" rel="9.el6_10"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-7" date="1522324800">- rebuild</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-8" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-9" date="1535457600">- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
  mistake (the symbol was not exported from libnss)</changelog>
</package>
<package pkgid="af080881b84bb309f2007c6ac395e24a1a27f8e8dac4a2a1a05c12881ba322d0" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.44.0" rel="7.el6_10"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1571140800">- Turn off cp TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 by default</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1571140801">- Fix gtest failure detection</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1571832000">- Add back missing Mozilla Policy</changelog>
</package>
<package pkgid="e5682788eebf1b3e12bb92830edffe7ef6058ec2941c5e89fa41c32101041aa4" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.19.1" rel="5.el6_7"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-3" date="1434196800">- Additional NULL initialization.</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-4" date="1435233600">- Sync up with the rhel-6.6 branch
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-5" date="1445428800">- Rebuild against updated NSPR</changelog>
</package>
<package pkgid="4fbea2bae45166f484e932d5e08b9f14dc833bb7510837b8e1c21e9c4d05127a" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.19.1" rel="8.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-4" date="1435233600">- Sync up with the rhel-6.6 branch
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-5" date="1445428800">- Rebuild against updated NSPR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-8" date="1450180800">- Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol
- Resolves: Bug 1289881</changelog>
</package>
<package pkgid="682205f12b18f8161c89939babaaa50040f6002a1d832edcc307688f03437cf8" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.21.0" rel="0.3.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.1" date="1454068800">- Rebase to NSS-3.21</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.2" date="1456142400">- Ensure abi compatibility</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.3" date="1456228800">- Ensure all ssl.sh tests are executed</changelog>
</package>
<package pkgid="cac97e1eb09634d45830eca50ceec7090520fc602033d5c9713f8de38edac1f7" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.21.3" rel="2.el6_8"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-8" date="1458648000">- Ensure all ssl.sh tests are executed</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.21.3-1" date="1477396800">- Rebase to NSS 3.21.3
- Resolves: #1383885</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.3-2" date="1478606400">- Mozilla #1314604 / Red Hat CVE-2016-8635
- remove disable_hw_gcm.patch which hasn't been used since 3.16.1</changelog>
</package>
<package pkgid="a3b687efc9ed489015d3a3f5bdbe60553327f59fb2621cd6e539bb0d649d2aab" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.28.3" rel="3.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1488283200">- Rebase to 3.28.3
- Remove upstreamed moz-1282627-rh-1294606.patch,
  moz-1312141-rh-1387811.patch, moz-1315936.patch, and
  moz-1318561.patch
- Remove no longer necessary nss-duplicate-ciphers.patch
- Disable X25519 and exclude tests using it
- Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
</package>
<package pkgid="3869746474095c202e68aa8f8e593aa144ab2e37620ffc6d313e9c8e3e3ceee5" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.28.4" rel="1.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to 3.28.4</changelog>
</package>
<package pkgid="9f00aaa32d5c5205f713ce27b1b04b9dc069bb4b533a0ac65fcbff0415305424" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.28.4" rel="3.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to 3.28.4</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-2" date="1493985600">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
</package>
<package pkgid="402a5886cc49ae448d07dbb3dce6c45cde9747ca5af67490554e6cace239292e" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.28.4" rel="4.el6_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-2" date="1493985600">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="977af4e279c8caf88aa64dde5fb48df951034fc08fdc52f5a391da87acf597bc" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.36.0" rel="8.el6"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-6" date="1522238400">- Keep legacy code signing trust flags for backwards compatibility</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-7" date="1522324800">- rebuild</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-8" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="908e36daccc04e1b280bc0f9532156d97d10ef7bb960731fc8a1ded586c1168e" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.36.0" rel="9.el6_10"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.36.0-7" date="1522324800">- rebuild</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-8" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-9" date="1535457600">- Backport upstream fix for CVE-2018-12384
- Remove nss-lockcert-api-change.patch, which turned out to be a
  mistake (the symbol was not exported from libnss)</changelog>
</package>
<package pkgid="437c2a3d09adf393d984540d955d1c4f586548d7c31eec94f149dcc2284dee21" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.44.0" rel="7.el6_10"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-5" date="1571140800">- Turn off cp TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 by default</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1571140801">- Fix gtest failure detection</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1571832000">- Add back missing Mozilla Policy</changelog>
</package>
<package pkgid="9c7944f88c35c7eb10efe5341c4aa6e53d1440aa52d8346f31033f4446c6d795" name="nss-util" arch="i686">
  <version epoch="0" ver="3.19.1" rel="2.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-1" date="1427112000">- Resolves: Bug 1200937 - [RHEL6.6] nss-util 3.18 rebase required for firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-1" date="1433592000">- Rebase to nss-3.19.1
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-2" date="1444996800">- Resolves: Bug 1269355 - CVE-2015-7182 CVE-2015-7181</changelog>
</package>
<package pkgid="c5fed11c021179f5a60c7fbcc474ca21391e4119d1efc66efaada27649b18688" name="nss-util" arch="i686">
  <version epoch="0" ver="3.19.1" rel="5.el6_7"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-3" date="1456315200">- Include the fix for CVE-2016-1950 from NSS 3.19.2.3</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-4" date="1456401600">- Rebuild to ensure use of correct NSPR.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-5" date="1457006400">- Actually apply the fix for CVE-2016-1950 from NSS 3.19.2.3 ...</changelog>
</package>
<package pkgid="a8ecb9184a2e23d5ceaa5d5645f27103dd3a2f394b5e0b7709223f4507e03bf0" name="nss-util" arch="i686">
  <version epoch="0" ver="3.21.0" rel="0.3.el6_7"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-4" date="1456401600">- Rebuild to ensure use of correct NSPR.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-5" date="1457006400">- Actually apply the fix for CVE-2016-1950 from NSS 3.19.2.3 ...</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.3" date="1457524800">- Rebase RHEL 6.7.z to NSS-util 3.21 in preparation for Firefox 45
- Resolves: Bug 1299874
- Update upstream patch for CVE-2016-1950</changelog>
</package>
<package pkgid="33141bcfa11b5652bd974126dc816958c77b3c0729b089fd58d97e85fb0bfdd8" name="nss-util" arch="i686">
  <version epoch="0" ver="3.21.3" rel="1.el6_8"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-1" date="1453118400">- Rebase to nss-util from nss 3.21
- Resolves: Bug 1297890 - Rebase RHEL 6.8 to NSS-util 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-2" date="1456142400">- Added upstream patch for CVE-2016-1950</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.21.3-1" date="1477310400">- Rebase to nss-3.21.3
- Remove patch for CVE-2016-1950, which is included in the release
- Related: Bug 1347908</changelog>
</package>
<package pkgid="960d21d2f16a920a6a6e211873eb94ea1c1f92daf866d3b750b5bf7fcd17f972" name="nss-util" arch="i686">
  <version epoch="0" ver="3.28.3" rel="1.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-2" date="1475582400">- Add missing source files</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-3" date="1479902400">- Tolerate policy file without last empty line</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1487937600">- Rebase to NSS 3.28.3
- Package new header eccutil.h</changelog>
</package>
<package pkgid="03323817a4f703171f29d59953383e72e2347a8efdb81079716033b48f2a46db" name="nss-util" arch="i686">
  <version epoch="0" ver="3.28.4" rel="1.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-3" date="1479902400">- Tolerate policy file without last empty line</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1487937600">- Rebase to NSS 3.28.3
- Package new header eccutil.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to NSS 3.28.4 to accommodate base64 encoding fix</changelog>
</package>
<package pkgid="ca0a5ca9aed228b393ee1d2e5fd89c0f40e76f196c210d211cd900c675837d18" name="nss-util" arch="i686">
  <version epoch="0" ver="3.36.0" rel="1.el6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1512388800">- Rebase to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519819200">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520424000">- Rebase to NSS 3.36.0</changelog>
</package>
<package pkgid="609f04ec4a2525a0d8d9a07b2ee809fea3ca69c1fc8344e4edf085c4eba37769" name="nss-util" arch="i686">
  <version epoch="0" ver="3.44.0" rel="1.el6_10"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519819200">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520424000">- Rebase to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-1" date="1566216000">- Rebase to NSS 3.44.0 for Firefox 68</changelog>
</package>
<package pkgid="aecafb877ddb9748b18a014f86e13a8a7d960ffbdf0d1a489e9c6d6e8c059884" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.19.1" rel="2.el6_7"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-1" date="1427112000">- Resolves: Bug 1200937 - [RHEL6.6] nss-util 3.18 rebase required for firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-1" date="1433592000">- Rebase to nss-3.19.1
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-2" date="1444996800">- Resolves: Bug 1269355 - CVE-2015-7182 CVE-2015-7181</changelog>
</package>
<package pkgid="793facf8d76e4c860c54623245460bfaa4ae4b94d1beffb764bf7bab6fa0c80f" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.19.1" rel="5.el6_7"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-3" date="1456315200">- Include the fix for CVE-2016-1950 from NSS 3.19.2.3</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-4" date="1456401600">- Rebuild to ensure use of correct NSPR.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-5" date="1457006400">- Actually apply the fix for CVE-2016-1950 from NSS 3.19.2.3 ...</changelog>
</package>
<package pkgid="3bf24da8b8b4a7efe874d61a53021f5f875a6e5f9c033ce6af8835cc6a8d7681" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.21.0" rel="0.3.el6_7"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-4" date="1456401600">- Rebuild to ensure use of correct NSPR.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.19.1-5" date="1457006400">- Actually apply the fix for CVE-2016-1950 from NSS 3.19.2.3 ...</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-0.3" date="1457524800">- Rebase RHEL 6.7.z to NSS-util 3.21 in preparation for Firefox 45
- Resolves: Bug 1299874
- Update upstream patch for CVE-2016-1950</changelog>
</package>
<package pkgid="07fc5f0159fbaef3550eceb3e720611e2d117bcf6a00b1ed84b65f83b9c22b57" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.21.3" rel="1.el6_8"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-1" date="1453118400">- Rebase to nss-util from nss 3.21
- Resolves: Bug 1297890 - Rebase RHEL 6.8 to NSS-util 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-2" date="1456142400">- Added upstream patch for CVE-2016-1950</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.21.3-1" date="1477310400">- Rebase to nss-3.21.3
- Remove patch for CVE-2016-1950, which is included in the release
- Related: Bug 1347908</changelog>
</package>
<package pkgid="14d4aa8a9db94e6f7e6d602ca7035bcdc0af923dfdae46ed5ede9c30802f277b" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.28.3" rel="1.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-2" date="1475582400">- Add missing source files</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-3" date="1479902400">- Tolerate policy file without last empty line</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1487937600">- Rebase to NSS 3.28.3
- Package new header eccutil.h</changelog>
</package>
<package pkgid="d2bdde78314d6652a0966773abf7703510bb2f9d4efa53b2b91387d73c61347e" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.28.4" rel="1.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-3" date="1479902400">- Tolerate policy file without last empty line</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1487937600">- Rebase to NSS 3.28.3
- Package new header eccutil.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to NSS 3.28.4 to accommodate base64 encoding fix</changelog>
</package>
<package pkgid="3974f0df1ad1e11b76134500efea0088dc5b0287a143b0fbf76cf0865005fb83" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.36.0" rel="1.el6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1512388800">- Rebase to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519819200">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520424000">- Rebase to NSS 3.36.0</changelog>
</package>
<package pkgid="63024af655b77fc6ac02b9548d5808451204a6226a1c702118ed8dcf1ce701a6" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.44.0" rel="1.el6_10"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519819200">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520424000">- Rebase to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-1" date="1566216000">- Rebase to NSS 3.44.0 for Firefox 68</changelog>
</package>
<package pkgid="c971f44178e04fa2ad1cdffecce07e98b523a63d975aabef2b96ca3b37a99d47" name="ntp" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="10.el6.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-9" date="1452600000">- fix crash with invalid logconfig command (CVE-2015-5194)
- fix crash when referencing disabled statistic type (CVE-2015-5195)
- don't hang in sntp with crafted reply (CVE-2015-5219)
- don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
  CVE-2015-7702)
- fix memory leak with autokey (CVE-2015-7701)
- don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
- don't crash in ntpq with crafted packet (CVE-2015-7852)
- add option to set Differentiated Services Code Point (DSCP) (#1228314)
- extend rawstats log (#1242895)
- fix resetting of leap status (#1243034)
- report clock state changes related to leap seconds (#1242937)
- allow -4/-6 on restrict lines with mask (#1232146)
- retry joining multicast groups (#1288534)
- explain synchronised state in ntpstat man page (#1286969)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10.el6_8.1" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
</package>
<package pkgid="bd25b4ba38c07bc89dc1e3d803c032f86240cae9c66aaff1a5414733caf36a3b" name="ntp" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="10.el6"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-7" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-9" date="1452600000">- fix crash with invalid logconfig command (CVE-2015-5194)
- fix crash when referencing disabled statistic type (CVE-2015-5195)
- don't hang in sntp with crafted reply (CVE-2015-5219)
- don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
  CVE-2015-7702)
- fix memory leak with autokey (CVE-2015-7701)
- don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
- don't crash in ntpq with crafted packet (CVE-2015-7852)
- add option to set Differentiated Services Code Point (DSCP) (#1228314)
- extend rawstats log (#1242895)
- fix resetting of leap status (#1243034)
- report clock state changes related to leap seconds (#1242937)
- allow -4/-6 on restrict lines with mask (#1232146)
- retry joining multicast groups (#1288534)
- explain synchronised state in ntpstat man page (#1286969)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
</package>
<package pkgid="9d6246ba71688a56f6f0599f5a6ba141666a6776e2129e494040d304edf6bf59" name="ntp" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="10.el6_8.2"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10.el6_8.1" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10.el6_8.2" date="1484136000">- don't limit rate of packets from sources (CVE-2016-7426)
- don't change interface from received packets (CVE-2016-7429)
- fix calculation of root distance again (CVE-2016-7433)
- require authentication for trap commands (CVE-2016-9310)
- fix crash when reporting peer event to trappers (CVE-2016-9311)</changelog>
</package>
<package pkgid="ab6bf26fec4bf1c0c88cdd89d8ae6899f50330b3a5e418f51fb99b36837d31d9" name="ntp" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="12.el6_9.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-11" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-12" date="1484136000">- don't limit rate of packets from sources (CVE-2016-7426)
- don't change interface from received packets (CVE-2016-7429)
- fix calculation of root distance again (CVE-2016-7433)
- require authentication for trap commands (CVE-2016-9310)
- fix crash when reporting peer event to trappers (CVE-2016-9311)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-12.el6_9.1" date="1506081600">- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)</changelog>
</package>
<package pkgid="d37d700d7f1fff5e1300f7b946324ae7754e5dd5909464cc89b9958e839b08e1" name="ntp" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="15.el6_10"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-13" date="1506081600">- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-14" date="1511870400">- fix CVE-2016-7429 patch to work correctly on multicast client (#1422973)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-15" date="1544443200">- fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)</changelog>
</package>
<package pkgid="5c5f26cfea2127255089e8f10735002045c02b044470f57cec9d72b7a46d9fb8" name="ntp" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="5.el6_7.2"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-4" date="1424692800">- fix typos in ntpd man page (#1194463)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5" date="1430222400">- reject packets without MAC when authentication is enabled (CVE-2015-1798)
- protect symmetric associations with symmetric key against DoS attack
  (CVE-2015-1799)
- fix generation of MD5 keys with ntp-keygen on big-endian systems
  (CVE-2015-3405)
- log when stepping clock for leap second or ignoring it with -x (#1204625)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5.el6_7.2" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
</package>
<package pkgid="0b34160b7ed6f84ba42abcab411bd2f089d041ac4b24a217f73ab93a75dc0a07" name="ntp" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="5.el6_7.4"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5" date="1430222400">- reject packets without MAC when authentication is enabled (CVE-2015-1798)
- protect symmetric associations with symmetric key against DoS attack
  (CVE-2015-1799)
- fix generation of MD5 keys with ntp-keygen on big-endian systems
  (CVE-2015-3405)
- log when stepping clock for leap second or ignoring it with -x (#1204625)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5.el6_7.2" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5.el6_7.4" date="1453291200">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)</changelog>
</package>
<package pkgid="6865880083ffa40c7e5a6c0af3328ffcf072d1e36a86868c38e0c7cb71cb545b" name="ntp-doc" arch="noarch">
  <version epoch="0" ver="4.2.6p5" rel="10.el6.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-9" date="1452600000">- fix crash with invalid logconfig command (CVE-2015-5194)
- fix crash when referencing disabled statistic type (CVE-2015-5195)
- don't hang in sntp with crafted reply (CVE-2015-5219)
- don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
  CVE-2015-7702)
- fix memory leak with autokey (CVE-2015-7701)
- don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
- don't crash in ntpq with crafted packet (CVE-2015-7852)
- add option to set Differentiated Services Code Point (DSCP) (#1228314)
- extend rawstats log (#1242895)
- fix resetting of leap status (#1243034)
- report clock state changes related to leap seconds (#1242937)
- allow -4/-6 on restrict lines with mask (#1232146)
- retry joining multicast groups (#1288534)
- explain synchronised state in ntpstat man page (#1286969)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10.el6_8.1" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
</package>
<package pkgid="9e8ab0e77ea5db65ea8080dec8cb5c85d04987e5efe39975d1e52b89b1bf41e9" name="ntp-doc" arch="noarch">
  <version epoch="0" ver="4.2.6p5" rel="10.el6"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-7" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-9" date="1452600000">- fix crash with invalid logconfig command (CVE-2015-5194)
- fix crash when referencing disabled statistic type (CVE-2015-5195)
- don't hang in sntp with crafted reply (CVE-2015-5219)
- don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
  CVE-2015-7702)
- fix memory leak with autokey (CVE-2015-7701)
- don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
- don't crash in ntpq with crafted packet (CVE-2015-7852)
- add option to set Differentiated Services Code Point (DSCP) (#1228314)
- extend rawstats log (#1242895)
- fix resetting of leap status (#1243034)
- report clock state changes related to leap seconds (#1242937)
- allow -4/-6 on restrict lines with mask (#1232146)
- retry joining multicast groups (#1288534)
- explain synchronised state in ntpstat man page (#1286969)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
</package>
<package pkgid="efe173af8e9ca6f18d31e7258f7d3632c16d68a10755e8e03d0fb3c19f594553" name="ntp-doc" arch="noarch">
  <version epoch="0" ver="4.2.6p5" rel="10.el6_8.2"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10.el6_8.1" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10.el6_8.2" date="1484136000">- don't limit rate of packets from sources (CVE-2016-7426)
- don't change interface from received packets (CVE-2016-7429)
- fix calculation of root distance again (CVE-2016-7433)
- require authentication for trap commands (CVE-2016-9310)
- fix crash when reporting peer event to trappers (CVE-2016-9311)</changelog>
</package>
<package pkgid="c25d5ae9eb12cd8f5903eab7de6b201d70035b4343ddeaf5c3c6575899d780e9" name="ntp-doc" arch="noarch">
  <version epoch="0" ver="4.2.6p5" rel="12.el6_9.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-11" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-12" date="1484136000">- don't limit rate of packets from sources (CVE-2016-7426)
- don't change interface from received packets (CVE-2016-7429)
- fix calculation of root distance again (CVE-2016-7433)
- require authentication for trap commands (CVE-2016-9310)
- fix crash when reporting peer event to trappers (CVE-2016-9311)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-12.el6_9.1" date="1506081600">- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)</changelog>
</package>
<package pkgid="c82ee0772e881ec69ac19e51fb9e2360f223af9f4237a25309f13eed8ffae94d" name="ntp-doc" arch="noarch">
  <version epoch="0" ver="4.2.6p5" rel="15.el6_10"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-13" date="1506081600">- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-14" date="1511870400">- fix CVE-2016-7429 patch to work correctly on multicast client (#1422973)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-15" date="1544443200">- fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)</changelog>
</package>
<package pkgid="66cd4ea82ff2d86259855109a2bb43c0d23ca8f630ecdd48c251ed869d7c634e" name="ntp-doc" arch="noarch">
  <version epoch="0" ver="4.2.6p5" rel="5.el6_7.2"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-4" date="1424692800">- fix typos in ntpd man page (#1194463)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5" date="1430222400">- reject packets without MAC when authentication is enabled (CVE-2015-1798)
- protect symmetric associations with symmetric key against DoS attack
  (CVE-2015-1799)
- fix generation of MD5 keys with ntp-keygen on big-endian systems
  (CVE-2015-3405)
- log when stepping clock for leap second or ignoring it with -x (#1204625)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5.el6_7.2" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
</package>
<package pkgid="fb28023239809c722a2baaa7d6d6d10f1bda9fbf30e0721c877fb32dcc14d8b0" name="ntp-doc" arch="noarch">
  <version epoch="0" ver="4.2.6p5" rel="5.el6_7.4"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5" date="1430222400">- reject packets without MAC when authentication is enabled (CVE-2015-1798)
- protect symmetric associations with symmetric key against DoS attack
  (CVE-2015-1799)
- fix generation of MD5 keys with ntp-keygen on big-endian systems
  (CVE-2015-3405)
- log when stepping clock for leap second or ignoring it with -x (#1204625)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5.el6_7.2" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5.el6_7.4" date="1453291200">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)</changelog>
</package>
<package pkgid="fb00048c55a0179fdae1cd8ba8b05636d4209e84b465e1b07d50604be47e885c" name="ntp-perl" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="10.el6.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-9" date="1452600000">- fix crash with invalid logconfig command (CVE-2015-5194)
- fix crash when referencing disabled statistic type (CVE-2015-5195)
- don't hang in sntp with crafted reply (CVE-2015-5219)
- don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
  CVE-2015-7702)
- fix memory leak with autokey (CVE-2015-7701)
- don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
- don't crash in ntpq with crafted packet (CVE-2015-7852)
- add option to set Differentiated Services Code Point (DSCP) (#1228314)
- extend rawstats log (#1242895)
- fix resetting of leap status (#1243034)
- report clock state changes related to leap seconds (#1242937)
- allow -4/-6 on restrict lines with mask (#1232146)
- retry joining multicast groups (#1288534)
- explain synchronised state in ntpstat man page (#1286969)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10.el6_8.1" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
</package>
<package pkgid="de8236d517aa163d83c7e7d07c4ef7ff9bf1ad93347a19520ece8ee1097f00ef" name="ntp-perl" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="10.el6"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-7" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-9" date="1452600000">- fix crash with invalid logconfig command (CVE-2015-5194)
- fix crash when referencing disabled statistic type (CVE-2015-5195)
- don't hang in sntp with crafted reply (CVE-2015-5219)
- don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
  CVE-2015-7702)
- fix memory leak with autokey (CVE-2015-7701)
- don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
- don't crash in ntpq with crafted packet (CVE-2015-7852)
- add option to set Differentiated Services Code Point (DSCP) (#1228314)
- extend rawstats log (#1242895)
- fix resetting of leap status (#1243034)
- report clock state changes related to leap seconds (#1242937)
- allow -4/-6 on restrict lines with mask (#1232146)
- retry joining multicast groups (#1288534)
- explain synchronised state in ntpstat man page (#1286969)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
</package>
<package pkgid="cbe67fd0ea0204b440e69015b96a907b27bd27b814dca2bb4a78e73d496bb9ef" name="ntp-perl" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="10.el6_8.2"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10.el6_8.1" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10.el6_8.2" date="1484136000">- don't limit rate of packets from sources (CVE-2016-7426)
- don't change interface from received packets (CVE-2016-7429)
- fix calculation of root distance again (CVE-2016-7433)
- require authentication for trap commands (CVE-2016-9310)
- fix crash when reporting peer event to trappers (CVE-2016-9311)</changelog>
</package>
<package pkgid="3d079faf9dd6adf901120946a9dbdb2aafbee290e51bfcd27a3fbc9044ca0bd6" name="ntp-perl" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="12.el6_9.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-11" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-12" date="1484136000">- don't limit rate of packets from sources (CVE-2016-7426)
- don't change interface from received packets (CVE-2016-7429)
- fix calculation of root distance again (CVE-2016-7433)
- require authentication for trap commands (CVE-2016-9310)
- fix crash when reporting peer event to trappers (CVE-2016-9311)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-12.el6_9.1" date="1506081600">- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)</changelog>
</package>
<package pkgid="ba40c03eac5d98f0ab17d80289204015e238f6adaea1da94c1eb8b3d39afeba5" name="ntp-perl" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="15.el6_10"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-13" date="1506081600">- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-14" date="1511870400">- fix CVE-2016-7429 patch to work correctly on multicast client (#1422973)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-15" date="1544443200">- fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)</changelog>
</package>
<package pkgid="dea726ba8f9b8332a42231379ad210eea526e72b2b8cb1cb1877490bef82b6c4" name="ntp-perl" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="5.el6_7.2"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-4" date="1424692800">- fix typos in ntpd man page (#1194463)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5" date="1430222400">- reject packets without MAC when authentication is enabled (CVE-2015-1798)
- protect symmetric associations with symmetric key against DoS attack
  (CVE-2015-1799)
- fix generation of MD5 keys with ntp-keygen on big-endian systems
  (CVE-2015-3405)
- log when stepping clock for leap second or ignoring it with -x (#1204625)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5.el6_7.2" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
</package>
<package pkgid="2eb0aecaaf664433cdc02da5cab87d9c9b7cecf314da9a88dfb06a6cbd508f05" name="ntp-perl" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="5.el6_7.4"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5" date="1430222400">- reject packets without MAC when authentication is enabled (CVE-2015-1798)
- protect symmetric associations with symmetric key against DoS attack
  (CVE-2015-1799)
- fix generation of MD5 keys with ntp-keygen on big-endian systems
  (CVE-2015-3405)
- log when stepping clock for leap second or ignoring it with -x (#1204625)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5.el6_7.2" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5.el6_7.4" date="1453291200">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)</changelog>
</package>
<package pkgid="4b1e51d63fbd7402a5dfdf30459baa74fa014eaab5bafcd2aa23c8af012cc087" name="ntpdate" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="10.el6.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-9" date="1452600000">- fix crash with invalid logconfig command (CVE-2015-5194)
- fix crash when referencing disabled statistic type (CVE-2015-5195)
- don't hang in sntp with crafted reply (CVE-2015-5219)
- don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
  CVE-2015-7702)
- fix memory leak with autokey (CVE-2015-7701)
- don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
- don't crash in ntpq with crafted packet (CVE-2015-7852)
- add option to set Differentiated Services Code Point (DSCP) (#1228314)
- extend rawstats log (#1242895)
- fix resetting of leap status (#1243034)
- report clock state changes related to leap seconds (#1242937)
- allow -4/-6 on restrict lines with mask (#1232146)
- retry joining multicast groups (#1288534)
- explain synchronised state in ntpstat man page (#1286969)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10.el6_8.1" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
</package>
<package pkgid="a5aae7233ef7446a83e771ba753eaa133f8feab262b441ceba7246cbcea65efd" name="ntpdate" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="10.el6"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-7" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-9" date="1452600000">- fix crash with invalid logconfig command (CVE-2015-5194)
- fix crash when referencing disabled statistic type (CVE-2015-5195)
- don't hang in sntp with crafted reply (CVE-2015-5219)
- don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
  CVE-2015-7702)
- fix memory leak with autokey (CVE-2015-7701)
- don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
- don't crash in ntpq with crafted packet (CVE-2015-7852)
- add option to set Differentiated Services Code Point (DSCP) (#1228314)
- extend rawstats log (#1242895)
- fix resetting of leap status (#1243034)
- report clock state changes related to leap seconds (#1242937)
- allow -4/-6 on restrict lines with mask (#1232146)
- retry joining multicast groups (#1288534)
- explain synchronised state in ntpstat man page (#1286969)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
</package>
<package pkgid="464c55d3edc7ae75cae8aa953592fb154983ab25f2d1f37ee41aee94216d94a9" name="ntpdate" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="10.el6_8.2"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10.el6_8.1" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10.el6_8.2" date="1484136000">- don't limit rate of packets from sources (CVE-2016-7426)
- don't change interface from received packets (CVE-2016-7429)
- fix calculation of root distance again (CVE-2016-7433)
- require authentication for trap commands (CVE-2016-9310)
- fix crash when reporting peer event to trappers (CVE-2016-9311)</changelog>
</package>
<package pkgid="1a3f56f3bc02580ecd664ef6a87f1cb9616bc5df3bc45d3f675df6bf090ea381" name="ntpdate" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="12.el6_9.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-11" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-12" date="1484136000">- don't limit rate of packets from sources (CVE-2016-7426)
- don't change interface from received packets (CVE-2016-7429)
- fix calculation of root distance again (CVE-2016-7433)
- require authentication for trap commands (CVE-2016-9310)
- fix crash when reporting peer event to trappers (CVE-2016-9311)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-12.el6_9.1" date="1506081600">- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)</changelog>
</package>
<package pkgid="bc587e7aa78df780bfa5b22db3f9d7cca44f32a0c69ff2f85888c74c8d41e769" name="ntpdate" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="15.el6_10"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-13" date="1506081600">- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-14" date="1511870400">- fix CVE-2016-7429 patch to work correctly on multicast client (#1422973)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-15" date="1544443200">- fix buffer overflow in parsing of address in ntpq and ntpdc (CVE-2018-12327)</changelog>
</package>
<package pkgid="c2cec6a52cc7ecaa96ca52ed83c7120ea726d64bdfa1f3a3537218e7f9e4978d" name="ntpdate" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="5.el6_7.2"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-4" date="1424692800">- fix typos in ntpd man page (#1194463)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5" date="1430222400">- reject packets without MAC when authentication is enabled (CVE-2015-1798)
- protect symmetric associations with symmetric key against DoS attack
  (CVE-2015-1799)
- fix generation of MD5 keys with ntp-keygen on big-endian systems
  (CVE-2015-3405)
- log when stepping clock for leap second or ignoring it with -x (#1204625)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5.el6_7.2" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
</package>
<package pkgid="9ce6a631fc59817f59fd4f5b257151f44fa0705e2491834fe2273ea6ec011db4" name="ntpdate" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="5.el6_7.4"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5" date="1430222400">- reject packets without MAC when authentication is enabled (CVE-2015-1798)
- protect symmetric associations with symmetric key against DoS attack
  (CVE-2015-1799)
- fix generation of MD5 keys with ntp-keygen on big-endian systems
  (CVE-2015-3405)
- log when stepping clock for leap second or ignoring it with -x (#1204625)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5.el6_7.2" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5.el6_7.4" date="1453291200">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)</changelog>
</package>
<package pkgid="0e30d70117755ba7f14c364d7dde9d0dda315064501cde60e516102533b18674" name="ocaml" arch="i686">
  <version epoch="0" ver="3.11.2" rel="5.el6"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-2" date="1264766400">- Update reference manual to latest version from website.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-3" date="1465473600">- Fix buffer overflow and information leak CVE-2015-8869
  resolves: rhbz#1343082</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-5" date="1466769600">- Enable execshield stack protection on ppc/ppc64 (572826)
  related: rhbz#1343082
- Fix strict-aliasing warnings in build (990540).</changelog>
</package>
<package pkgid="639c205e2bc621826d781ae9eb7e3f7e08cecac9aeffa46f6649697cca3d8930" name="ocaml-camlp4" arch="i686">
  <version epoch="0" ver="3.11.2" rel="5.el6"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-2" date="1264766400">- Update reference manual to latest version from website.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-3" date="1465473600">- Fix buffer overflow and information leak CVE-2015-8869
  resolves: rhbz#1343082</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-5" date="1466769600">- Enable execshield stack protection on ppc/ppc64 (572826)
  related: rhbz#1343082
- Fix strict-aliasing warnings in build (990540).</changelog>
</package>
<package pkgid="da48a898e242736acaca10bb5852ab2b45ae45785412926e8d53478c5e6f4f9d" name="ocaml-camlp4-devel" arch="i686">
  <version epoch="0" ver="3.11.2" rel="5.el6"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-2" date="1264766400">- Update reference manual to latest version from website.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-3" date="1465473600">- Fix buffer overflow and information leak CVE-2015-8869
  resolves: rhbz#1343082</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-5" date="1466769600">- Enable execshield stack protection on ppc/ppc64 (572826)
  related: rhbz#1343082
- Fix strict-aliasing warnings in build (990540).</changelog>
</package>
<package pkgid="7b847641b92d2ec74f48d477f7181aa2d8aed3680c3609a8d8942934b3759d13" name="ocaml-docs" arch="i686">
  <version epoch="0" ver="3.11.2" rel="5.el6"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-2" date="1264766400">- Update reference manual to latest version from website.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-3" date="1465473600">- Fix buffer overflow and information leak CVE-2015-8869
  resolves: rhbz#1343082</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-5" date="1466769600">- Enable execshield stack protection on ppc/ppc64 (572826)
  related: rhbz#1343082
- Fix strict-aliasing warnings in build (990540).</changelog>
</package>
<package pkgid="1e874cc29f7c0a787015ea2d78965c0ef4240ef13096fbd19f75368569ca6274" name="ocaml-emacs" arch="i686">
  <version epoch="0" ver="3.11.2" rel="5.el6"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-2" date="1264766400">- Update reference manual to latest version from website.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-3" date="1465473600">- Fix buffer overflow and information leak CVE-2015-8869
  resolves: rhbz#1343082</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-5" date="1466769600">- Enable execshield stack protection on ppc/ppc64 (572826)
  related: rhbz#1343082
- Fix strict-aliasing warnings in build (990540).</changelog>
</package>
<package pkgid="7528f896f01294f5b2f4ea79e0149cf9e85018ec80a321542ae8e9b49d0724bb" name="ocaml-labltk" arch="i686">
  <version epoch="0" ver="3.11.2" rel="5.el6"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-2" date="1264766400">- Update reference manual to latest version from website.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-3" date="1465473600">- Fix buffer overflow and information leak CVE-2015-8869
  resolves: rhbz#1343082</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-5" date="1466769600">- Enable execshield stack protection on ppc/ppc64 (572826)
  related: rhbz#1343082
- Fix strict-aliasing warnings in build (990540).</changelog>
</package>
<package pkgid="3800a804af0f57446953e11743d40670c035fb3c0d8dd233dc4c7959a37a48c5" name="ocaml-labltk-devel" arch="i686">
  <version epoch="0" ver="3.11.2" rel="5.el6"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-2" date="1264766400">- Update reference manual to latest version from website.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-3" date="1465473600">- Fix buffer overflow and information leak CVE-2015-8869
  resolves: rhbz#1343082</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-5" date="1466769600">- Enable execshield stack protection on ppc/ppc64 (572826)
  related: rhbz#1343082
- Fix strict-aliasing warnings in build (990540).</changelog>
</package>
<package pkgid="c9bcf3993a3cc8de4ac2590d25300bedd771e9be67a2bb711d7682ac74a7c615" name="ocaml-ocamldoc" arch="i686">
  <version epoch="0" ver="3.11.2" rel="5.el6"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-2" date="1264766400">- Update reference manual to latest version from website.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-3" date="1465473600">- Fix buffer overflow and information leak CVE-2015-8869
  resolves: rhbz#1343082</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-5" date="1466769600">- Enable execshield stack protection on ppc/ppc64 (572826)
  related: rhbz#1343082
- Fix strict-aliasing warnings in build (990540).</changelog>
</package>
<package pkgid="f6d9ad4159f9c57ea56429d66fe01947d1ca8f0491810d8db0c28d08c1d0898b" name="ocaml-runtime" arch="i686">
  <version epoch="0" ver="3.11.2" rel="5.el6"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-2" date="1264766400">- Update reference manual to latest version from website.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-3" date="1465473600">- Fix buffer overflow and information leak CVE-2015-8869
  resolves: rhbz#1343082</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-5" date="1466769600">- Enable execshield stack protection on ppc/ppc64 (572826)
  related: rhbz#1343082
- Fix strict-aliasing warnings in build (990540).</changelog>
</package>
<package pkgid="e841e0b53e2e020fd40daf5c9f18b0ac1ca6d35d3244b1d65c15591b708e3a06" name="ocaml-source" arch="i686">
  <version epoch="0" ver="3.11.2" rel="5.el6"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-2" date="1264766400">- Update reference manual to latest version from website.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-3" date="1465473600">- Fix buffer overflow and information leak CVE-2015-8869
  resolves: rhbz#1343082</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-5" date="1466769600">- Enable execshield stack protection on ppc/ppc64 (572826)
  related: rhbz#1343082
- Fix strict-aliasing warnings in build (990540).</changelog>
</package>
<package pkgid="244b6bbd3b2df082cf7173cb64950815b4261c3cea86ba679882344b59560806" name="ocaml-x11" arch="i686">
  <version epoch="0" ver="3.11.2" rel="5.el6"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-2" date="1264766400">- Update reference manual to latest version from website.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-3" date="1465473600">- Fix buffer overflow and information leak CVE-2015-8869
  resolves: rhbz#1343082</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 3.11.2-5" date="1466769600">- Enable execshield stack protection on ppc/ppc64 (572826)
  related: rhbz#1343082
- Fix strict-aliasing warnings in build (990540).</changelog>
</package>
<package pkgid="cc014d3865e25eb11c5255a4f5fb4dea44dcb2b3ae9fe5dfbfa2150e9f2389af" name="openafs" arch="i686">
  <version epoch="0" ver="1.6.14" rel="219.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.13-215.SLx" date="1437998400">- update to release 1.6.13 (security release)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-218.SLx" date="1439467200">- update to release 1.6.14
- fixes a 1.6.13 regression in vlserver when volumes are queried by regex
- the "backup" util does this, unless vols are specified with ".*" or "" only</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-219.SLx" date="1446120000">- added OPENAFS-SA-2015-007.1.6.patch, fixes CVE-2015-7762 and CVE-2015-7763</changelog>
</package>
<package pkgid="ea3a7a4ec1faba1292b664a985dc548e4a4c09414628af5d4c129a76e7e805b3" name="openafs" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="bd92fa388ed9fb4f240322617fdb1ce13612cd29feecb483e7a32eba61d35f46" name="openafs" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="522126e8802aed2787821e6bed71ff3843301d96ebb2c1ad982e9b89f53dc696" name="openafs" arch="i686">
  <version epoch="0" ver="1.6.20" rel="257.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-257.SLx" date="1512561600">- security update
- patch1086 to address OPENAFS-SA-2017-001</changelog>
</package>
<package pkgid="eea6a33ab3f6fcae8dd4cc823f7604933eae13432bcc29c1c6f6bf41777b9647" name="openafs" arch="i686">
  <version epoch="0" ver="1.6.23" rel="289.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
</package>
<package pkgid="45c44a28c3759bb534b76e7082ff50099a8fe4815f7a79dddcbc38e2e502dbc7" name="openafs" arch="i686">
  <version epoch="0" ver="1.6.24" rel="290.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.24-290.SLx" date="1571832000">- update to release 1.6.24 (security release)
- addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
- fix build on EL 6.10</changelog>
</package>
<package pkgid="a70ca5e4350f428259cbe2629de2239d4d74c7bb9952c6a5ded1ec43a9818a04" name="openafs-authlibs" arch="i686">
  <version epoch="0" ver="1.6.14" rel="219.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.13-215.SLx" date="1437998400">- update to release 1.6.13 (security release)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-218.SLx" date="1439467200">- update to release 1.6.14
- fixes a 1.6.13 regression in vlserver when volumes are queried by regex
- the "backup" util does this, unless vols are specified with ".*" or "" only</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-219.SLx" date="1446120000">- added OPENAFS-SA-2015-007.1.6.patch, fixes CVE-2015-7762 and CVE-2015-7763</changelog>
</package>
<package pkgid="2e5751b97d3c4aabf8f3eb69356d80b56a4258a1c9dff87cbc28667c626402c6" name="openafs-authlibs" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="1a287e6e6aa628f598c0e3d0b659d314187bae4ce84d102084159ce933168172" name="openafs-authlibs" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="1bd7a401b4ddb198a3e1abab19482a27233593e8446f685e6d8b1a9d46b95542" name="openafs-authlibs" arch="i686">
  <version epoch="0" ver="1.6.20" rel="257.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-257.SLx" date="1512561600">- security update
- patch1086 to address OPENAFS-SA-2017-001</changelog>
</package>
<package pkgid="3b783270c6a8a50f544f5270a1b7ae809354ba0a56c2cfd17e2d0eec9d78c0bf" name="openafs-authlibs" arch="i686">
  <version epoch="0" ver="1.6.23" rel="289.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
</package>
<package pkgid="3ef41e809ea7df3e25e1d77f3c68fdfac3f92ee9054d17021f0ac2b254f37d82" name="openafs-authlibs" arch="i686">
  <version epoch="0" ver="1.6.24" rel="290.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.24-290.SLx" date="1571832000">- update to release 1.6.24 (security release)
- addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
- fix build on EL 6.10</changelog>
</package>
<package pkgid="cc285b599f2500e51975adb9b36ad2b1ce5fd2375f026d6d38eb6e89f3b2d454" name="openafs-authlibs-devel" arch="i686">
  <version epoch="0" ver="1.6.14" rel="219.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.13-215.SLx" date="1437998400">- update to release 1.6.13 (security release)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-218.SLx" date="1439467200">- update to release 1.6.14
- fixes a 1.6.13 regression in vlserver when volumes are queried by regex
- the "backup" util does this, unless vols are specified with ".*" or "" only</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-219.SLx" date="1446120000">- added OPENAFS-SA-2015-007.1.6.patch, fixes CVE-2015-7762 and CVE-2015-7763</changelog>
</package>
<package pkgid="43c5ad98807c8911ff495583cd3ade13b2b91b69b78ec56ab5eb9c8cfd849fc7" name="openafs-authlibs-devel" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="2a7774841d0be39778441fdd728da509f5babbf2cb27114cd457b910f3c66c2d" name="openafs-authlibs-devel" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="914ddb90c7b6122b98fb835a36a1f5cc6c1e75b54ce49c02cae19159389a56cd" name="openafs-authlibs-devel" arch="i686">
  <version epoch="0" ver="1.6.20" rel="257.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-257.SLx" date="1512561600">- security update
- patch1086 to address OPENAFS-SA-2017-001</changelog>
</package>
<package pkgid="c5a506e3c5b84f45999986ff625b24ba7383efc42a791fb8a80c8a7d310d2999" name="openafs-authlibs-devel" arch="i686">
  <version epoch="0" ver="1.6.23" rel="289.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
</package>
<package pkgid="54ba766d659e98361a2b16ac66d63c2f388d1f53e6782a117a5c765ea29e2daf" name="openafs-authlibs-devel" arch="i686">
  <version epoch="0" ver="1.6.24" rel="290.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.24-290.SLx" date="1571832000">- update to release 1.6.24 (security release)
- addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
- fix build on EL 6.10</changelog>
</package>
<package pkgid="15d2f4fd3cad2a3aa03aad5b44144ad209369cf05ffe8958a697fcec762a3b2e" name="openafs-client" arch="i686">
  <version epoch="0" ver="1.6.14" rel="219.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.13-215.SLx" date="1437998400">- update to release 1.6.13 (security release)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-218.SLx" date="1439467200">- update to release 1.6.14
- fixes a 1.6.13 regression in vlserver when volumes are queried by regex
- the "backup" util does this, unless vols are specified with ".*" or "" only</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-219.SLx" date="1446120000">- added OPENAFS-SA-2015-007.1.6.patch, fixes CVE-2015-7762 and CVE-2015-7763</changelog>
</package>
<package pkgid="1a5d3b00916abedd3e8fb5b07e2430d09b171897fe755a0a6b8c74a050f76eee" name="openafs-client" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="91a09e2fcb88792ae18c4aa0922587650a48ee4e81083e27aebf4f3332f73930" name="openafs-client" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="888414f0036675b95ab5aad5a7a8ce5e99622534c28d0ab63aeb8986415c1501" name="openafs-client" arch="i686">
  <version epoch="0" ver="1.6.20" rel="257.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-257.SLx" date="1512561600">- security update
- patch1086 to address OPENAFS-SA-2017-001</changelog>
</package>
<package pkgid="3b263772cd504189257f5b5342deaba3b3ed24a7f6275be116b28bfa0182c52e" name="openafs-client" arch="i686">
  <version epoch="0" ver="1.6.23" rel="289.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
</package>
<package pkgid="110b6df56bfd875af80024f30392d7f20204941962da01f53bdb0eff27ebb00b" name="openafs-client" arch="i686">
  <version epoch="0" ver="1.6.24" rel="290.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.24-290.SLx" date="1571832000">- update to release 1.6.24 (security release)
- addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
- fix build on EL 6.10</changelog>
</package>
<package pkgid="e6a23bee270de854e9c2ce6db9f030b6a2659ac8485fffd6d224bd2068892c1f" name="openafs-compat" arch="i686">
  <version epoch="0" ver="1.6.14" rel="219.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.13-215.SLx" date="1437998400">- update to release 1.6.13 (security release)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-218.SLx" date="1439467200">- update to release 1.6.14
- fixes a 1.6.13 regression in vlserver when volumes are queried by regex
- the "backup" util does this, unless vols are specified with ".*" or "" only</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-219.SLx" date="1446120000">- added OPENAFS-SA-2015-007.1.6.patch, fixes CVE-2015-7762 and CVE-2015-7763</changelog>
</package>
<package pkgid="4f410f4f3cd82518022d5437a2145e9e556b6f07c1f002bedde634897c989d01" name="openafs-compat" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="3f12685e1d452a6f82569384253bad2355da8710ef2ca50d5c046811c40162d6" name="openafs-compat" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="a6807ac07961497f6161398d817447518a05fab6b62062f78f5f63c50ed74862" name="openafs-compat" arch="i686">
  <version epoch="0" ver="1.6.20" rel="257.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-257.SLx" date="1512561600">- security update
- patch1086 to address OPENAFS-SA-2017-001</changelog>
</package>
<package pkgid="603d2670599485e838f984f51d93c0ebf5886c23d2bb2c35775f35b79e709c06" name="openafs-compat" arch="i686">
  <version epoch="0" ver="1.6.23" rel="289.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
</package>
<package pkgid="f59e9895af3f6a7a3d4bd1967899463517469759041f76d00b5c39ddffad1bff" name="openafs-compat" arch="i686">
  <version epoch="0" ver="1.6.24" rel="290.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.24-290.SLx" date="1571832000">- update to release 1.6.24 (security release)
- addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
- fix build on EL 6.10</changelog>
</package>
<package pkgid="8bcbcdad7c747f80125ea563fb0a8e113ab3e68dd2069608a15390bc527cffcb" name="openafs-devel" arch="i686">
  <version epoch="0" ver="1.6.14" rel="219.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.13-215.SLx" date="1437998400">- update to release 1.6.13 (security release)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-218.SLx" date="1439467200">- update to release 1.6.14
- fixes a 1.6.13 regression in vlserver when volumes are queried by regex
- the "backup" util does this, unless vols are specified with ".*" or "" only</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-219.SLx" date="1446120000">- added OPENAFS-SA-2015-007.1.6.patch, fixes CVE-2015-7762 and CVE-2015-7763</changelog>
</package>
<package pkgid="f50360882f0f71428fcf3d28ec37aaaf3864b0bdea9a0d0dbed64c20da65a4e7" name="openafs-devel" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="5158f1667e19f43da5baee50c46317ff9fdafff0fe11302596916156799e6c20" name="openafs-devel" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="79579aa0d38fe6d84ed615bf61796ada7e5f59b8904f449326e75bac78d179d2" name="openafs-devel" arch="i686">
  <version epoch="0" ver="1.6.20" rel="257.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-257.SLx" date="1512561600">- security update
- patch1086 to address OPENAFS-SA-2017-001</changelog>
</package>
<package pkgid="dc8f3f044a9de4e3a4046ccb055ffc92e9b633ecd8d3285992ee9895b725a806" name="openafs-devel" arch="i686">
  <version epoch="0" ver="1.6.23" rel="289.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
</package>
<package pkgid="27c3ba44661b415b3b678824e518075225a798a58a4cdf2b159310745f9a0380" name="openafs-devel" arch="i686">
  <version epoch="0" ver="1.6.24" rel="290.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.24-290.SLx" date="1571832000">- update to release 1.6.24 (security release)
- addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
- fix build on EL 6.10</changelog>
</package>
<package pkgid="0a8e14a176738fc94166399d5226eeca76e0d78b2d0d98bfd902d54462e740e2" name="openafs-kernel-source" arch="i686">
  <version epoch="0" ver="1.6.14" rel="219.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.13-215.SLx" date="1437998400">- update to release 1.6.13 (security release)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-218.SLx" date="1439467200">- update to release 1.6.14
- fixes a 1.6.13 regression in vlserver when volumes are queried by regex
- the "backup" util does this, unless vols are specified with ".*" or "" only</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-219.SLx" date="1446120000">- added OPENAFS-SA-2015-007.1.6.patch, fixes CVE-2015-7762 and CVE-2015-7763</changelog>
</package>
<package pkgid="3cdbe9d021586fc52f08e41b2c5823ecb1c821263b118d9bd6d6abfcad2cffa4" name="openafs-kernel-source" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="45877149f78c446854b995127978426737b0d57cde8d52500cca6bcd507f9482" name="openafs-kernel-source" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="677ecee9b44924da34913037bd5375867267ab816d9f6c33fa6f5ade766e2459" name="openafs-kernel-source" arch="i686">
  <version epoch="0" ver="1.6.20" rel="257.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-257.SLx" date="1512561600">- security update
- patch1086 to address OPENAFS-SA-2017-001</changelog>
</package>
<package pkgid="88c8bd96f451347aee4bfdf7c651cfa14ae8ff4826ae35fbd723d09a1bd89ec6" name="openafs-kernel-source" arch="i686">
  <version epoch="0" ver="1.6.23" rel="289.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
</package>
<package pkgid="8eee0296180ba5e69073187ca8b89b9e00e190c46df10b7af8aa46b8fba79d2d" name="openafs-kernel-source" arch="i686">
  <version epoch="0" ver="1.6.24" rel="290.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.24-290.SLx" date="1571832000">- update to release 1.6.24 (security release)
- addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
- fix build on EL 6.10</changelog>
</package>
<package pkgid="fcb5d581e6673cc42033a96ee10f772fa7e0d38a55ed6aed5ae9f47fec23a146" name="openafs-kpasswd" arch="i686">
  <version epoch="0" ver="1.6.14" rel="219.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.13-215.SLx" date="1437998400">- update to release 1.6.13 (security release)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-218.SLx" date="1439467200">- update to release 1.6.14
- fixes a 1.6.13 regression in vlserver when volumes are queried by regex
- the "backup" util does this, unless vols are specified with ".*" or "" only</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-219.SLx" date="1446120000">- added OPENAFS-SA-2015-007.1.6.patch, fixes CVE-2015-7762 and CVE-2015-7763</changelog>
</package>
<package pkgid="295480a000f8b8d60b37bf1ca6be8fcc3319503442a8ccd740b8f23b752ea4ee" name="openafs-kpasswd" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="8f0e40b321279c0514c1258830057d5a873e58010a21513c8c3f61e2a4a87d30" name="openafs-kpasswd" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="88b7cf09746c753cf3ed5e441fa1b9d9d7eb5b765aeeb4d10f76471c9453490f" name="openafs-kpasswd" arch="i686">
  <version epoch="0" ver="1.6.20" rel="257.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-257.SLx" date="1512561600">- security update
- patch1086 to address OPENAFS-SA-2017-001</changelog>
</package>
<package pkgid="cad75d48fc6a606bac2e2def7f6578b9836b8aabb8f826cf6fa1b65e59b012ab" name="openafs-kpasswd" arch="i686">
  <version epoch="0" ver="1.6.23" rel="289.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
</package>
<package pkgid="d5d45f52ab7c25fcece779c74ff045dab6bc4bb66756d1e5eeac2de097fcc8c2" name="openafs-kpasswd" arch="i686">
  <version epoch="0" ver="1.6.24" rel="290.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.24-290.SLx" date="1571832000">- update to release 1.6.24 (security release)
- addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
- fix build on EL 6.10</changelog>
</package>
<package pkgid="f6bb931db552e502ebeb438060a0136532d0fc982cdceb809710af37d4c3731b" name="openafs-krb5" arch="i686">
  <version epoch="0" ver="1.6.14" rel="219.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.13-215.SLx" date="1437998400">- update to release 1.6.13 (security release)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-218.SLx" date="1439467200">- update to release 1.6.14
- fixes a 1.6.13 regression in vlserver when volumes are queried by regex
- the "backup" util does this, unless vols are specified with ".*" or "" only</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-219.SLx" date="1446120000">- added OPENAFS-SA-2015-007.1.6.patch, fixes CVE-2015-7762 and CVE-2015-7763</changelog>
</package>
<package pkgid="2e9226bd7f40962eddd370452d9e5ef2943d0b7afa448f83f0192acf8fa8c619" name="openafs-krb5" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="9de12d4ab7aab6ebbc04acc52668949b413a4fa06594cbf1b238f725e8acc757" name="openafs-krb5" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="e4a791a2d53324b071317eeb52dd05c1c0504c41ae183b67dbfd3c273f6b8e49" name="openafs-krb5" arch="i686">
  <version epoch="0" ver="1.6.20" rel="257.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-257.SLx" date="1512561600">- security update
- patch1086 to address OPENAFS-SA-2017-001</changelog>
</package>
<package pkgid="d3566565060384c0c4de2f26d66d5107b9813381192258ca3b8d3e2f6146fc26" name="openafs-krb5" arch="i686">
  <version epoch="0" ver="1.6.23" rel="289.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
</package>
<package pkgid="6c473c28bcb1ccc9b3afc09669ae1df2e3d69a8a90868ba2bf7a5b98a55ae0b8" name="openafs-krb5" arch="i686">
  <version epoch="0" ver="1.6.24" rel="290.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.24-290.SLx" date="1571832000">- update to release 1.6.24 (security release)
- addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
- fix build on EL 6.10</changelog>
</package>
<package pkgid="d6d9f21fa37996960f0bd4df568518681c045961c283b16ed72cd06e3c6a5bdb" name="openafs-module-tools" arch="i686">
  <version epoch="0" ver="1.6.14" rel="219.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.13-215.SLx" date="1437998400">- update to release 1.6.13 (security release)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-218.SLx" date="1439467200">- update to release 1.6.14
- fixes a 1.6.13 regression in vlserver when volumes are queried by regex
- the "backup" util does this, unless vols are specified with ".*" or "" only</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-219.SLx" date="1446120000">- added OPENAFS-SA-2015-007.1.6.patch, fixes CVE-2015-7762 and CVE-2015-7763</changelog>
</package>
<package pkgid="a92be02e077fabaa126ef040542869dd5fc56f858691e900f3b1384a93dc28ef" name="openafs-module-tools" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="4c2b7e6e9e1f3cfd5d3b186bc133c8b42f19f0fb3351ee6b6a68d4b53e5ee058" name="openafs-module-tools" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="eacdc46e8ca8127dec2d873fa4a49da91501d2a9dfaa4f5ffed59f7ca9c36889" name="openafs-module-tools" arch="i686">
  <version epoch="0" ver="1.6.20" rel="257.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-257.SLx" date="1512561600">- security update
- patch1086 to address OPENAFS-SA-2017-001</changelog>
</package>
<package pkgid="dff95f310dcca400e1e7f8b6ca832d53132c88d7db56fd40ddf2259ccea35dff" name="openafs-module-tools" arch="i686">
  <version epoch="0" ver="1.6.23" rel="289.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
</package>
<package pkgid="fd1ee25cc110d1dc290c6ef2d7b857625beb3a981e9156a1af399ef318ef47c3" name="openafs-module-tools" arch="i686">
  <version epoch="0" ver="1.6.24" rel="290.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.24-290.SLx" date="1571832000">- update to release 1.6.24 (security release)
- addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
- fix build on EL 6.10</changelog>
</package>
<package pkgid="3372f69b0c65f07ff3dcc17e3576df973c7476def0289c502454a49da9e87fec" name="openafs-plumbing-tools" arch="i686">
  <version epoch="0" ver="1.6.14" rel="219.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.13-215.SLx" date="1437998400">- update to release 1.6.13 (security release)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-218.SLx" date="1439467200">- update to release 1.6.14
- fixes a 1.6.13 regression in vlserver when volumes are queried by regex
- the "backup" util does this, unless vols are specified with ".*" or "" only</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-219.SLx" date="1446120000">- added OPENAFS-SA-2015-007.1.6.patch, fixes CVE-2015-7762 and CVE-2015-7763</changelog>
</package>
<package pkgid="cc438de54a3f01bfa30e92908c6c506738261b12dd5977f2c557ea3ed828ff11" name="openafs-plumbing-tools" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="14e47b9d9545bf35d3c5da1d42c4131611bb8eccbad190498d0ec45263aeda71" name="openafs-plumbing-tools" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="570e2ae41411535165f1345e04d3d81aa09dbfa58efe6450f16281dbbc029ab9" name="openafs-plumbing-tools" arch="i686">
  <version epoch="0" ver="1.6.20" rel="257.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-257.SLx" date="1512561600">- security update
- patch1086 to address OPENAFS-SA-2017-001</changelog>
</package>
<package pkgid="7a8e8fcbe4ab94497e0086db4edd7e12e6a1a0185779e14bb8bcc3cd0c698525" name="openafs-plumbing-tools" arch="i686">
  <version epoch="0" ver="1.6.23" rel="289.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
</package>
<package pkgid="b0c9ef40c73648cc448c087f18a1b7ba71084a103333b10a9b335ea7fe8a6506" name="openafs-plumbing-tools" arch="i686">
  <version epoch="0" ver="1.6.24" rel="290.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.24-290.SLx" date="1571832000">- update to release 1.6.24 (security release)
- addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
- fix build on EL 6.10</changelog>
</package>
<package pkgid="82e8f115b20d47526acd8629168cc73c16032be746da40c239b1613782b4a2a9" name="openafs-server" arch="i686">
  <version epoch="0" ver="1.6.14" rel="219.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.13-215.SLx" date="1437998400">- update to release 1.6.13 (security release)</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-218.SLx" date="1439467200">- update to release 1.6.14
- fixes a 1.6.13 regression in vlserver when volumes are queried by regex
- the "backup" util does this, unless vols are specified with ".*" or "" only</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.14-219.SLx" date="1446120000">- added OPENAFS-SA-2015-007.1.6.patch, fixes CVE-2015-7762 and CVE-2015-7763</changelog>
</package>
<package pkgid="a8152ab49f09e5111c6da1af5a2c825be601452b32933fb761d5194991f6ec9d" name="openafs-server" arch="i686">
  <version epoch="0" ver="1.6.17" rel="234.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-226.SLx" date="1448020800">- update to prerelease 1.6.16pre1</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.16-230.SLx" date="1451304000">- update to release 1.6.16</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.17-234.SLx" date="1456920000">- update to release 1.6.17 (security release)
- install service unit files with mode 644, not 755 (rt.central.org #132662)</changelog>
</package>
<package pkgid="df3ffd739b134ddb09e235a21f234e0afaf323b60d037e8d1003507f2e516d78" name="openafs-server" arch="i686">
  <version epoch="0" ver="1.6.20" rel="256.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.18-239.SLx" date="1461931200">- update to release 1.6.18</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
</package>
<package pkgid="71a169723b327e61a356afebac8c0216bf8b3dd4c4d2e711aed9b6707356c808" name="openafs-server" arch="i686">
  <version epoch="0" ver="1.6.20" rel="257.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.19-253.SLx" date="1478865600">- update to release 1.6.19</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-256.SLx" date="1481198400">- update to security release 1.6.20
- added RemainAfterExit=true in afs.service, to fix the case where only
  kernel threads remain after the client has started</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.20-257.SLx" date="1512561600">- security update
- patch1086 to address OPENAFS-SA-2017-001</changelog>
</package>
<package pkgid="fd347282cda817cee871713c7f27139e26b98b2cf5a25157133a01d8de5e2dd9" name="openafs-server" arch="i686">
  <version epoch="0" ver="1.6.23" rel="289.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.2-283.SLx" date="1517832000">- update to release 1.6.22.2, to fix getcwd() issues with the 7.4 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
</package>
<package pkgid="7dafd0f4af181dfb3a5f120bb55c8e155c9da79c4770382937587d0e123ed11e" name="openafs-server" arch="i686">
  <version epoch="0" ver="1.6.24" rel="290.sl6"/>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.22.3-286.SLx" date="1524571200">- update to release 1.6.22.3, to fix readdir() for the 7.5 kernel series</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.23-289.SLx" date="1536753600">- update to release 1.6.23 (security release)
- addresses OPENAFS-SA-2018-001, OPENAFS-SA-2018-002, OPENAFS-SA-2018-003</changelog>
  <changelog author="Stephan Wiesand &lt;stephan wiesand desy de&gt; 1.6.24-290.SLx" date="1571832000">- update to release 1.6.24 (security release)
- addresses OPENAFS-SA-2019-001, OPENAFS-SA-2019-002, OPENAFS-SA-2019-003
- fix build on EL 6.10</changelog>
</package>
<package pkgid="7e714183646097b515918e96f80b6f94e193a1f8c21e9aec7e15f6190f623050" name="openchange" arch="i686">
  <version epoch="0" ver="1.0" rel="7.el6_7"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.0-4" date="1358424000">- Use current version (1.0-4) for a multilib obsolete (RH bug #881698).</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.0-6" date="1381924800">- Add a patch for RH bug #665967 (Free/busy fails to be fetched)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.0-7" date="1460030400">- Add a patch to fix connection string (Related: #1322688)</changelog>
</package>
<package pkgid="e3ed4d21d3ad67c6ac09970e7a8674ff9128e0437035776fd20d46e8a39835c0" name="openchange-client" arch="i686">
  <version epoch="0" ver="1.0" rel="7.el6_7"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.0-4" date="1358424000">- Use current version (1.0-4) for a multilib obsolete (RH bug #881698).</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.0-6" date="1381924800">- Add a patch for RH bug #665967 (Free/busy fails to be fetched)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.0-7" date="1460030400">- Add a patch to fix connection string (Related: #1322688)</changelog>
</package>
<package pkgid="00dc6661e9bcea85f34e4c8d57c81bd08bc5669a3884763dddc2f8c5f0867053" name="openchange-devel" arch="i686">
  <version epoch="0" ver="1.0" rel="7.el6_7"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.0-4" date="1358424000">- Use current version (1.0-4) for a multilib obsolete (RH bug #881698).</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.0-6" date="1381924800">- Add a patch for RH bug #665967 (Free/busy fails to be fetched)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.0-7" date="1460030400">- Add a patch to fix connection string (Related: #1322688)</changelog>
</package>
<package pkgid="bc0e427075a2785a79143a065506e5e9b4e51fbca6b8c146ad7e432a46968927" name="openchange-devel-docs" arch="i686">
  <version epoch="0" ver="1.0" rel="7.el6_7"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.0-4" date="1358424000">- Use current version (1.0-4) for a multilib obsolete (RH bug #881698).</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.0-6" date="1381924800">- Add a patch for RH bug #665967 (Free/busy fails to be fetched)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.0-7" date="1460030400">- Add a patch to fix connection string (Related: #1322688)</changelog>
</package>
<package pkgid="caa8e3a13e4c6ab0079376c26d76479d1661fbfe45af47e097175392c893eeca" name="openjpeg" arch="i686">
  <version epoch="0" ver="1.3" rel="16.el6_8"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.3-14" date="1487678400">- Add patches for CVE-2016-5139, CVE-2016-5158, CVE-2016-5159
  Related: #1419775</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.3-15" date="1487764800">- Add two more allocation checks to patch for CVE-2016-5159
  Related: #1419775</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.3-16" date="1488456000">- Revert previous changes in patch for CVE-2016-5159
- Fix double free in patch for CVE-2016-5139
- Fix memory leaks and invalid read in cio_bytein
  Related: #1419775</changelog>
</package>
<package pkgid="4f3a1a2e2df881c6bc043fa6972b2b4de259a2aab0ed9daef968a936362018b0" name="openjpeg-devel" arch="i686">
  <version epoch="0" ver="1.3" rel="16.el6_8"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.3-14" date="1487678400">- Add patches for CVE-2016-5139, CVE-2016-5158, CVE-2016-5159
  Related: #1419775</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.3-15" date="1487764800">- Add two more allocation checks to patch for CVE-2016-5159
  Related: #1419775</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.3-16" date="1488456000">- Revert previous changes in patch for CVE-2016-5159
- Fix double free in patch for CVE-2016-5139
- Fix memory leaks and invalid read in cio_bytein
  Related: #1419775</changelog>
</package>
<package pkgid="4441a6964c015cac4c9a4bdecdd962dafaec44be84769df2bffaeb8aa78bfb44" name="openjpeg-libs" arch="i686">
  <version epoch="0" ver="1.3" rel="16.el6_8"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.3-14" date="1487678400">- Add patches for CVE-2016-5139, CVE-2016-5158, CVE-2016-5159
  Related: #1419775</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.3-15" date="1487764800">- Add two more allocation checks to patch for CVE-2016-5159
  Related: #1419775</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.3-16" date="1488456000">- Revert previous changes in patch for CVE-2016-5159
- Fix double free in patch for CVE-2016-5139
- Fix memory leaks and invalid read in cio_bytein
  Related: #1419775</changelog>
</package>
<package pkgid="60dfd2a88c9f903ef9e55ba4b14ba0d50bd78a633c3cb09fd7b179286ec7ef74" name="openldap" arch="i686">
  <version epoch="0" ver="2.4.40" rel="6.el6_7"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.4.40-4" date="1427198400">- fix: Updating openldap deletes database if slapd.conf is used (#1193519)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.4.40-5" date="1432209600">- fix: nslcd segfaults due to incorrect mutex initialization (#1144294)</changelog>
  <changelog author="Mat&#xFA;&#x161; Hon&#x11B;k &lt;mhonek@redhat.com&gt; - 2.4.40-6" date="1442491200">- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263171)</changelog>
</package>
<package pkgid="5fdbd44a8ce3f54c6ba5aadf946f5e71d7fa9de8adee037f070cf4dae1cdef4b" name="openldap-clients" arch="i686">
  <version epoch="0" ver="2.4.40" rel="6.el6_7"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.4.40-4" date="1427198400">- fix: Updating openldap deletes database if slapd.conf is used (#1193519)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.4.40-5" date="1432209600">- fix: nslcd segfaults due to incorrect mutex initialization (#1144294)</changelog>
  <changelog author="Mat&#xFA;&#x161; Hon&#x11B;k &lt;mhonek@redhat.com&gt; - 2.4.40-6" date="1442491200">- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263171)</changelog>
</package>
<package pkgid="334c4e10a7f8386124a37f0ab3fa55879a79216d5217b0fe5c7f552e94ba4e07" name="openldap-devel" arch="i686">
  <version epoch="0" ver="2.4.40" rel="6.el6_7"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.4.40-4" date="1427198400">- fix: Updating openldap deletes database if slapd.conf is used (#1193519)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.4.40-5" date="1432209600">- fix: nslcd segfaults due to incorrect mutex initialization (#1144294)</changelog>
  <changelog author="Mat&#xFA;&#x161; Hon&#x11B;k &lt;mhonek@redhat.com&gt; - 2.4.40-6" date="1442491200">- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263171)</changelog>
</package>
<package pkgid="2f05bf4d69841ceac3336d3319f26e55d4c0d9e3d95120754e5f32b2010dac94" name="openldap-servers" arch="i686">
  <version epoch="0" ver="2.4.40" rel="6.el6_7"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.4.40-4" date="1427198400">- fix: Updating openldap deletes database if slapd.conf is used (#1193519)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.4.40-5" date="1432209600">- fix: nslcd segfaults due to incorrect mutex initialization (#1144294)</changelog>
  <changelog author="Mat&#xFA;&#x161; Hon&#x11B;k &lt;mhonek@redhat.com&gt; - 2.4.40-6" date="1442491200">- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263171)</changelog>
</package>
<package pkgid="3212b90ae2f9cc26e7257bf6cd262deac0762e5e62e3ba86af648b96c4e02bff" name="openldap-servers-sql" arch="i686">
  <version epoch="0" ver="2.4.40" rel="6.el6_7"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.4.40-4" date="1427198400">- fix: Updating openldap deletes database if slapd.conf is used (#1193519)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 2.4.40-5" date="1432209600">- fix: nslcd segfaults due to incorrect mutex initialization (#1144294)</changelog>
  <changelog author="Mat&#xFA;&#x161; Hon&#x11B;k &lt;mhonek@redhat.com&gt; - 2.4.40-6" date="1442491200">- CVE-2015-6908 openldap: ber_get_next denial of service vulnerability (#1263171)</changelog>
</package>
<package pkgid="1e9cc6032c5455e42fb331cee2d74c8c458b74194292f926bb5baf6173c15181" name="openslp" arch="i686">
  <version epoch="1" ver="2.0.0" rel="3.el6"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1400673600">- Update to openslp-2.0.0
  Resolves: #1065558</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-2" date="1407326400">- Fix possible double free error and remve non reachable code
  Resolves: #1122090</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-3" date="1532520000">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575699</changelog>
</package>
<package pkgid="5b52a1b6835e7c3b194075334dc126747b0bbcaff2bbcc0e64f6ec97180312a6" name="openslp" arch="i686">
  <version epoch="1" ver="2.0.0" rel="4.el6_10"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-2" date="1407326400">- Fix possible double free error and remve non reachable code
  Resolves: #1122090</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-3" date="1532520000">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575699</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-4" date="1578398400">- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1788447</changelog>
</package>
<package pkgid="cad2281b0054d0180d87e9187643325f0bd1bc8e5695dbb1281f25c01049dea2" name="openslp-devel" arch="i686">
  <version epoch="1" ver="2.0.0" rel="3.el6"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1400673600">- Update to openslp-2.0.0
  Resolves: #1065558</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-2" date="1407326400">- Fix possible double free error and remve non reachable code
  Resolves: #1122090</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-3" date="1532520000">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575699</changelog>
</package>
<package pkgid="1f3373a88c9ebe30aee90f957eb32c43d230b47ba1baf50a0b4879b603f69081" name="openslp-devel" arch="i686">
  <version epoch="1" ver="2.0.0" rel="4.el6_10"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-2" date="1407326400">- Fix possible double free error and remve non reachable code
  Resolves: #1122090</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-3" date="1532520000">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575699</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-4" date="1578398400">- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1788447</changelog>
</package>
<package pkgid="930886e865d07615b0934dfe523e129c08910633616040c77b3060b82cd3dd57" name="openslp-server" arch="i686">
  <version epoch="1" ver="2.0.0" rel="3.el6"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1400673600">- Update to openslp-2.0.0
  Resolves: #1065558</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-2" date="1407326400">- Fix possible double free error and remve non reachable code
  Resolves: #1122090</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-3" date="1532520000">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575699</changelog>
</package>
<package pkgid="8a87d636e46ac0a24aee8535d355e431832995b26aa2d19a2e798e6c0b0963e1" name="openslp-server" arch="i686">
  <version epoch="1" ver="2.0.0" rel="4.el6_10"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-2" date="1407326400">- Fix possible double free error and remve non reachable code
  Resolves: #1122090</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-3" date="1532520000">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575699</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0.0-4" date="1578398400">- Fix a heap-based buffer overflow vulnerability leading to
  remote code execution, CVE-2019-5544
  Resolves: #1788447</changelog>
</package>
<package pkgid="252fadf9d817fb2c1e55d9d78a0c8a0f5091188b59025043038955785f82530b" name="openssh" arch="i686">
  <version epoch="0" ver="5.3p1" rel="114.el6_7"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-112" date="1437134400">- SSH2_MSG_DISCONNECT for user initiated disconnect follow RFC 4253 (#1222500)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-113" date="1458043200">- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317816)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-114" date="1458129600">- CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices (#1245969)</changelog>
</package>
<package pkgid="486aecd1e95f71045e18adc8e917eab2a0f28e711584ac13c5588651743316ff" name="openssh" arch="i686">
  <version epoch="0" ver="5.3p1" rel="118.1.el6_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-116" date="1456401600">- Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
- Initialize devices_done variable for challenge response (#1281468)
- Update behaviour of X11 forwarding to match upstream (#1299048)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-117" date="1458043200">- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317817)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-118.1" date="1461585600">- ssh-copy-id: SunOS does not understand ~ (#1327547)</changelog>
</package>
<package pkgid="a7c57014d7bb3c2946f68115cd5d600e399d07a16834e0213abae071eadf4166" name="openssh" arch="i686">
  <version epoch="0" ver="5.3p1" rel="122.el6"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-120" date="1478088000">- Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
- Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-121" date="1481803200">- Fix missing hmac-md5-96 from server offer (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
</package>
<package pkgid="97f740105110feb2ce73b673f21c9317bbf4369cdf53b1a03d779d331608968f" name="openssh" arch="i686">
  <version epoch="0" ver="5.3p1" rel="123.el6_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-121" date="1481803200">- Fix missing hmac-md5-96 from server offer (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-123" date="1501761600">- Fix for CVE-2016-6210: User enumeration via covert timing channel (#1357442)</changelog>
</package>
<package pkgid="d8dba83443b4ee665dcf85dbe5d05568ac3f6aa448017ccac834a6a7c7f152d0" name="openssh" arch="i686">
  <version epoch="0" ver="5.3p1" rel="124.el6_10"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-123" date="1501761600">- Fix for CVE-2016-6210: User enumeration via covert timing channel (#1357442)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-124" date="1552996800">- Fix for CVE-2018-15473: User enumeration via malformed packets in authentication requests</changelog>
</package>
<package pkgid="db9bfdb02243189ed22480374d6d6e8eb89f758abe1dc2a88fdbfd40c5c1433a" name="openssh-askpass" arch="i686">
  <version epoch="0" ver="5.3p1" rel="114.el6_7"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-112" date="1437134400">- SSH2_MSG_DISCONNECT for user initiated disconnect follow RFC 4253 (#1222500)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-113" date="1458043200">- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317816)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-114" date="1458129600">- CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices (#1245969)</changelog>
</package>
<package pkgid="ee584b641ff8db2dd4a0038f603ce008ded4311f60e5d169a11f7966dd29197c" name="openssh-askpass" arch="i686">
  <version epoch="0" ver="5.3p1" rel="118.1.el6_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-116" date="1456401600">- Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
- Initialize devices_done variable for challenge response (#1281468)
- Update behaviour of X11 forwarding to match upstream (#1299048)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-117" date="1458043200">- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317817)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-118.1" date="1461585600">- ssh-copy-id: SunOS does not understand ~ (#1327547)</changelog>
</package>
<package pkgid="36e786684c409d8a56b4ed123e9ac7d3d2b009af54ff36a699fac6467902b2ee" name="openssh-askpass" arch="i686">
  <version epoch="0" ver="5.3p1" rel="122.el6"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-120" date="1478088000">- Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
- Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-121" date="1481803200">- Fix missing hmac-md5-96 from server offer (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
</package>
<package pkgid="9ebe578b10b675e75207ad8b7e4c294056c2b5b768257d9c0bbe4631ba168cff" name="openssh-askpass" arch="i686">
  <version epoch="0" ver="5.3p1" rel="123.el6_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-121" date="1481803200">- Fix missing hmac-md5-96 from server offer (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-123" date="1501761600">- Fix for CVE-2016-6210: User enumeration via covert timing channel (#1357442)</changelog>
</package>
<package pkgid="d2e12b7b43ea7f6f990f8b78cb1fd23fbb8b220c68ebd617fc9b2b191576f40c" name="openssh-askpass" arch="i686">
  <version epoch="0" ver="5.3p1" rel="124.el6_10"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-123" date="1501761600">- Fix for CVE-2016-6210: User enumeration via covert timing channel (#1357442)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-124" date="1552996800">- Fix for CVE-2018-15473: User enumeration via malformed packets in authentication requests</changelog>
</package>
<package pkgid="922d417f75af9437ce8e38b7fa265c91e89fd0f78676f53f25c29ca1ebcd33cd" name="openssh-clients" arch="i686">
  <version epoch="0" ver="5.3p1" rel="114.el6_7"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-112" date="1437134400">- SSH2_MSG_DISCONNECT for user initiated disconnect follow RFC 4253 (#1222500)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-113" date="1458043200">- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317816)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-114" date="1458129600">- CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices (#1245969)</changelog>
</package>
<package pkgid="ad0c983efd8069a4249df7df1ca4645f4bb2894875bd70389502e199771bf6cc" name="openssh-clients" arch="i686">
  <version epoch="0" ver="5.3p1" rel="118.1.el6_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-116" date="1456401600">- Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
- Initialize devices_done variable for challenge response (#1281468)
- Update behaviour of X11 forwarding to match upstream (#1299048)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-117" date="1458043200">- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317817)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-118.1" date="1461585600">- ssh-copy-id: SunOS does not understand ~ (#1327547)</changelog>
</package>
<package pkgid="1898260f76433e9ddd0eb19b819b30ba29394f2585be93d98f38b0e81482e594" name="openssh-clients" arch="i686">
  <version epoch="0" ver="5.3p1" rel="122.el6"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-120" date="1478088000">- Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
- Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-121" date="1481803200">- Fix missing hmac-md5-96 from server offer (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
</package>
<package pkgid="157503a3564f8126bd3e0c24d2b9cf73bee3036259ab43438fe381e969b22701" name="openssh-clients" arch="i686">
  <version epoch="0" ver="5.3p1" rel="123.el6_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-121" date="1481803200">- Fix missing hmac-md5-96 from server offer (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-123" date="1501761600">- Fix for CVE-2016-6210: User enumeration via covert timing channel (#1357442)</changelog>
</package>
<package pkgid="a55495d6c00cf449108441be51f1415892a817c0b53a909da543a634e6d79d49" name="openssh-clients" arch="i686">
  <version epoch="0" ver="5.3p1" rel="124.el6_10"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-123" date="1501761600">- Fix for CVE-2016-6210: User enumeration via covert timing channel (#1357442)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-124" date="1552996800">- Fix for CVE-2018-15473: User enumeration via malformed packets in authentication requests</changelog>
</package>
<package pkgid="90bac756f900b6a1044e02973f393accfa09af209fa979ad667fa04b6106614b" name="openssh-ldap" arch="i686">
  <version epoch="0" ver="5.3p1" rel="114.el6_7"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-112" date="1437134400">- SSH2_MSG_DISCONNECT for user initiated disconnect follow RFC 4253 (#1222500)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-113" date="1458043200">- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317816)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-114" date="1458129600">- CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices (#1245969)</changelog>
</package>
<package pkgid="932bf8112c4b6fdde912ea45fa67f5d933c57474f0e8e44fbf2efa905c3c8208" name="openssh-ldap" arch="i686">
  <version epoch="0" ver="5.3p1" rel="118.1.el6_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-116" date="1456401600">- Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
- Initialize devices_done variable for challenge response (#1281468)
- Update behaviour of X11 forwarding to match upstream (#1299048)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-117" date="1458043200">- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317817)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-118.1" date="1461585600">- ssh-copy-id: SunOS does not understand ~ (#1327547)</changelog>
</package>
<package pkgid="69d0302651e86fa0a9f8180ff167b1217306aeda4324bfcf45891a7f696a5275" name="openssh-ldap" arch="i686">
  <version epoch="0" ver="5.3p1" rel="122.el6"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-120" date="1478088000">- Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
- Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-121" date="1481803200">- Fix missing hmac-md5-96 from server offer (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
</package>
<package pkgid="d68c23b33bba1319b979fabc1e863ca1762d681b6b9d0c7328e74ba8dbfcd6b9" name="openssh-ldap" arch="i686">
  <version epoch="0" ver="5.3p1" rel="123.el6_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-121" date="1481803200">- Fix missing hmac-md5-96 from server offer (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-123" date="1501761600">- Fix for CVE-2016-6210: User enumeration via covert timing channel (#1357442)</changelog>
</package>
<package pkgid="c708206b081f1b3916fa432b951d5e06c6c5731c94f57330fd4ac0620cacf2ca" name="openssh-ldap" arch="i686">
  <version epoch="0" ver="5.3p1" rel="124.el6_10"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-123" date="1501761600">- Fix for CVE-2016-6210: User enumeration via covert timing channel (#1357442)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-124" date="1552996800">- Fix for CVE-2018-15473: User enumeration via malformed packets in authentication requests</changelog>
</package>
<package pkgid="dbe015acd734ab12b6676a94e25b253bd97c872fe886269ef2f627d8e0f847cc" name="openssh-server" arch="i686">
  <version epoch="0" ver="5.3p1" rel="114.el6_7"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-112" date="1437134400">- SSH2_MSG_DISCONNECT for user initiated disconnect follow RFC 4253 (#1222500)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-113" date="1458043200">- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317816)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-114" date="1458129600">- CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices (#1245969)</changelog>
</package>
<package pkgid="365f895106b57f51cc47ebb618f48502edc14d5d8bf4b2d7b7bc79ee14499925" name="openssh-server" arch="i686">
  <version epoch="0" ver="5.3p1" rel="118.1.el6_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-116" date="1456401600">- Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
- Initialize devices_done variable for challenge response (#1281468)
- Update behaviour of X11 forwarding to match upstream (#1299048)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-117" date="1458043200">- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317817)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-118.1" date="1461585600">- ssh-copy-id: SunOS does not understand ~ (#1327547)</changelog>
</package>
<package pkgid="222b97a6a9ac4c3837bcd3a059da913d5157fc10100377439d900a71026daeea" name="openssh-server" arch="i686">
  <version epoch="0" ver="5.3p1" rel="122.el6"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-120" date="1478088000">- Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
- Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-121" date="1481803200">- Fix missing hmac-md5-96 from server offer (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
</package>
<package pkgid="da74fcb0fb1a37d77cd93cd4fd4523ed08a472fec06f48fab2102d1da3a18bfb" name="openssh-server" arch="i686">
  <version epoch="0" ver="5.3p1" rel="123.el6_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-121" date="1481803200">- Fix missing hmac-md5-96 from server offer (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-123" date="1501761600">- Fix for CVE-2016-6210: User enumeration via covert timing channel (#1357442)</changelog>
</package>
<package pkgid="b48d7d7bcbf1b91d4936846776ea0e064b8685103a0c595fa08e561dc00504e3" name="openssh-server" arch="i686">
  <version epoch="0" ver="5.3p1" rel="124.el6_10"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-123" date="1501761600">- Fix for CVE-2016-6210: User enumeration via covert timing channel (#1357442)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-124" date="1552996800">- Fix for CVE-2018-15473: User enumeration via malformed packets in authentication requests</changelog>
</package>
<package pkgid="b4b08905dbe38efd4014324728804f008cb36d5b1af190db03245b9b5dce6088" name="openssl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="42.el6_7.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-41" date="1434024000">- improved fix for CVE-2015-1791
- add missing parts of CVE-2015-0209 fix for corectness although unexploitable</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42" date="1435060800">- fix regression caused by mistake in fix for CVE-2015-1791</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.1" date="1449230400">- fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
- fix CVE-2015-3196 - race condition when handling PSK identity hint</changelog>
</package>
<package pkgid="dafce543c33dc27142b132b85cf31eb2be698559f64a2c490b5d17219cf888c2" name="openssl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="42.el6_7.2"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42" date="1435060800">- fix regression caused by mistake in fix for CVE-2015-1791</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.1" date="1449230400">- fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
- fix CVE-2015-3196 - race condition when handling PSK identity hint</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.2" date="1450699200">- fix CVE-2015-7575 - disallow use of MD5 in TLS1.2</changelog>
</package>
<package pkgid="f3dd6b0fc32dd1fc1075f84be5390ef56abaecbe03a80721e3cb461861fc7c1c" name="openssl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="42.el6_7.4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.2" date="1450699200">- fix CVE-2015-7575 - disallow use of MD5 in TLS1.2</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.3" date="1455624000">- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.4" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
</package>
<package pkgid="48192dd8c69b530522da04e582c5738fb59023e8a13958190286c7ad7ddbe87a" name="openssl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.el6_8.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Connie Sieh &lt;csieh@fnal.gov&gt; 1.0.1e-48.el6_8.1" date="1463572800">- backport upstream commit to replace expired testing certificates
  for S/MIME tests (#1335097)
- Not changing version since next RHEL version will need this</changelog>
</package>
<package pkgid="3cb71a00f3b543c77c6e32ae43f09f77a6ec1a9035af3b25f81f2e9d1baac0c7" name="openssl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.el6_8.4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.3" date="1474545600">- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2179 - further DoS issues in DTLS
- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
- fix CVE-2016-6304 - unbound memory growth with OCSP status request
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
  112 bit effective strength
- replace expired testing certificates</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.4" date="1486382400">- fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
- fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts</changelog>
</package>
<package pkgid="acb86da32f6476efff4ed21e65dc9b934062562b6e588c34008faff2f0fff0eb" name="openssl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.sl6_8.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Connie Sieh &lt;csieh@fnal.gov&gt; 1.0.1e-48.sl6_8.1" date="1463572800">- backport upstream commit to replace expired testing certificates
  for S/MIME tests (#1335097)</changelog>
</package>
<package pkgid="438ea01961b7a4b259c08197b49cdadf0502350f87947a7c3ae91531a073eb10" name="openssl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.sl6_8.3"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.3" date="1474545600">- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2179 - further DoS issues in DTLS
- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
- fix CVE-2016-6304 - unbound memory growth with OCSP status request
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
  112 bit effective strength
- replace expired testing certificates</changelog>
</package>
<package pkgid="e12f8db124e6f308c5cdbf2af112999317a6789d82c3a04f6d46fea56b7b6f25" name="openssl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.sl6_8.4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.3" date="1474545600">- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2179 - further DoS issues in DTLS
- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
- fix CVE-2016-6304 - unbound memory growth with OCSP status request
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
  112 bit effective strength
- replace expired testing certificates</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.4" date="1486382400">- fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
- fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts</changelog>
</package>
<package pkgid="f72d77100dd96a17ebac2a4f1c9dfebe87ddb6058c9c53ec5e0159a7563c0039" name="openssl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="58.el6_10"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-55" date="1478001600">- fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-57" date="1485777600">- fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-58" date="1561982400">- fix CVE-2019-1559 - 0-byte record padding oracle</changelog>
</package>
<package pkgid="67b5f00e0fc6680d2c17dd6b197d337e8039d944e4c1755f153eb00cc6ae9739" name="openssl-devel" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="42.el6_7.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-41" date="1434024000">- improved fix for CVE-2015-1791
- add missing parts of CVE-2015-0209 fix for corectness although unexploitable</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42" date="1435060800">- fix regression caused by mistake in fix for CVE-2015-1791</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.1" date="1449230400">- fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
- fix CVE-2015-3196 - race condition when handling PSK identity hint</changelog>
</package>
<package pkgid="e1e6bf93611b37a6633658908a884f0d0a54145928c866543b5bf9754cef931f" name="openssl-devel" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="42.el6_7.2"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42" date="1435060800">- fix regression caused by mistake in fix for CVE-2015-1791</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.1" date="1449230400">- fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
- fix CVE-2015-3196 - race condition when handling PSK identity hint</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.2" date="1450699200">- fix CVE-2015-7575 - disallow use of MD5 in TLS1.2</changelog>
</package>
<package pkgid="68b67d5ed61781084b847adcd653935cd8bfabb3e7caa7fd945a7d04e4bfd09e" name="openssl-devel" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="42.el6_7.4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.2" date="1450699200">- fix CVE-2015-7575 - disallow use of MD5 in TLS1.2</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.3" date="1455624000">- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.4" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
</package>
<package pkgid="7ecba0da895cb2359ce4e64e29487dd84c131f375ffcfbea43c6b8eaff058f4c" name="openssl-devel" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.el6_8.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Connie Sieh &lt;csieh@fnal.gov&gt; 1.0.1e-48.el6_8.1" date="1463572800">- backport upstream commit to replace expired testing certificates
  for S/MIME tests (#1335097)
- Not changing version since next RHEL version will need this</changelog>
</package>
<package pkgid="eb2e349ba79aa7252233dfbaffe89865dcfc4b88c1e7fe65f157be77ce030da5" name="openssl-devel" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.el6_8.4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.3" date="1474545600">- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2179 - further DoS issues in DTLS
- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
- fix CVE-2016-6304 - unbound memory growth with OCSP status request
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
  112 bit effective strength
- replace expired testing certificates</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.4" date="1486382400">- fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
- fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts</changelog>
</package>
<package pkgid="0b8373ee180c20829d98c13981477acce6bba9ade728e7978e56abf3316a7085" name="openssl-devel" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.sl6_8.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Connie Sieh &lt;csieh@fnal.gov&gt; 1.0.1e-48.sl6_8.1" date="1463572800">- backport upstream commit to replace expired testing certificates
  for S/MIME tests (#1335097)</changelog>
</package>
<package pkgid="12bfc2005f0a2d121cbb7b8c085162a1ef4625b1d534086977a2a83b5d7b11b7" name="openssl-devel" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.sl6_8.3"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.3" date="1474545600">- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2179 - further DoS issues in DTLS
- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
- fix CVE-2016-6304 - unbound memory growth with OCSP status request
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
  112 bit effective strength
- replace expired testing certificates</changelog>
</package>
<package pkgid="6b20c4cb87c930ca05a0fdd8830a5df4c45f86f25baf25143a804a5f9f40bbcb" name="openssl-devel" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.sl6_8.4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.3" date="1474545600">- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2179 - further DoS issues in DTLS
- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
- fix CVE-2016-6304 - unbound memory growth with OCSP status request
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
  112 bit effective strength
- replace expired testing certificates</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.4" date="1486382400">- fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
- fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts</changelog>
</package>
<package pkgid="d96d5fd130f2ef9e60e1959f2913cf9c1b77059ff37edd1b17afb10ad4ca1a7a" name="openssl-devel" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="58.el6_10"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-55" date="1478001600">- fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-57" date="1485777600">- fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-58" date="1561982400">- fix CVE-2019-1559 - 0-byte record padding oracle</changelog>
</package>
<package pkgid="8ee9879db5f41bf6c089ccb613331664beb1376708336d90db4433dd638f523e" name="openssl-perl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="42.el6_7.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-41" date="1434024000">- improved fix for CVE-2015-1791
- add missing parts of CVE-2015-0209 fix for corectness although unexploitable</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42" date="1435060800">- fix regression caused by mistake in fix for CVE-2015-1791</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.1" date="1449230400">- fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
- fix CVE-2015-3196 - race condition when handling PSK identity hint</changelog>
</package>
<package pkgid="67a332654c68681fa9d9cc7503a8bb13cc93d84734857556eea6d5877b6d60b2" name="openssl-perl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="42.el6_7.2"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42" date="1435060800">- fix regression caused by mistake in fix for CVE-2015-1791</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.1" date="1449230400">- fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
- fix CVE-2015-3196 - race condition when handling PSK identity hint</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.2" date="1450699200">- fix CVE-2015-7575 - disallow use of MD5 in TLS1.2</changelog>
</package>
<package pkgid="dce30ce24d106af4879db87e999ea13fdcb7af601992b4835815e330cb2d85e7" name="openssl-perl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="42.el6_7.4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.2" date="1450699200">- fix CVE-2015-7575 - disallow use of MD5 in TLS1.2</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.3" date="1455624000">- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.4" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
</package>
<package pkgid="21ee984a511119ded1a9bd9b485839143451d83800df6c5babc56c35d201b905" name="openssl-perl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.el6_8.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Connie Sieh &lt;csieh@fnal.gov&gt; 1.0.1e-48.el6_8.1" date="1463572800">- backport upstream commit to replace expired testing certificates
  for S/MIME tests (#1335097)
- Not changing version since next RHEL version will need this</changelog>
</package>
<package pkgid="8286b7b4492285175f64972280bd65365cbc4cecf3fc4a586592cd8869426b49" name="openssl-perl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.el6_8.4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.3" date="1474545600">- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2179 - further DoS issues in DTLS
- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
- fix CVE-2016-6304 - unbound memory growth with OCSP status request
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
  112 bit effective strength
- replace expired testing certificates</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.4" date="1486382400">- fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
- fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts</changelog>
</package>
<package pkgid="77210b51991e4f258e3ca4f0082e1cba33510d2c6366c9f4fc796aa44d66f4e2" name="openssl-perl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.sl6_8.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Connie Sieh &lt;csieh@fnal.gov&gt; 1.0.1e-48.sl6_8.1" date="1463572800">- backport upstream commit to replace expired testing certificates
  for S/MIME tests (#1335097)</changelog>
</package>
<package pkgid="024f8567380466cc8f5733a91c28ed3c63fecff997e12dda189a247db4897e4a" name="openssl-perl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.sl6_8.3"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.3" date="1474545600">- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2179 - further DoS issues in DTLS
- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
- fix CVE-2016-6304 - unbound memory growth with OCSP status request
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
  112 bit effective strength
- replace expired testing certificates</changelog>
</package>
<package pkgid="dbc4c9379011732e5b48142a2286c9fba6d6e5568c1555f8ce9c5752064a622f" name="openssl-perl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.sl6_8.4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.3" date="1474545600">- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2179 - further DoS issues in DTLS
- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
- fix CVE-2016-6304 - unbound memory growth with OCSP status request
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
  112 bit effective strength
- replace expired testing certificates</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.4" date="1486382400">- fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
- fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts</changelog>
</package>
<package pkgid="32aea464a4560d5094a1ef28707b8ca45f375a3c2fa947f66238f21234a8d8df" name="openssl-perl" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="58.el6_10"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-55" date="1478001600">- fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-57" date="1485777600">- fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-58" date="1561982400">- fix CVE-2019-1559 - 0-byte record padding oracle</changelog>
</package>
<package pkgid="15081d168cdb20f9d75154670153ae05aa847544170d06469ee429f252327ab9" name="openssl-static" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="42.el6_7.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-41" date="1434024000">- improved fix for CVE-2015-1791
- add missing parts of CVE-2015-0209 fix for corectness although unexploitable</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42" date="1435060800">- fix regression caused by mistake in fix for CVE-2015-1791</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.1" date="1449230400">- fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
- fix CVE-2015-3196 - race condition when handling PSK identity hint</changelog>
</package>
<package pkgid="175cb41cab76f352d2da9d9006275059d6dcbe52547687563cb8d67ca5bae0c8" name="openssl-static" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="42.el6_7.2"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42" date="1435060800">- fix regression caused by mistake in fix for CVE-2015-1791</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.1" date="1449230400">- fix CVE-2015-3194 - certificate verify crash with missing PSS parameter
- fix CVE-2015-3195 - X509_ATTRIBUTE memory leak
- fix CVE-2015-3196 - race condition when handling PSK identity hint</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.2" date="1450699200">- fix CVE-2015-7575 - disallow use of MD5 in TLS1.2</changelog>
</package>
<package pkgid="e51ef1a0e204ff10d536dd3081e7a05f0ff0e737d4534db78873c79f0bf4ac18" name="openssl-static" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="42.el6_7.4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.2" date="1450699200">- fix CVE-2015-7575 - disallow use of MD5 in TLS1.2</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.3" date="1455624000">- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-42.4" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
</package>
<package pkgid="36ae16de5d7144fc1a0928991cf01b300a2fe291311c40f162e5477439ae0ebe" name="openssl-static" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.el6_8.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Connie Sieh &lt;csieh@fnal.gov&gt; 1.0.1e-48.el6_8.1" date="1463572800">- backport upstream commit to replace expired testing certificates
  for S/MIME tests (#1335097)
- Not changing version since next RHEL version will need this</changelog>
</package>
<package pkgid="7d3cabe49d0e56086a0c82cbc8884bb1abc9ae0e035bdf303b79bb3457bd21bf" name="openssl-static" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.el6_8.4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.3" date="1474545600">- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2179 - further DoS issues in DTLS
- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
- fix CVE-2016-6304 - unbound memory growth with OCSP status request
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
  112 bit effective strength
- replace expired testing certificates</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.4" date="1486382400">- fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
- fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts</changelog>
</package>
<package pkgid="8ea994d473029cdb0edf56a702d5fd3d89969daddce40759157807c2940f9c56" name="openssl-static" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.sl6_8.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Connie Sieh &lt;csieh@fnal.gov&gt; 1.0.1e-48.sl6_8.1" date="1463572800">- backport upstream commit to replace expired testing certificates
  for S/MIME tests (#1335097)</changelog>
</package>
<package pkgid="49bc3576826fe7b6cb94639630882b03af11711af1875163cf4be7a0ec6b6faa" name="openssl-static" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.sl6_8.3"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48" date="1456315200">- fix CVE-2016-0702 - side channel attack on modular exponentiation
- fix CVE-2016-0705 - double-free in DSA private key parsing
- fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.3" date="1474545600">- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2179 - further DoS issues in DTLS
- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
- fix CVE-2016-6304 - unbound memory growth with OCSP status request
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
  112 bit effective strength
- replace expired testing certificates</changelog>
</package>
<package pkgid="126ff63fe22243f97751c15cc21b49a34a41d8074961d54d208dff9200ada09d" name="openssl-static" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="48.sl6_8.4"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.1" date="1462190400">- fix CVE-2016-2105 - possible overflow in base64 encoding
- fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate()
- fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC
- fix CVE-2016-2108 - memory corruption in ASN.1 encoder
- fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO
- fix CVE-2016-0799 - memory issues in BIO_printf</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.3" date="1474545600">- fix CVE-2016-2177 - possible integer overflow
- fix CVE-2016-2178 - non-constant time DSA operations
- fix CVE-2016-2179 - further DoS issues in DTLS
- fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio()
- fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue
- fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec()
- fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check
- fix CVE-2016-6304 - unbound memory growth with OCSP status request
- fix CVE-2016-6306 - certificate message OOB reads
- mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to
  112 bit effective strength
- replace expired testing certificates</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-48.4" date="1486382400">- fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher
- fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts</changelog>
</package>
<package pkgid="f08d1b56a1609b65e9635dc374c4d1b426a411555b179423876ca079b47f157e" name="openssl-static" arch="i686">
  <version epoch="0" ver="1.0.1e" rel="58.el6_10"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-55" date="1478001600">- fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-57" date="1485777600">- fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.1e-58" date="1561982400">- fix CVE-2019-1559 - 0-byte record padding oracle</changelog>
</package>
<package pkgid="9c0bc92f32991f6494aa03cf194dc827c0f48b4d05bbe2b67402b5a987528ea8" name="openssl098e" arch="i686">
  <version epoch="0" ver="0.9.8e" rel="20.el6_7.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-18" date="1334923200">- fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-20" date="1401796800">- fix for CVE-2014-0224 - SSL/TLS MITM vulnerability</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 0.9.8e-20.1" date="1457092800">- fix CVE-2015-0293 - triggerable assert in SSLv2 server
- fix CVE-2015-3197 - SSLv2 ciphersuite enforcement
- disable SSLv2 in the generic TLS method</changelog>
</package>
<package pkgid="5f8d6b13737b83b220ed0885e2f5ae835bd9e80fbfab37f0aef2eacdd837d07a" name="pacemaker" arch="i686">
  <version epoch="0" ver="1.1.14" rel="8.el6_8.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8" date="1458820800">- fenced unseen nodes should not be considered unclean

  Resolves: rhbz#1321110</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.1" date="1468584000">- add --skip-cman option when stopping pacemaker

  Resolves: rhbz#1355738</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.2" date="1477310400">- Fix CVE-2016-7035

  Resolves: rhbz#1374774</changelog>
</package>
<package pkgid="9cdd424dedcedf29811de496dc495a8c4185059ca7f541fe6488e2956202e3cb" name="pacemaker-cli" arch="i686">
  <version epoch="0" ver="1.1.14" rel="8.el6_8.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8" date="1458820800">- fenced unseen nodes should not be considered unclean

  Resolves: rhbz#1321110</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.1" date="1468584000">- add --skip-cman option when stopping pacemaker

  Resolves: rhbz#1355738</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.2" date="1477310400">- Fix CVE-2016-7035

  Resolves: rhbz#1374774</changelog>
</package>
<package pkgid="a147916934130fb129b9c0ce3cb158cd0bddd6505fc81cc8e9b5bb24bdf18d38" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.14" rel="8.el6_8.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8" date="1458820800">- fenced unseen nodes should not be considered unclean

  Resolves: rhbz#1321110</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.1" date="1468584000">- add --skip-cman option when stopping pacemaker

  Resolves: rhbz#1355738</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.2" date="1477310400">- Fix CVE-2016-7035

  Resolves: rhbz#1374774</changelog>
</package>
<package pkgid="3ba6161047fb551fe499fc07cc4bb5b6dafae31c9ebcdefd5d60618f417997f5" name="pacemaker-cts" arch="i686">
  <version epoch="0" ver="1.1.14" rel="8.el6_8.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8" date="1458820800">- fenced unseen nodes should not be considered unclean

  Resolves: rhbz#1321110</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.1" date="1468584000">- add --skip-cman option when stopping pacemaker

  Resolves: rhbz#1355738</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.2" date="1477310400">- Fix CVE-2016-7035

  Resolves: rhbz#1374774</changelog>
</package>
<package pkgid="22d23cf39803c7b8d8be6283c454a20b1dd542a82f72305f382eb424844f1eaa" name="pacemaker-doc" arch="i686">
  <version epoch="0" ver="1.1.14" rel="8.el6_8.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8" date="1458820800">- fenced unseen nodes should not be considered unclean

  Resolves: rhbz#1321110</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.1" date="1468584000">- add --skip-cman option when stopping pacemaker

  Resolves: rhbz#1355738</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.2" date="1477310400">- Fix CVE-2016-7035

  Resolves: rhbz#1374774</changelog>
</package>
<package pkgid="3534bf6774c4036e30df663f051c36fbf3f1136427a529ada0a78b01f3ee7f8b" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.14" rel="8.el6_8.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8" date="1458820800">- fenced unseen nodes should not be considered unclean

  Resolves: rhbz#1321110</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.1" date="1468584000">- add --skip-cman option when stopping pacemaker

  Resolves: rhbz#1355738</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.2" date="1477310400">- Fix CVE-2016-7035

  Resolves: rhbz#1374774</changelog>
</package>
<package pkgid="db9ece9300fcbb5a2f140aa3f2c6449b02b5f89f60b3601ffdda3f68503a9b4f" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.14" rel="8.el6_8.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8" date="1458820800">- fenced unseen nodes should not be considered unclean

  Resolves: rhbz#1321110</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.1" date="1468584000">- add --skip-cman option when stopping pacemaker

  Resolves: rhbz#1355738</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.2" date="1477310400">- Fix CVE-2016-7035

  Resolves: rhbz#1374774</changelog>
</package>
<package pkgid="554262049de3e8af32dae8d32b3a95755dc5c03686d5d37deef26c3952eba409" name="pacemaker-remote" arch="i686">
  <version epoch="0" ver="1.1.14" rel="8.el6_8.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8" date="1458820800">- fenced unseen nodes should not be considered unclean

  Resolves: rhbz#1321110</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.1" date="1468584000">- add --skip-cman option when stopping pacemaker

  Resolves: rhbz#1355738</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.14-8.2" date="1477310400">- Fix CVE-2016-7035

  Resolves: rhbz#1374774</changelog>
</package>
<package pkgid="d1621b55e1e8e9d42f2331b521cb4efa2120ed41db2cb89632b091c7b3878036" name="pam" arch="i686">
  <version epoch="0" ver="1.1.1" rel="20.el6_7.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.1.1-19" date="1405339200">- pam_userdb: allow any crypt hash algorithm to be used (#1119289)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.1.1-20" date="1405598400">- make pam_pwhistory and pam_unix tolerant of opasswd file corruption</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-20.1" date="1438689600">- fix CVE-2015-3238 - DoS due to blocking pipe with very long password</changelog>
</package>
<package pkgid="1e137fbc41346a6c72269cebe67940b36b1bbdf81329e9ab222807f7e0f4f7d1" name="pam-devel" arch="i686">
  <version epoch="0" ver="1.1.1" rel="20.el6_7.1"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.1.1-19" date="1405339200">- pam_userdb: allow any crypt hash algorithm to be used (#1119289)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; 1.1.1-20" date="1405598400">- make pam_pwhistory and pam_unix tolerant of opasswd file corruption</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.1.1-20.1" date="1438689600">- fix CVE-2015-3238 - DoS due to blocking pipe with very long password</changelog>
</package>
<package pkgid="6173661609bd815ecda5f77e339fac4eb2966db8e0608a551c27829a17442ffa" name="pam_ssh_agent_auth" arch="i686">
  <version epoch="0" ver="0.9.3" rel="114.el6_7"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-112" date="1437134400">- SSH2_MSG_DISCONNECT for user initiated disconnect follow RFC 4253 (#1222500)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-113" date="1458043200">- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317816)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-114" date="1458129600">- CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices (#1245969)</changelog>
</package>
<package pkgid="c6e6bcbfe0520909eafd884b135f25ef97800cfd75b7f059526031951d996d5a" name="pam_ssh_agent_auth" arch="i686">
  <version epoch="0" ver="0.9.3" rel="118.1.el6_8"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-116" date="1456401600">- Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
- Initialize devices_done variable for challenge response (#1281468)
- Update behaviour of X11 forwarding to match upstream (#1299048)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-117" date="1458043200">- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317817)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-118.1" date="1461585600">- ssh-copy-id: SunOS does not understand ~ (#1327547)</changelog>
</package>
<package pkgid="543cde734e09fc76a49702474e0708778a7272ff7047b94ed32817eefc474d45" name="pam_ssh_agent_auth" arch="i686">
  <version epoch="0" ver="0.9.3" rel="122.el6"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-120" date="1478088000">- Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
- Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-121" date="1481803200">- Fix missing hmac-md5-96 from server offer (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
</package>
<package pkgid="0d3b4f07827f28ab885f94552df147e81a91bf37a07e4c2068b95146c1df6cf9" name="pam_ssh_agent_auth" arch="i686">
  <version epoch="0" ver="0.9.3" rel="123.el6_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-121" date="1481803200">- Fix missing hmac-md5-96 from server offer (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-123" date="1501761600">- Fix for CVE-2016-6210: User enumeration via covert timing channel (#1357442)</changelog>
</package>
<package pkgid="c5a4a171ed4c435001e686aa8986e8d9609c60c7e898524a2431e16b735a730d" name="pam_ssh_agent_auth" arch="i686">
  <version epoch="0" ver="0.9.3" rel="124.el6_10"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-123" date="1501761600">- Fix for CVE-2016-6210: User enumeration via covert timing channel (#1357442)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-124" date="1552996800">- Fix for CVE-2018-15473: User enumeration via malformed packets in authentication requests</changelog>
</package>
<package pkgid="dd96b7cd4823a5c8a9c6f9ffcfaa003bb3f1dec7d2cc9881cfcc2cf1017c83d2" name="patch" arch="i686">
  <version epoch="0" ver="2.6" rel="8.el6_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.6-6" date="1281960000">- Another fix for the selinux patch (bug #618215).</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.6-7" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.6-8" date="1523966400">- Fixed year overflow detected in rpmdiff</changelog>
</package>
<package pkgid="4e426081b3325c56230959cc1b72bf895a3fbe1d3275993592f602e1816efbab" name="pcs" arch="i686">
  <version epoch="0" ver="0.9.139" rel="9.el6_7.1"/>
  <changelog author="Tomas Jelinek &lt;tojeline@redhat.com&gt; - 0.9.139-8" date="1428062400">- Fixed duplicated nodes in a cluster created by import-cman
- Resolves: rhbz#1171312</changelog>
  <changelog author="Chris Feist &lt;cfeist@redhat.com&gt; - 0.9.139-9" date="1429012800">- Added fix for missing cookie signature
- Resolves: rhbz#1211566</changelog>
  <changelog author="Tomas Jelinek &lt;tojeline@redhat.com&gt; - 0.9.139-9.el6_7.1" date="1439553600">- Fixed session and cookies processing
- Fixed command injection vulnerability
- Resolves: rhbz#1253287 rhbz#1253291</changelog>
</package>
<package pkgid="fc6fec09c87819ec6215d90a92fe5958bb39fdddf038cc25c98e3145228f545a" name="pcs" arch="i686">
  <version epoch="0" ver="0.9.155" rel="3.el6"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.155-1" date="1478174400">- Rebased to latest upstream packages
- When stopping a cluster with some of the nodes unreachable, stop the cluster completely on all reachable nodes
- Fixed occasional crashes / failures when using locale other than en_US.UTF8
- Added SBD support for cman clusters
- Added alerts management in web UI
- Resolves: rhbz#1373874 rhbz#1315748 rhbz#1380372 rhbz#1387106 rhbz#1380352 rhbz#1376480</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.155-2" date="1479902400">- Fixed upgrading CIB to the latest schema version
- Adding a node in a cluster does not cause the new node to be fenced immediately
- Fixed handling of HTTP communication failure
- Added dependency on cman
- Resolves: rhbz#1397408 rhbz#1394846 rhbz#1394273 rhbz#1394857</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.155-3" date="1521633600">- Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
- Resolves: rhbz#1557962</changelog>
</package>
<package pkgid="241a19ea51f4257f697ba2aacd8e6a5543363c0b8d60f4954f45689e26451506" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.12.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.10.1.el6]" date="1446811200">- [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
- [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
- [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
- [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
- [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
- [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
- [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.11.1.el6]" date="1447416000">- [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
- [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.12.1.el6]" date="1448280000">- Revert: [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]</changelog>
</package>
<package pkgid="3234f9aa5d38924009217a52fae2708ea051d4fca4687ab9eedcdd579dba432d" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.22.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.20.1.el6]" date="1453464000">- [sched] kernel: sched: Fix nohz load accounting -- again (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Move sched_avg_update to update_cpu_load (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure more NO_HZ load average woes (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure load average vs NO_HZ woes (Rafael Aquini) [1300349 1167755]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.21.1.el6]" date="1456142400">- [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1310148 1302223] {CVE-2016-0774}
- [fs] gfs2: Add missing else in trans_add_meta/data (Robert S Peterson) [1304332 1267995]
- [fs] fs-cache: Synchronise object death state change vs operation submission (David Howells) [1308471 1096893]
- [fs] fs-cache: Reduce cookie ref count if submit fails (David Howells) [1308471 1096893]
- [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1302763 1294400]
- [x86] fix corruption of XMM registers when interrupt handlers use FPU (Mikulas Patocka) [1298994 1259023]
- [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1303044 1292300]
- [net] add inet_sk_transparent() helper (Florian Westphal) [1303044 1292300]
- [net] ipv6: tcp_ipv6 policy route issue (Florian Westphal) [1303044 1292300]
- [net] ipv6: reuse rt6_need_strict (Florian Westphal) [1303044 1292300]
- [net] tcp: resets are misrouted (Florian Westphal) [1303044 1292300]
- [net] tcp: tcp_v4_send_reset: binding oif to iif in no sock case (Florian Westphal) [1303044 1292300]
- [crypto] api: Only abort operations on fatal signal (Herbert Xu) [1296014 1272314]
- [crypto] testmgr: don't use interruptible wait in tests (Herbert Xu) [1296014 1272314]
- [kernel] sched: add wait_for_completion_killable_timeout (Herbert Xu) [1296014 1272314]
- [net] sctp: add routing output fallback (Xin Long) [1307073 1229124]
- [net] sctp: fix dst leak (Xin Long) [1307073 1229124]
- [net] sctp: fix src address selection if using secondary addresses (Xin Long) [1307073 1229124]
- [net] sctp: reduce indent level on sctp_v4_get_dst (Xin Long) [1307073 1229124]
- [scsi] hpsa: Update driver revision to RH5 (Joseph Szczypek) [1306192 1244959]
- [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1306192 1244959]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.22.1.el6]" date="1458216000">- [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1318364 1309898]</changelog>
</package>
<package pkgid="a0f647c7a86637f61eaa8fc7b90cc062786c3a9bf86980a5516663bab89735ed" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.26.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.24.1.el6]" date="1458907200">- [sched] fix KABI break (Seth Jennings) [1314878 1230310]
- [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] sched,perf: Fix periodic timers (Seth Jennings) [1314878 1230310]
- [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1314878 1230310]
- [sched] Cleanup bandwidth timers (Seth Jennings) [1314878 1230310]
- [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix unlocked reads of some cfs_b-&gt;quota/period (Seth Jennings) [1314878 1230310]
- [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq-&gt;lock (Seth Jennings) [1314878 1230310]
- [sched] Fix hrtimer_cancel/rq-&gt;lock deadlock (Seth Jennings) [1314878 1230310]
- [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1314878 1230310]
- [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [block] Fix q_suspended logic error for io submission (David Milburn) [1314209 1227342]
- [block] nvme: No lock while DMA mapping data (David Milburn) [1314209 1227342]
- [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1315706 1249244]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.25.1.el6]" date="1459857600">- [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [fs] anon_inodes implement dname (Aristeu Rozanski) [1322707 1296019]
- [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1320031 1302777]
- [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297421 1297422] {CVE-2015-8767}
- [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1319276 1299975]
- [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1315696 1309241]
- [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid10: submit_bio_wait returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1320863 1273546]
- [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]
- [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.26.1.el6]" date="1460462400">- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1326043 1324318]</changelog>
</package>
<package pkgid="6fbc10a2b001b1f2d9a66e8387bcb092327906684dbd8263926bd2adf41f980e" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.3.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.1.1.el6]" date="1436875200">- [redhat] Update dracut dependency to pull in drbg module (Herbert Xu) [1241518 1241338]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.2.1.el6]" date="1437566400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
- [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
- [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
- [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
- [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
- [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
- [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.3.1.el6]" date="1439208000">- [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
- [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]</changelog>
</package>
<package pkgid="ed5afc65ec5430bd7b2576898f02cc120e50be9d6cb5f48a7b0ecee9f8b41cc8" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.11.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.9.1.el6]" date="1475841600">- [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1381592 1367250]
- [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve Best) [1377472 1341758]
- [powerpc] eeh: Block PCI configuration space access during EEH (Gustavo Duarte) [1379596 1216944]
- [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347101 1347102] {CVE-2016-1583}
- [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1341546 1316461] {CVE-2016-2143}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.10.1.el6]" date="1476187200">- [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Maurizio Lombardi) [1382620 1341298]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="b15b6810b5ddc987363adac432e96d44959811d1268836d25b704264b097d60c" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
</package>
<package pkgid="e43099e327106cc78a2bd0fb595ad8c9b5122f59517095fe90d70a9910487775" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.13.2.el6]" date="1487419200">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="c4ad9d7104868640038ecbfa4b5b16c231569d843b6113fbb17e350ad8835786" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.15.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.14.1.el6]" date="1483617600">- [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
- [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
- [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
- [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
- [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
- [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
- [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
- [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
- [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
- [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
- [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.15.1.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="bdec1f8d5d11a1a90d4d948c0e419d8b308552a9468cf62e1084447f5b1939ce" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.3.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.1.1.el6]" date="1462536000">- [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1333571 1314774]
- [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1333571 1314774]
- [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1333571 1314774]
- [base] firmware: Add lock for firmware devices (Lyude Paul) [1333572 1309875]
- [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1333579 1321174]
- [md] dm: only initialize the request_queue once (Mike Snitzer) [1333575 1328329]
- [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1333581 1295969]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.2.1.el6]" date="1465214400">- [sched] Revert "kernel: sched: Cure load average vs NO_HZ woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Cure more NO_HZ load average woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Move sched_avg_update to update_cpu_load" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Fix nohz load accounting -- again" (Rafael Aquini) [1343015 1326373]
- [fs] lockd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [fs] nfsd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [isdn] avoid calling tty_ldisc_flush() in atomic context (Sabrina Dubroca) [1337443 1328115]
- [redhat] Update dracut dependency to pull in ecb module (Herbert Xu) [1334431 1315832]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
</package>
<package pkgid="7af6267bf36de8ec6dcefad28df7fc363980c02127f0319748e39671f93147c4" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.4.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.2.el6]" date="1471262400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}</changelog>
</package>
<package pkgid="c8db830b3b7602804ee478e83cbb3a4b31f897ab3043c041ae210cd51c7d7d42" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
</package>
<package pkgid="b734e9ec893dce984bad1f9f6b6515bdbbb55266088c8f262236c289360e2b64" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.6.2.el6]" date="1477310400">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="4cdbc2070401592c8e72c57f1e037023757f4ace3549d55b873da26b69450829" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.el6"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-640.el6]" date="1460116800">- [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-641.el6]" date="1460462400">- [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
- [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
- [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-642.el6]" date="1460462401">- [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
- [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
- [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]</changelog>
</package>
<package pkgid="ee78b5bf93bcc3e32bcd66471bc99711844f5e094c94b28b7466b262e240cef3" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="a2b37dc278ec53a27459d79db674ceedaaf9132abbdd5cda6ef29ae4129204c6" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="d4c9a873deaa5c6f0262731ee566d58de8eb289b8f5bedd71e32f99c5dd277b8" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="ae3d0fe22e96a9a579f02dc00d443d593257cb944904f990d1fe0e68bf3b33ca" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="93d77ae9f63cc95fe167ae8a988596c22bbfb38ba1b2e3c13fa906b7c00f03e7" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="4775b7008ce9a920b0c17d7508cd6ef33f9f7b3f101838c8a12dd9c3b089cb0a" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="32ec81a576201cf8dc1dae15c78c8ef3f481705328cf4c2279f7b3bd517318ac" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="7c6f20eb7aa0a50f6069554e26d94830aa233a0569ee4ece6baaf8e46bb22b20" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="fb75b65a47c7a16a3b48b261c8cd092830b31f288c42585a536a93af758eaa2e" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="0c58648a8a10e85b96efb380fbb48356421746c501d12933f6a6bbba66f6a3c5" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="19012e0f3c828df4c239592fb10f6d27089d9e5527bde6e39275b9dde06fb81e" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="d7f3a91e470e693b6fa325d6c53be00f0fa4b3d567eae75e620c8a5a8a758464" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="ea3885a7a617df7d58f1cd69ff32b91cfaa4d266f31e78fd28e0a52c5e38b7e6" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="2875143edd973cd32ffc6afd2c536c6e064d2993a3199d53525c8b6b16b22e8c" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="29dc90e7e071a624e7cd1ef43735c6e34b95887e29393b26cd872d3316f9cd9f" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.11.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.9.1.el6]" date="1542801600">- [block] make sure queue_lock is held when setting flag (Ming Lei) [1650024]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
</package>
<package pkgid="b78b97e83988e3e3d7d16c6e9018c7f020219d883288e599d8d9fb36a6f6149a" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.12.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.12.1.el6]" date="1551960000">- [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
- [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
- [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
- [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
- [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
- [s390] detect etoken facility (Hendrik Brueckner) [1625381]
- [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
- [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
- [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
- [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
- [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
- [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
- [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
- [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
- [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]</changelog>
</package>
<package pkgid="f35130477fd4406fcf226e89304de0954d1106b825eb1beb8b6ad4a93c00d98c" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.14.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.13.1.el6]" date="1554120000">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1686170]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.1.el6]" date="1555329600">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695496]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.2.el6]" date="1556107200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
</package>
<package pkgid="af054ea9d64b3b00c7a35623a02e951a9728b2d9bb737645dd9377c1e4c7fc63" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.15.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.2.el6]" date="1559217600">- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.3.el6]" date="1560427200">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}</changelog>
</package>
<package pkgid="bd224abbd3720424b34322ee0d2f92a413e3a1ea0ebc1178f55b8748fd94a7de" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.17.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.16.1.el6]" date="1559044800">- [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
- [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
- [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
- [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
</package>
<package pkgid="6b5c776f334a1c64c2130c80c2f0d8657649cb19aafa728b237b1ad5771b3de3" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.18.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.1.el6]" date="1562673600">- [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
- [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
- [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
- [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
- [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
- [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
- [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
- [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
- [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.2.el6]" date="1564056000">- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
</package>
<package pkgid="fcb15fe4a498200f975029fd8890401061aa1cfbcc292b4c73e245736aa3b5b3" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.2.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.1.1.el6]" date="1529582400">- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
- [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
- [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
- [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change xstateregs_get()/set() to use -&gt;xsave.i387 rather than -&gt;fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] debug: Add KERN_&lt;LEVEL&gt; to bare printks, convert printks to pr_&lt;level&gt; (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Split up &lt;asm/i387.h&gt; into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.2.1.el6]" date="1530619200">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
- [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
- [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
- [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
- [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
- [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]</changelog>
</package>
<package pkgid="b32fb02d145b3aee02c3cda9504ebc7dfc09f402f64a7c84d5c71fe44ae334d8" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.22.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.19.1.el6]" date="1565438400">- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.20.1.el6]" date="1565784000">- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
</package>
<package pkgid="e14d73ace33d346d2a46927e1e45084f7084b609399e33deff7695fffe42438d" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.22.1.el6]" date="1565956801">- Rebuild</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
</package>
<package pkgid="d398e9e0a5a0ece4be5500a7b9a1a8117590a490d0dfa09e4cb49e93b9ad979d" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573041600">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="6e74088f514c07c9417cd0342c264b8799698700dbfa0f7d050f8cda63679b5d" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573128000">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.3.el6]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="74a6eb4410147039c129b1254ffd0b34a343a0c2cf622c0e28c6c2c6ad5e1f88" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.25.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.25.1.el6]" date="1574251200">- [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
- [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
- [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
- [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="ca3cce7406dff45b5e2043d3744e24e4eec4da774a3de6d412f7e1cc87fa80c0" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.26.1.el6]" date="1576670400">- [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
- [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
- [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
</package>
<package pkgid="7bfa51c01cdb3ad26e14b287d4fe65382637d0fb1771f76fdd7cad9cad73775e" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
</package>
<package pkgid="6abd7deef9c75e8656dd20b20e2f6a49b570019356373297a5e2c432a0156f76" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.2.el6]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}</changelog>
</package>
<package pkgid="9a7a4ae39c32a707adeb0dba678febcc60b8dff5087aab7808cfd64a90903f81" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.3.5.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.3.el6]" date="1533297600">- [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
- [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.4.el6]" date="1533729600">- [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.5.el6]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}</changelog>
</package>
<package pkgid="16abaaed6779670b58522418db86108054da83a2b277028afa70096bcadb8a8e" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.30.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.2.el6]" date="1590753600">- x86/speculation: Provide SRBDS late microcode loading support (Waiman Long)
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}</changelog>
</package>
<package pkgid="5e1bc4279f3d3cc73d560fbf4c8a6384991468480c9bcc92a282a54bcceb1445" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.31.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
</package>
<package pkgid="584c5b03bacd4f06762c6cd37e7762bf23661b95307d62ec9775fed3671fd97a" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.33.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.32.1.el6]" date="1594036800">- [wireless] libertas: make lbs_ibss_join_existing() return error code on rates overflow (Jarod Wilson) [1776569]
- [wireless] libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held (Jarod Wilson) [1776569]
- [wireless] libertas: Fix two buffer overflows at parsing bss descriptor (Jarod Wilson) [1776569]
- [security] keys: Protect request_key() against a type with no match function (Patrick Talbert) [1433220] {CVE-2017-2647}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
</package>
<package pkgid="3d5446d78ae1a488458ab00aa5b6f5772520a55c2e11b0a27680cd69bbe2bb14" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.35.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.34.1.el6]" date="1598356800">- [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705003]
- [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705003]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.35.1.el6]" date="1600257600">- [ata] libata: fix NULL sdev dereference race in atapi_qc_complete() (Kenneth Yin) [1876296]</changelog>
</package>
<package pkgid="74e3ce08137d5db72126bbea58e357459d166d77d9748665eaef0f351ede28ab" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.1.el6]" date="1535716800">- [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
- [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
- [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
- [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
- [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
- [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
- [block] Rename queue dead flag (Ming Lei) [1574568]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.2.el6]" date="1536926400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
- [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-754.6.3.el6]" date="1537272000">- [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
- [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
- [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]</changelog>
</package>
<package pkgid="58b1835a94afee8270b09901fcbcad8e14179a06d6610667b0e7d5b45fb72eca" name="perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-752.el6]" date="1525348800">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
- [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
- [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
- [net] security: export security_sk_clone (Marcelo Leitner) [1571357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-753.el6]" date="1526040000">- [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
- [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
- [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
</package>
<package pkgid="31d03187fdeb8ade325bcf18677794a75d3b3962b7c5c7fc77e7a0c4baf3ee14" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="10.el6_10"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.7.1-10" date="1579176000">- fixes arbitrary code execution via .gitmodules
  Resolves: CVE-2018-17456</changelog>
</package>
<package pkgid="e113b089c2aa87ebd601dd69d61f6fe3b084d02588254beb6eb4f852fd31b6d3" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="4.el6_7.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-4" date="1361880000">- fix CVE-2013-0308</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-4.1" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318252</changelog>
</package>
<package pkgid="afced2cc89763349fe540271abef9c11c526e6816c379c684dfbedec70a334f5" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="9.el6_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-7" date="1475236800">- fixes memory corruption on git shortlog
- add -f option for "git submodule add" to add files even when
  these are included in .gitignore
- improve performance of extremly slow http(s)
- fix cloning using http(s) protocol when redirection is requested
  Resolves: #874659 #1207253 #1237395 #1289984</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="ea6c7ace4f1c063af1607e596a1d3add121733f5ced1dcab5e9d2f5900bdc787" name="php" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="e26147a6c3f5c8879d7da765b4ce1b581f53ed5b002f320a0e6fecaf87d0ebfe" name="php" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="6095374e42633284ddee0e187e4190fecba4b6ecf1cb02cf8b39e0e831bf6c73" name="php-bcmath" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="bb4071d5dab61a65f9d70565d418c510f555978d26b0bc41efd5536cfac70240" name="php-bcmath" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="ac2f26ea9d569bff719c8f2b1df1d9e45556e9410f7c2f742afc6eaa4ccd8e4b" name="php-cli" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="4e857b05c31ea8da31257ac297cb4b8ce839c825f00f5d5afbd7b25b3398b97a" name="php-cli" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="83b86bbfc3bad4c41cd56c5d561c3c315b3fc5bd748924cb3298ff2132e52a8a" name="php-common" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="6855813b28c2f4f67e152b6963d12c3473a46af27702031a335b838c812ea9c1" name="php-common" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="6aeeb0781261a4b94960eef22511e6902d10962fd685b6a018bdfbe850e1022a" name="php-dba" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="5497d597961e9ffe0189ef4ea376375fddcf1faeb93d5016e7f0020c844e5772" name="php-dba" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="ee90c3a41a7ebc3d29efd98cd58aa2b17915bccbd56c25fa1b7d1e4f2d1f1c55" name="php-devel" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="c57284d61dba58928ddeacb0bc8932eddf042a5690d44323156bf67e1ff65994" name="php-devel" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="2972d5d56f933c01c8c6c7a5af0d82de4961163d396aaf0268efa2a794106f86" name="php-embedded" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="97f159d70745845e4c6c3576ec01225659f2369325d2dad82a9bc3463e47a401" name="php-embedded" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="fd9b1fa97c084e1753f6431d72194d5b19f1394cd3729cab613a54258d12f325" name="php-enchant" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="0f3efc2649cbe76bf8001a7a71496968e9cc8360396608210ab7cd8e84bc9ae0" name="php-enchant" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="0ff0fd84e4565fa7c2b8781f185449f7b966ce2fa0606f6df08c56b8f0419a59" name="php-fpm" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="c80f5dcb5a5e835c221c0fe5038859bc787a83d5cf382fc156ea9048ab764b67" name="php-fpm" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="0b2b9fa76c5b91c9a4b01005b1a5253f2e6b6ecc0ac04eab3a538e267da0770e" name="php-gd" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="e1fc16f1dc3046858966d6f860e39769044305ade0fd872859324baff229adfe" name="php-gd" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="bad39ba931560704cbcf6096abcc355776a64f5cfa31614ac10c48568dc2ea49" name="php-imap" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="f69cc1420b3ef56fb516db4dd5462df0d28f43cfe1cae692ed40ed770fbbbfbe" name="php-imap" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="4ac973fa5a81da2c327458df149989eca6ace33a6f1dea65bab6ea935b670ecc" name="php-intl" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="d8fefd6aa5d98a5c5f4524d1c84a7fe154732ca02b5f7a9eae28b9135a8e6b97" name="php-intl" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="e9492bc097c2372e27c61454854ad617951a835c62e149f5b5427d290020dd0d" name="php-ldap" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="b86a2fea6a4e91c5657d75ede597b493b207c0d16796f9ccb51823265d9bb619" name="php-ldap" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="8890973d2ab307285ca53575ee5a917a95b730de4d7fabc962489495069a85b3" name="php-mbstring" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="3ff158e5eebe84e07e9c045c1d2869363a20e3a64dff9768ddeff71c0656eee3" name="php-mbstring" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="4e151390277923b62cea491e0876d7dfc603eceda400735e663fecaf9e854ee8" name="php-mysql" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="3e5587b702c4258b7314dcf81b92f293651ec8e442eb92da09438ad49fb3d7ca" name="php-mysql" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="4e735d4d75754129667ab08dcc6ae0291c58f490ee385ba732c403f057bbb45a" name="php-odbc" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="0c2240dc7012473b8fbaefe21d8b63407aaf0a20b05baaa22754d362055f2e62" name="php-odbc" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="ea974630d34f57ba77c058fdcf9c9268f37a02aa3ad1944ffef0d1a861c1b094" name="php-pdo" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="90ff9b29ee8ebdd2c19f0bdd0aa6b6b0202f86d7dbf9c6aae2317e9c0a059a0a" name="php-pdo" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="57c9ad6072697eac16c2238976f0bad59808bd992739fab2cdcf9c583f7dfd8f" name="php-pgsql" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="54fbf61bb3ec5a6214ee3364362ad66faf3970840d739fe877873eaaa385453e" name="php-pgsql" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="abb9ed77eb5c0e2fb351f7c6af9959e4830cea8ef966abccc5974fabae35d4df" name="php-process" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="aabaf393322ce50bf06b017eba34b27d16db1d718d481197176c057b6532d637" name="php-process" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="8de23ca7e9ae422cc6f9c3e04e666b7f757341ed8db79c508775e7c5f9c6dd0a" name="php-pspell" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="bc7435a0491e8fdda3eae35d68feb7b71239e42f205b79fadd6e103d889a7e1c" name="php-pspell" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="f42c1d74712c0dad7275dc2507d565bbeeab0c9b16a43f0815b59dec37bf8bb3" name="php-recode" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="049cbd575404dbcc69a1a99aeb288dde4d0e815ddf26f082ad28127f4cf2131a" name="php-recode" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="c375307e8b4ca7563d495cc619ada1fc975beb8171ae53bc12eacdd914567825" name="php-snmp" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="15baa8b30eec5a2264a8032fcfad750cf0af1421b0b5f285b83fec421a682936" name="php-snmp" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="f7117ff3d697e6e264d5dee54f5b8fb020d39c4a13285e477903e9070637f1b4" name="php-soap" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="68f63d8d2ee6f18e8d309740813261bee597225ef5f79965bdce9cbc54d1404a" name="php-soap" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="e17c33f460ce6a6072cb301ec6e73425519b0ff19269bb8f9220368f29ee2f03" name="php-tidy" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="4519aa2d5f887a5b8b22ae1248ada8ab2de79062ab37e0f455e03849453f5655" name="php-tidy" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="847600b4a1c4a339ef687fc3cf44a04d19edae6f5c3863749e075514368d65d3" name="php-xml" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="e5b343a8932d7783aaaa018f06763c786b304843eb824dbadffaf7a4725822fa" name="php-xml" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="10d1fd5f049cf3109343de8481e3406ecfefc0de50e2456757b0169b08d554f9" name="php-xmlrpc" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="4bca393de2619333b9179251d3d22078c230ef0a2c1eb080f3b451f29ebc2ad0" name="php-xmlrpc" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="1a9fd4bb3c0cdb649ecdeb7f08e37c5f9c23da70e3cdc8d826b35e25cfed6d27" name="php-zts" arch="i686">
  <version epoch="0" ver="5.3.3" rel="48.el6_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-46" date="1435924800">- fix gzfile accept paths with NUL character #1213407
- fix patch for CVE-2015-4024</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-47" date="1449662400">- fix wrong warning in openssl_encrypt() for missing IV
  when IV is not required #1260315
- fix segfault's when you try and allocate an SplFixedArray
  with size &gt;= 9999 #1071344
- segfault in php_pgsql_meta_data CVE-2015-4644  #1234434
- add options to enable TLS in curl #1255920
- fix segfault in gc_collect_cycles #1122681</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
</package>
<package pkgid="522c13c3f915a8eb9c7a52a27915785f2674c570444f1eebc21e8904d9b07f05" name="php-zts" arch="i686">
  <version epoch="0" ver="5.3.3" rel="50.el6_10"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-48" date="1469448000">- don't set environmental variable based on user supplied Proxy
  request header CVE-2016-5385</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-49" date="1478520000">- fix php-soap fails to connect to HTTPS web service sporadically
  as stream_socket_enable_crypto() uses NONBLOCK #1283153</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 5.3.3-50" date="1572350400">- fix underflow in env_path_info in fpm_main.c CVE-2019-11043</changelog>
</package>
<package pkgid="fce702daf30d38804638314f619d8434a83e9611766106889e5d7036e8025df2" name="plymouth" arch="i686">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="e3e2034b2d00342bdfc8aa78f8770ad55b704622a6e31363af5d728b5840159f" name="plymouth-core-libs" arch="i686">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="798450604f7698a9869abf2869b29b47dc91d24e50f29b61767e22bc8bb4b422" name="plymouth-devel" arch="i686">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="f31793aea50cbaf585cc20b4ff857e8fa8e03ce8369d3432cb6190bba2a13d9f" name="plymouth-gdm-hooks" arch="i686">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="3d9f961321fb1e06414f2463327a4eca0b3e7637498d437e33c50e971cf3b7c7" name="plymouth-graphics-libs" arch="i686">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="1d3a63a4fbe9aa3faf1ad42c399d9fb088ecc526ba04aa4aec85422de554c942" name="plymouth-plugin-fade-throbber" arch="i686">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="5d00caed2272a54e913df175ce6aa8bb5c35a52c866e0155eec1de71e0cc9046" name="plymouth-plugin-label" arch="i686">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="355da5e0781e1d596556888654bdc951b08039ef3a460011b2cf1a51a4cfcf9b" name="plymouth-plugin-script" arch="i686">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="4835a878d5f6723705bcdbbce89050db7ece60a6c9312e668a5f05e3fc29f666" name="plymouth-plugin-space-flares" arch="i686">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="921467a68761cbe27246a4f183b6d5f04f6a64867cee8e7be693b43820a7a838" name="plymouth-plugin-throbgress" arch="i686">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="19effde76a37a10b193a01d05c9e3fb55961a7758cf9eca2fbfc624f185073d1" name="plymouth-plugin-two-step" arch="i686">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="582eb86fd0e25f132b9fa265ea3159480688a809d194452918500297702db2d9" name="plymouth-scripts" arch="i686">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="f3cd59bd54664b36ec92a0217d26623c7ccd842993f001c8e69daa7bdbb2978d" name="plymouth-system-theme" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="860754d239945c9f7c6897c1ce09314566bcc9040701b83f0979ec60ba8a1d82" name="plymouth-theme-fade-in" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="6fe03e8fae79c27fdeecbee33b27f1a43cbb0ce8338af72b547ead44dba128f7" name="plymouth-theme-rings" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="238129117581837b4047e6fae9ffc34741ca0145db8526735830f64fcf3a2b61" name="plymouth-theme-script" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="d854e20abe915ba44bce1408187090a2f60199d1ef5cf1237df9d82ee9249018" name="plymouth-theme-solar" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="93b4dc724ee71e888203e3118f0deab45f2d822cb745db30bac22122ad8df87c" name="plymouth-theme-spinfinity" arch="noarch">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="ba5a19c6cfb895cc0f333ad4be1854e781860ea81c07e2a7db8b504a93248198" name="plymouth-utils" arch="i686">
  <version epoch="0" ver="0.8.3" rel="29.sl6"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 0.8.3-28" date="1406808000">- use tcsetattr(...TCSANOW...) instead of tcsetattr(...TCSAFLUSH...)
  to work around a kernel bug leading to blocked boot.
  Resolves: #1120904</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 0.8.3-29" date="1478174400">- Ignore duplicate console on kernel command line
  Resolves: #1076265</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490184000">- Removed Patch: plymouth-0.8.0-everything-is-better-in-red.patch
--&gt;  If we remove this patch everything turns blue, not TUV red
- Added Source: plymouth.ini
--&gt;  Config file for automated patch script
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="656c4e9540005e48a08b92dc8aefd0d5ef0e11e592dc2322f46a50f0700b9117" name="policycoreutils" arch="i686">
  <version epoch="0" ver="2.0.83" rel="30.1.el6_8"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.0.83-28" date="1455537600">- Fix sepolgen test cases
Resolves: rhbz#1306550</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.0.83-29" date="1456920000">- Update translations
Resolves: rhbz#819794</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.0.83-30.1" date="1477051200">- sandbox: create a new session for sandboxed processes
Resolves: CVE-2016-7545</changelog>
</package>
<package pkgid="438b8a1bdbf8156e5f1d171970645f68b89bf8a13212a73ec5df571763b098ac" name="policycoreutils-gui" arch="i686">
  <version epoch="0" ver="2.0.83" rel="30.1.el6_8"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.0.83-28" date="1455537600">- Fix sepolgen test cases
Resolves: rhbz#1306550</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.0.83-29" date="1456920000">- Update translations
Resolves: rhbz#819794</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.0.83-30.1" date="1477051200">- sandbox: create a new session for sandboxed processes
Resolves: CVE-2016-7545</changelog>
</package>
<package pkgid="33e1e4bf2b7acd51be6cb1a418c2c827cc3e261dffdec2336d1ef099ec359397" name="policycoreutils-newrole" arch="i686">
  <version epoch="0" ver="2.0.83" rel="30.1.el6_8"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.0.83-28" date="1455537600">- Fix sepolgen test cases
Resolves: rhbz#1306550</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.0.83-29" date="1456920000">- Update translations
Resolves: rhbz#819794</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.0.83-30.1" date="1477051200">- sandbox: create a new session for sandboxed processes
Resolves: CVE-2016-7545</changelog>
</package>
<package pkgid="1a2a9f1398df129e58ff5bee7ac000b055c607dbcdcd4d2edea6df8054868a72" name="policycoreutils-python" arch="i686">
  <version epoch="0" ver="2.0.83" rel="30.1.el6_8"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.0.83-28" date="1455537600">- Fix sepolgen test cases
Resolves: rhbz#1306550</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.0.83-29" date="1456920000">- Update translations
Resolves: rhbz#819794</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.0.83-30.1" date="1477051200">- sandbox: create a new session for sandboxed processes
Resolves: CVE-2016-7545</changelog>
</package>
<package pkgid="82a1dae8d873e7fc31add33c25dc71fec2744d1c41c697e8aa7b449001838707" name="policycoreutils-sandbox" arch="i686">
  <version epoch="0" ver="2.0.83" rel="30.1.el6_8"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.0.83-28" date="1455537600">- Fix sepolgen test cases
Resolves: rhbz#1306550</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.0.83-29" date="1456920000">- Update translations
Resolves: rhbz#819794</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.0.83-30.1" date="1477051200">- sandbox: create a new session for sandboxed processes
Resolves: CVE-2016-7545</changelog>
</package>
<package pkgid="569f6e45bd66cc5d945a5dca4b8fcfff70032e44c7a937a416fe38d2778e7141" name="polkit" arch="i686">
  <version epoch="0" ver="0.96" rel="11.el6_10.1"/>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.96-10" date="1425470400">- Fix scriptlet failure when polkitd is not running
  Related: #1115649</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.96-11" date="1425729600">- Gracefully handle race conditions and other failures to kill polkitd
  Related: #1115649</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.96-11.el6_10.1" date="1548331200">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667310</changelog>
</package>
<package pkgid="509556641a226de36aa3bd79158e79e8e14588a42a5c568566c0b959785fb2d4" name="polkit-desktop-policy" arch="noarch">
  <version epoch="0" ver="0.96" rel="11.el6_10.1"/>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.96-10" date="1425470400">- Fix scriptlet failure when polkitd is not running
  Related: #1115649</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.96-11" date="1425729600">- Gracefully handle race conditions and other failures to kill polkitd
  Related: #1115649</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.96-11.el6_10.1" date="1548331200">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667310</changelog>
</package>
<package pkgid="ed349855c2dc321bc9394ddfa3a5ddfeb4d32ec04c6cbcd0f0e7e8eae36575e7" name="polkit-devel" arch="i686">
  <version epoch="0" ver="0.96" rel="11.el6_10.1"/>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.96-10" date="1425470400">- Fix scriptlet failure when polkitd is not running
  Related: #1115649</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.96-11" date="1425729600">- Gracefully handle race conditions and other failures to kill polkitd
  Related: #1115649</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.96-11.el6_10.1" date="1548331200">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667310</changelog>
</package>
<package pkgid="e1bd35af79bcdbb4a99ca5495255fbd38190daf6754cb4b771899e410c3842c8" name="polkit-docs" arch="i686">
  <version epoch="0" ver="0.96" rel="11.el6_10.1"/>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.96-10" date="1425470400">- Fix scriptlet failure when polkitd is not running
  Related: #1115649</changelog>
  <changelog author="Miloslav Trma&#x10D; &lt;mitr@redhat.com&gt; - 0.96-11" date="1425729600">- Gracefully handle race conditions and other failures to kill polkitd
  Related: #1115649</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.96-11.el6_10.1" date="1548331200">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667310</changelog>
</package>
<package pkgid="668c1d99c9731bc89b25f720a9047dc476e4e631606ffca9a6ca674fa39d5c04" name="poppler" arch="i686">
  <version epoch="0" ver="0.12.4" rel="12.el6_9"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-10" date="1457697600">- Use better default pixel size for printing of 0 width lines
- Resolves: #1316163</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-11" date="1475150400">- Don't crash on streams without Length
- Resolves: #1302365</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.12.4-12" date="1502366400">- Resolves: rhbz#1479815 CVE-2017-9776</changelog>
</package>
<package pkgid="4f4a0fad120358511b53a193d59ef9050645f3385e283e2fbbac621a583c263a" name="poppler-devel" arch="i686">
  <version epoch="0" ver="0.12.4" rel="12.el6_9"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-10" date="1457697600">- Use better default pixel size for printing of 0 width lines
- Resolves: #1316163</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-11" date="1475150400">- Don't crash on streams without Length
- Resolves: #1302365</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.12.4-12" date="1502366400">- Resolves: rhbz#1479815 CVE-2017-9776</changelog>
</package>
<package pkgid="9957e273c5f421fd6b765380af4f7bd4a657f8765365ed5acfcf7b87e67f1ca9" name="poppler-glib" arch="i686">
  <version epoch="0" ver="0.12.4" rel="12.el6_9"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-10" date="1457697600">- Use better default pixel size for printing of 0 width lines
- Resolves: #1316163</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-11" date="1475150400">- Don't crash on streams without Length
- Resolves: #1302365</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.12.4-12" date="1502366400">- Resolves: rhbz#1479815 CVE-2017-9776</changelog>
</package>
<package pkgid="4b4ef472476fe5217c4fba49a60863914da0574aa881af681c89dec67002e371" name="poppler-glib-devel" arch="i686">
  <version epoch="0" ver="0.12.4" rel="12.el6_9"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-10" date="1457697600">- Use better default pixel size for printing of 0 width lines
- Resolves: #1316163</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-11" date="1475150400">- Don't crash on streams without Length
- Resolves: #1302365</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.12.4-12" date="1502366400">- Resolves: rhbz#1479815 CVE-2017-9776</changelog>
</package>
<package pkgid="769553248ebd397368a8fe20322e95eac43403518c389abf8578b958dfc0bb64" name="poppler-qt" arch="i686">
  <version epoch="0" ver="0.12.4" rel="12.el6_9"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-10" date="1457697600">- Use better default pixel size for printing of 0 width lines
- Resolves: #1316163</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-11" date="1475150400">- Don't crash on streams without Length
- Resolves: #1302365</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.12.4-12" date="1502366400">- Resolves: rhbz#1479815 CVE-2017-9776</changelog>
</package>
<package pkgid="6d4ac572510baa6b3efdb9f38e402da73bcfb84dfca4f68f4f6c1468d68b53be" name="poppler-qt-devel" arch="i686">
  <version epoch="0" ver="0.12.4" rel="12.el6_9"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-10" date="1457697600">- Use better default pixel size for printing of 0 width lines
- Resolves: #1316163</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-11" date="1475150400">- Don't crash on streams without Length
- Resolves: #1302365</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.12.4-12" date="1502366400">- Resolves: rhbz#1479815 CVE-2017-9776</changelog>
</package>
<package pkgid="d2a4ffc5c89465dbe868e7f5965bdc62db441cd9ad7fa4afd058e6fbff0517a0" name="poppler-qt4" arch="i686">
  <version epoch="0" ver="0.12.4" rel="12.el6_9"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-10" date="1457697600">- Use better default pixel size for printing of 0 width lines
- Resolves: #1316163</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-11" date="1475150400">- Don't crash on streams without Length
- Resolves: #1302365</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.12.4-12" date="1502366400">- Resolves: rhbz#1479815 CVE-2017-9776</changelog>
</package>
<package pkgid="484d59e0a9c448def0bf3855c845ceaa5c77b2c7b59cf1892305c3b6109124fb" name="poppler-qt4-devel" arch="i686">
  <version epoch="0" ver="0.12.4" rel="12.el6_9"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-10" date="1457697600">- Use better default pixel size for printing of 0 width lines
- Resolves: #1316163</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-11" date="1475150400">- Don't crash on streams without Length
- Resolves: #1302365</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.12.4-12" date="1502366400">- Resolves: rhbz#1479815 CVE-2017-9776</changelog>
</package>
<package pkgid="3ba65c017cb6a6befa3c550b0edea9ce3d2ba5085deae9f6eb5b5c73ac71ae16" name="poppler-utils" arch="i686">
  <version epoch="0" ver="0.12.4" rel="12.el6_9"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-10" date="1457697600">- Use better default pixel size for printing of 0 width lines
- Resolves: #1316163</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-11" date="1475150400">- Don't crash on streams without Length
- Resolves: #1302365</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.12.4-12" date="1502366400">- Resolves: rhbz#1479815 CVE-2017-9776</changelog>
</package>
<package pkgid="24150af71835d0b2d05a025c93487d624ed20d6446cf8ffe5d574b987552e9f0" name="postgresql" arch="i686">
  <version epoch="0" ver="8.4.20" rel="4.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-2" date="1425988800">- fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161
  (rhbz#1198651 &amp; rhbz#1198652)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
</package>
<package pkgid="76b35686f312ec379bd927a46e81499d45bea3ebd8e2536aab64cee18ecf29e1" name="postgresql" arch="i686">
  <version epoch="0" ver="8.4.20" rel="5.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-5" date="1455624000">- fix for CVE-2016-0773 (rhbz#1308598)
- fix tests for new libxml2 (rhbz#1303972)</changelog>
</package>
<package pkgid="beef0ce70fa1450cdf658ec058a1b0393cde05b98729ae5b0d81abc528c85317" name="postgresql" arch="i686">
  <version epoch="0" ver="8.4.20" rel="8.el6_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-6" date="1456315200">- allow TLS &gt; 1.0 (rhbz#1287053)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-7" date="1473336000">- backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
  changing wait timeout to 2 seconds by default</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 8.4.20-8" date="1504008000">- backport fix for CVE-2017-7546 (rhbz#1484677)</changelog>
</package>
<package pkgid="c753bb84b141ec9ca888c37145e75f71668c26f2bd80d1bf1aaad7c05767788c" name="postgresql-contrib" arch="i686">
  <version epoch="0" ver="8.4.20" rel="4.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-2" date="1425988800">- fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161
  (rhbz#1198651 &amp; rhbz#1198652)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
</package>
<package pkgid="ceb7be4b92960c7c39cd85a705358a631f974b24a81f95b77034eccea4b3d755" name="postgresql-contrib" arch="i686">
  <version epoch="0" ver="8.4.20" rel="5.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-5" date="1455624000">- fix for CVE-2016-0773 (rhbz#1308598)
- fix tests for new libxml2 (rhbz#1303972)</changelog>
</package>
<package pkgid="59cc67b59ae950a36a24f19ad1909936561e327f195accb7fb9c5f82cd655dc4" name="postgresql-contrib" arch="i686">
  <version epoch="0" ver="8.4.20" rel="8.el6_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-6" date="1456315200">- allow TLS &gt; 1.0 (rhbz#1287053)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-7" date="1473336000">- backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
  changing wait timeout to 2 seconds by default</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 8.4.20-8" date="1504008000">- backport fix for CVE-2017-7546 (rhbz#1484677)</changelog>
</package>
<package pkgid="03eb94f415612cde81a7c0dd476b170d18abf68e5e41a78825b51e1fdb132471" name="postgresql-devel" arch="i686">
  <version epoch="0" ver="8.4.20" rel="4.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-2" date="1425988800">- fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161
  (rhbz#1198651 &amp; rhbz#1198652)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
</package>
<package pkgid="4bc89d744066c2f740d57ecc84bdf94ec53b52c1a416fd39ac500d7cc56d196e" name="postgresql-devel" arch="i686">
  <version epoch="0" ver="8.4.20" rel="5.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-5" date="1455624000">- fix for CVE-2016-0773 (rhbz#1308598)
- fix tests for new libxml2 (rhbz#1303972)</changelog>
</package>
<package pkgid="1cf596c4e3319289c9aed8a47cbe224ed4e14450fbbd2ccdcef6f64e45d292b6" name="postgresql-devel" arch="i686">
  <version epoch="0" ver="8.4.20" rel="8.el6_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-6" date="1456315200">- allow TLS &gt; 1.0 (rhbz#1287053)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-7" date="1473336000">- backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
  changing wait timeout to 2 seconds by default</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 8.4.20-8" date="1504008000">- backport fix for CVE-2017-7546 (rhbz#1484677)</changelog>
</package>
<package pkgid="d4f29bbc17b7b1c02afecc8e8684888a298d648653060465e87c83b164d63685" name="postgresql-docs" arch="i686">
  <version epoch="0" ver="8.4.20" rel="4.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-2" date="1425988800">- fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161
  (rhbz#1198651 &amp; rhbz#1198652)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
</package>
<package pkgid="c45875f523cc8250658dfc6c603b6a30f7afed08a3dec476c5cb2db4e3b072db" name="postgresql-docs" arch="i686">
  <version epoch="0" ver="8.4.20" rel="5.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-5" date="1455624000">- fix for CVE-2016-0773 (rhbz#1308598)
- fix tests for new libxml2 (rhbz#1303972)</changelog>
</package>
<package pkgid="093440380929590937e2be4de84c0e25142a8702845df4d96ad58dfe71332d0e" name="postgresql-docs" arch="i686">
  <version epoch="0" ver="8.4.20" rel="8.el6_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-6" date="1456315200">- allow TLS &gt; 1.0 (rhbz#1287053)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-7" date="1473336000">- backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
  changing wait timeout to 2 seconds by default</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 8.4.20-8" date="1504008000">- backport fix for CVE-2017-7546 (rhbz#1484677)</changelog>
</package>
<package pkgid="518995d76313e361af8511350b1dec10e78068f1851d168b4a8cda7456f71a39" name="postgresql-jdbc" arch="noarch">
  <version epoch="0" ver="8.4.704" rel="4.el6_10"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.704-2" date="1401105600">- revert back %maven related changes from previous commit</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 8.4.704-3" date="1595592000">- fixed XXE vulnerability (CVE-2020-13692)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 8.4.704-4" date="1595937600">- require explicitly jdk-1.6 due to ABI bytecode compatibility</changelog>
</package>
<package pkgid="33d30d53f7aecbfcacc1e3d43e1b74665617f065e5829958cbbf521bde3322a4" name="postgresql-libs" arch="i686">
  <version epoch="0" ver="8.4.20" rel="4.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-2" date="1425988800">- fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161
  (rhbz#1198651 &amp; rhbz#1198652)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
</package>
<package pkgid="f0cef825696ceeab86b72770a1620f844df466725270f1f48e1211aa27f5c179" name="postgresql-libs" arch="i686">
  <version epoch="0" ver="8.4.20" rel="5.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-5" date="1455624000">- fix for CVE-2016-0773 (rhbz#1308598)
- fix tests for new libxml2 (rhbz#1303972)</changelog>
</package>
<package pkgid="d3f2be0ffc5a570cc7a08eea2c18edc89b8864bda4721d4ad4cba9db1322d6b7" name="postgresql-libs" arch="i686">
  <version epoch="0" ver="8.4.20" rel="8.el6_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-6" date="1456315200">- allow TLS &gt; 1.0 (rhbz#1287053)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-7" date="1473336000">- backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
  changing wait timeout to 2 seconds by default</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 8.4.20-8" date="1504008000">- backport fix for CVE-2017-7546 (rhbz#1484677)</changelog>
</package>
<package pkgid="038cc0651dedefd74250f0bf18c5198a28878e609fe699d3a8cf0bb52f797ed5" name="postgresql-plperl" arch="i686">
  <version epoch="0" ver="8.4.20" rel="4.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-2" date="1425988800">- fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161
  (rhbz#1198651 &amp; rhbz#1198652)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
</package>
<package pkgid="3a38726d356a03b1d71cfde94d9a4dd7b279ae852bd6f32f86ed88f312371f45" name="postgresql-plperl" arch="i686">
  <version epoch="0" ver="8.4.20" rel="5.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-5" date="1455624000">- fix for CVE-2016-0773 (rhbz#1308598)
- fix tests for new libxml2 (rhbz#1303972)</changelog>
</package>
<package pkgid="5f322b4ab7300122da0b968b3f5307bb6f0442aa232072ead416cde9c844cd05" name="postgresql-plperl" arch="i686">
  <version epoch="0" ver="8.4.20" rel="8.el6_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-6" date="1456315200">- allow TLS &gt; 1.0 (rhbz#1287053)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-7" date="1473336000">- backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
  changing wait timeout to 2 seconds by default</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 8.4.20-8" date="1504008000">- backport fix for CVE-2017-7546 (rhbz#1484677)</changelog>
</package>
<package pkgid="35223aac1b6acfdd98b25630967b57e6fba7bd753e7b579800caa90b4fc53065" name="postgresql-plpython" arch="i686">
  <version epoch="0" ver="8.4.20" rel="4.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-2" date="1425988800">- fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161
  (rhbz#1198651 &amp; rhbz#1198652)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
</package>
<package pkgid="4fc33c2d94e5405f8706848293a132601298df7a4e704fd064b5a12e8dca276d" name="postgresql-plpython" arch="i686">
  <version epoch="0" ver="8.4.20" rel="5.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-5" date="1455624000">- fix for CVE-2016-0773 (rhbz#1308598)
- fix tests for new libxml2 (rhbz#1303972)</changelog>
</package>
<package pkgid="e375acfc3a727cfc253024acdb69625c0ef2c13a785da1f52588fd40e3e627d5" name="postgresql-plpython" arch="i686">
  <version epoch="0" ver="8.4.20" rel="8.el6_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-6" date="1456315200">- allow TLS &gt; 1.0 (rhbz#1287053)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-7" date="1473336000">- backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
  changing wait timeout to 2 seconds by default</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 8.4.20-8" date="1504008000">- backport fix for CVE-2017-7546 (rhbz#1484677)</changelog>
</package>
<package pkgid="f55d24ee799b72c5f4acd55e29c089bdc64e520527e7ffd8fa003ca32d4be381" name="postgresql-pltcl" arch="i686">
  <version epoch="0" ver="8.4.20" rel="4.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-2" date="1425988800">- fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161
  (rhbz#1198651 &amp; rhbz#1198652)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
</package>
<package pkgid="d33f71412646c78d160ab73e4ee812ae65b1eec325dc32acfc30abc25b0f2fa1" name="postgresql-pltcl" arch="i686">
  <version epoch="0" ver="8.4.20" rel="5.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-5" date="1455624000">- fix for CVE-2016-0773 (rhbz#1308598)
- fix tests for new libxml2 (rhbz#1303972)</changelog>
</package>
<package pkgid="d2ba63a0b0622e52af2c65c24edb3bdc94fa2056bd35ddaa740e07b8081f062c" name="postgresql-pltcl" arch="i686">
  <version epoch="0" ver="8.4.20" rel="8.el6_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-6" date="1456315200">- allow TLS &gt; 1.0 (rhbz#1287053)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-7" date="1473336000">- backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
  changing wait timeout to 2 seconds by default</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 8.4.20-8" date="1504008000">- backport fix for CVE-2017-7546 (rhbz#1484677)</changelog>
</package>
<package pkgid="c24fe82a5f1052abd648bac43eae03411783cd5ac5d0ba52f1c7a885a3a6c558" name="postgresql-server" arch="i686">
  <version epoch="0" ver="8.4.20" rel="4.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-2" date="1425988800">- fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161
  (rhbz#1198651 &amp; rhbz#1198652)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
</package>
<package pkgid="25221c2c5cbafd7526f0ec8b47f984a0da7ac96ade6e57252729894d496c1fab" name="postgresql-server" arch="i686">
  <version epoch="0" ver="8.4.20" rel="5.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-5" date="1455624000">- fix for CVE-2016-0773 (rhbz#1308598)
- fix tests for new libxml2 (rhbz#1303972)</changelog>
</package>
<package pkgid="35ec5c94580f563ed211657c0d217ec51fc6b30052b3cc557795f0922fb496e4" name="postgresql-server" arch="i686">
  <version epoch="0" ver="8.4.20" rel="8.el6_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-6" date="1456315200">- allow TLS &gt; 1.0 (rhbz#1287053)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-7" date="1473336000">- backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
  changing wait timeout to 2 seconds by default</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 8.4.20-8" date="1504008000">- backport fix for CVE-2017-7546 (rhbz#1484677)</changelog>
</package>
<package pkgid="732106a9ba614f26c2ce1f0716377a044fd112537ff671d2ec9d56d094e7a78d" name="postgresql-test" arch="i686">
  <version epoch="0" ver="8.4.20" rel="4.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-2" date="1425988800">- fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161
  (rhbz#1198651 &amp; rhbz#1198652)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
</package>
<package pkgid="adb0c7e3b5a06cb76f615a70cf51d7817730119aab7527f7e08b085f5d0e2586" name="postgresql-test" arch="i686">
  <version epoch="0" ver="8.4.20" rel="5.el6_7"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-5" date="1455624000">- fix for CVE-2016-0773 (rhbz#1308598)
- fix tests for new libxml2 (rhbz#1303972)</changelog>
</package>
<package pkgid="7037f608e89ede67910223ff9a1a43fdd6bea1c23a85edc5ea1644867a07d3c8" name="postgresql-test" arch="i686">
  <version epoch="0" ver="8.4.20" rel="8.el6_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-6" date="1456315200">- allow TLS &gt; 1.0 (rhbz#1287053)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-7" date="1473336000">- backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
  changing wait timeout to 2 seconds by default</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 8.4.20-8" date="1504008000">- backport fix for CVE-2017-7546 (rhbz#1484677)</changelog>
</package>
<package pkgid="593502a484e86b62efebc73778ad61e9c99e8109dd6278395a56a266765465a9" name="ppp" arch="i686">
  <version epoch="0" ver="2.4.5" rel="11.el6_10"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 2.4.5-9" date="1425384000">- fix segfault when using pppol2tp and dump option is given (#1197792)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 2.4.5-10" date="1425384001">- apply l2tp patch</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.5-11" date="1582632000">- Fixed buffer overflow in the eap_request and eap_response functions
  Resolves: CVE-2020-8597</changelog>
</package>
<package pkgid="dbc8ac92000ed47d7c0e9f18cbf663640035f286226fa060f5e1411ed83e09bb" name="ppp-devel" arch="i686">
  <version epoch="0" ver="2.4.5" rel="11.el6_10"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 2.4.5-9" date="1425384000">- fix segfault when using pppol2tp and dump option is given (#1197792)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 2.4.5-10" date="1425384001">- apply l2tp patch</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.5-11" date="1582632000">- Fixed buffer overflow in the eap_request and eap_response functions
  Resolves: CVE-2020-8597</changelog>
</package>
<package pkgid="b88c8138f44cf91edff2d1ea09b2f5de6bb73694d607ab3b84ca12b4ff0dc710" name="procps" arch="i686">
  <version epoch="0" ver="3.2.8" rel="45.el6_9.3"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.2.8-45.el6_9.1" date="1497355200">- ps: STIME no longer 1970 if many cores in /proc/stat
- Resolves: rhbz#1460176</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.2.8-45.el6_9.2" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124 CVE-2018-1126</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.2.8-45.el6_9.3" date="1527249600">- drop leftover assignment in fix for CVE-2018-1124 causing a severe regression
- Resolves: CVE-2018-1124</changelog>
</package>
<package pkgid="309227022a473b7ab01f647a7375eca48fe7e92650193b3cff540830cd652242" name="procps-devel" arch="i686">
  <version epoch="0" ver="3.2.8" rel="45.el6_9.3"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.2.8-45.el6_9.1" date="1497355200">- ps: STIME no longer 1970 if many cores in /proc/stat
- Resolves: rhbz#1460176</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.2.8-45.el6_9.2" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124 CVE-2018-1126</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.2.8-45.el6_9.3" date="1527249600">- drop leftover assignment in fix for CVE-2018-1124 causing a severe regression
- Resolves: CVE-2018-1124</changelog>
</package>
<package pkgid="7a336ff11245a9c3b2aee5385cf22e2da2442800ee663c1ca8c7cc5ad279c42a" name="pyldb" arch="i686">
  <version epoch="0" ver="1.1.13" rel="3.el6_7.1"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-2" date="1352203200">- resolves: rhbz#873422 - LDB 1.1.13 exports improper ABI</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3" date="1352203201">- use the proper %patch stanza to make rpmdiff happy
- related: rhbz#873422 - LDB 1.1.13 exports improper ABI</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3.1" date="1450094400">- Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                           in Samba LDAP server [rhel-7.2.z]
- Remove the patch from the previous commit, it doesn't fix a remotely
  eploitable issue. Add patches from upstream #11636 instead.</changelog>
</package>
<package pkgid="9a366d2cc008382846158377382bbdfa6c292266a6adc1dcf580286142c31186" name="pyldb" arch="i686">
  <version epoch="0" ver="1.1.25" rel="2.el6_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3.1" date="1450094400">- Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                           in Samba LDAP server [rhel-7.2.z]
- Remove the patch from the previous commit, it doesn't fix a remotely
  eploitable issue. Add patches from upstream #11636 instead.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459771200">- Rebase to upstream 1.1.25
- Related: rhbz#1322688</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-2" date="1459771201">- Fix the python-ldb requires
- Related: rhbz#1322688</changelog>
</package>
<package pkgid="1942788a083fdd0849c385d402fda70b2ca65daa6113f32d2f01a7d5dec74a6f" name="pyldb-devel" arch="i686">
  <version epoch="0" ver="1.1.13" rel="3.el6_7.1"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-2" date="1352203200">- resolves: rhbz#873422 - LDB 1.1.13 exports improper ABI</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3" date="1352203201">- use the proper %patch stanza to make rpmdiff happy
- related: rhbz#873422 - LDB 1.1.13 exports improper ABI</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3.1" date="1450094400">- Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                           in Samba LDAP server [rhel-7.2.z]
- Remove the patch from the previous commit, it doesn't fix a remotely
  eploitable issue. Add patches from upstream #11636 instead.</changelog>
</package>
<package pkgid="f68c63fa099a11ed77344ecaae2b34017bc47e75b959696f8c10e9bcb092e287" name="pyldb-devel" arch="i686">
  <version epoch="0" ver="1.1.25" rel="2.el6_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.13-3.1" date="1450094400">- Resolves: rhbz#1290712 - CVE-2015-5330 libldb: samba: Remote memory read
                           in Samba LDAP server [rhel-7.2.z]
- Remove the patch from the previous commit, it doesn't fix a remotely
  eploitable issue. Add patches from upstream #11636 instead.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459771200">- Rebase to upstream 1.1.25
- Related: rhbz#1322688</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-2" date="1459771201">- Fix the python-ldb requires
- Related: rhbz#1322688</changelog>
</package>
<package pkgid="359be533d578e3b6fbc83a8cb1075635738f699b55deb44e11704dedbe6ad62e" name="pytalloc" arch="i686">
  <version epoch="0" ver="2.1.5" rel="1.el6_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-1" date="1343908800">- New upstream version, resolves rhbz #766335
- Build python bindings to satisfy Samba4 BuildRequires</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-2" date="1349697600">- Obsolete older pytalloc{,-devel} releases to clear the upgrade path
  towards non-multilib pytalloc
- Resolves: rhbz#862062</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.1.5-1" date="1459512000">- Rebase to 2.1.5
- Remove upstreamed patch to enable verbose build
- Related: rhbz#1322688</changelog>
</package>
<package pkgid="52ec583935488141c79bd57e9f678251e3bd0f0e42bc6f9b401ace0c737854ce" name="pytalloc-devel" arch="i686">
  <version epoch="0" ver="2.1.5" rel="1.el6_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-1" date="1343908800">- New upstream version, resolves rhbz #766335
- Build python bindings to satisfy Samba4 BuildRequires</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.0.7-2" date="1349697600">- Obsolete older pytalloc{,-devel} releases to clear the upgrade path
  towards non-multilib pytalloc
- Resolves: rhbz#862062</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.1.5-1" date="1459512000">- Rebase to 2.1.5
- Remove upstreamed patch to enable verbose build
- Related: rhbz#1322688</changelog>
</package>
<package pkgid="60083273ddcb6e3f7c93666d0b460551516d1577e1e544352be5c11adff98a93" name="python" arch="i686">
  <version epoch="0" ver="2.6.6" rel="66.el6_8"/>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.6-64" date="1432296000">- Enable use of deepcopy() with instance methods
Resolves: rhbz#1223037</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.6-65" date="1466510400">- Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
  Raise an error when STARTTLS fails (upstream patch)
- Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
  Disabled HTTP header injections in httplib (upstream patch)
Resolves: rhbz#1346354</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-66" date="1470744000">- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359161</changelog>
</package>
<package pkgid="2d4f74517c2184a4b67e00d75c93c273542f429a4658807dfec57f69c94cc6e3" name="python" arch="i686">
  <version epoch="0" ver="2.6.6" rel="68.el6_10"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-66" date="1470744000">- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359162</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-67" date="1559736000">- Security fix for CVE-2019-9636
Resolves: rhbz#1716744</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-68" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1716744</changelog>
</package>
<package pkgid="3fcabeebdbf603bb3eafcba40097095d9d7a5ea062e4835ff5bd2b6255724ce3" name="python-clufter" arch="noarch">
  <version epoch="0" ver="0.77.1" rel="1.el6"/>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.7-1" date="1481544000">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.7</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.59.8-1" date="1484740800">- bump upstream package, see
  https://github.com/jnpkrn/clufter/releases/tag/v0.59.8</changelog>
  <changelog author="Jan Pokorn&#xFD; &lt;jpokorny+rpm-clufter@redhat.com&gt; - 0.77.1-1" date="1521115200">- split -bin and -common packages, the former becoming the only arch-specific
- also move python-specific (entry points, main files) back from -cli package
- move nano fallback editor dependency to -cli package [PGissue#1]
- bump upstream package, see https://pagure.io/clufter/releases</changelog>
</package>
<package pkgid="db53ba9713fe8b4160b294fe1171d1baacbe7f1c0e1a106d1a0ee61aafb4e260" name="python-devel" arch="i686">
  <version epoch="0" ver="2.6.6" rel="66.el6_8"/>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.6-64" date="1432296000">- Enable use of deepcopy() with instance methods
Resolves: rhbz#1223037</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.6-65" date="1466510400">- Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
  Raise an error when STARTTLS fails (upstream patch)
- Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
  Disabled HTTP header injections in httplib (upstream patch)
Resolves: rhbz#1346354</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-66" date="1470744000">- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359161</changelog>
</package>
<package pkgid="72c2b019f40d91a9280ca52c10eac6fc8b2b6fd040e8e1c1b453f6bccccd530c" name="python-devel" arch="i686">
  <version epoch="0" ver="2.6.6" rel="68.el6_10"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-66" date="1470744000">- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359162</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-67" date="1559736000">- Security fix for CVE-2019-9636
Resolves: rhbz#1716744</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-68" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1716744</changelog>
</package>
<package pkgid="73e0cf03c2fbf49793359a691b7399597a2a926da67aed07a9418fb52d76bb50" name="python-imaging" arch="i686">
  <version epoch="0" ver="1.1.6" rel="20.el6_10"/>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.1.6-18" date="1267012800">- Changed License to the MIT (Historical Permission Notice and Disclaimer)</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.1.6-19" date="1276516800">- Use -fno-strict-aliasing CFLAG
  Resolves: #596200</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.1.6-20" date="1582113600">- Fixes for CVE-2020-5312 and related part of CVE-2019-16865
Resolves: rhbz#1789533</changelog>
</package>
<package pkgid="6a20bc6a2e92a182be18ddbb8a79fc2d53c829b4f8f1a0e92966386e2f23cdff" name="python-imaging-devel" arch="i686">
  <version epoch="0" ver="1.1.6" rel="20.el6_10"/>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.1.6-18" date="1267012800">- Changed License to the MIT (Historical Permission Notice and Disclaimer)</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.1.6-19" date="1276516800">- Use -fno-strict-aliasing CFLAG
  Resolves: #596200</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.1.6-20" date="1582113600">- Fixes for CVE-2020-5312 and related part of CVE-2019-16865
Resolves: rhbz#1789533</changelog>
</package>
<package pkgid="3f8e340ed49d98234b5f13477618a82cd0a23680c6f33f6a8333f2da6eaac276" name="python-imaging-sane" arch="i686">
  <version epoch="0" ver="1.1.6" rel="20.el6_10"/>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.1.6-18" date="1267012800">- Changed License to the MIT (Historical Permission Notice and Disclaimer)</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.1.6-19" date="1276516800">- Use -fno-strict-aliasing CFLAG
  Resolves: #596200</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.1.6-20" date="1582113600">- Fixes for CVE-2020-5312 and related part of CVE-2019-16865
Resolves: rhbz#1789533</changelog>
</package>
<package pkgid="50bc40dfab966b96c518021d9b6b4465f6859706cc5efbdace17b3450167ed8c" name="python-imaging-tk" arch="i686">
  <version epoch="0" ver="1.1.6" rel="20.el6_10"/>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.1.6-18" date="1267012800">- Changed License to the MIT (Historical Permission Notice and Disclaimer)</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.1.6-19" date="1276516800">- Use -fno-strict-aliasing CFLAG
  Resolves: #596200</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.1.6-20" date="1582113600">- Fixes for CVE-2020-5312 and related part of CVE-2019-16865
Resolves: rhbz#1789533</changelog>
</package>
<package pkgid="2b5dcfc16fcf0a7568fba46dfb37dfef96f31edee0670acbd893dee1cfc9be72" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="f58e00d14e841ebe3e0d6393b89466688314924c05f731e2b3e9fba5714737bd" name="python-libs" arch="i686">
  <version epoch="0" ver="2.6.6" rel="66.el6_8"/>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.6-64" date="1432296000">- Enable use of deepcopy() with instance methods
Resolves: rhbz#1223037</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.6-65" date="1466510400">- Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
  Raise an error when STARTTLS fails (upstream patch)
- Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
  Disabled HTTP header injections in httplib (upstream patch)
Resolves: rhbz#1346354</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-66" date="1470744000">- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359161</changelog>
</package>
<package pkgid="31002791d54f57f740486204cb5198c111cb893ba0b7745a995e32c48f59619f" name="python-libs" arch="i686">
  <version epoch="0" ver="2.6.6" rel="68.el6_10"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-66" date="1470744000">- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359162</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-67" date="1559736000">- Security fix for CVE-2019-9636
Resolves: rhbz#1716744</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-68" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1716744</changelog>
</package>
<package pkgid="d706547a04477c8f78e2ae7cabc4e0ae82d5c1f564d680ce7a3d36c3c65cec52" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="9af524de00ae806ec39842b46cf51eda7c33c39ed743b8dd433440e080adf144" name="python-magic" arch="i686">
  <version epoch="0" ver="5.04" rel="30.el6"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-28" date="1450267200">- fix #1263987 - fix bugs found by coverity in the patch</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-29" date="1451995200">- fix #1284826 - try to read ELF header to detect corrupted one</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 5.04-30" date="1455624000">- fix CVE-2014-3538 (unrestricted regular expression matching)</changelog>
</package>
<package pkgid="12b0d3f739598adc24cc4c8f3da4a5cd0e86de68fd66c22507a500a789df4690" name="python-paramiko" arch="noarch">
  <version epoch="0" ver="1.7.5" rel="4.el6_9"/>
  <changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 1.7.5-2.1" date="1258113600">- Fix conditional for RHEL</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.7.5-3" date="1522843200">- Fix a security flaw (CVE-2018-7750) in Paramiko's server mode
  (emphasis on **server** mode; this does **not** impact *client* use!)
  Backported from 1.10: https://gist.github.com/stevebeattie/0eb190004e10ba0926ad8782f89676ad
  Resolves #1557140</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.7.5-4" date="1522843201">- Fix and enable tests (%check).
- Backport a change which makes tests exit with nonzero status when they fail.
- Add a fix for upstream tests for CVE-2018-7750 (broken in previous).</changelog>
</package>
<package pkgid="2e9f7c86a90e9f28294513a3fd9189703ff0597aa1014af580528606a2938f30" name="python-paramiko" arch="noarch">
  <version epoch="0" ver="1.7.5" rel="5.el6_10"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.7.5-3" date="1522843200">- Fix a security flaw (CVE-2018-7750) in Paramiko's server mode
  (emphasis on **server** mode; this does **not** impact *client* use!)
  Backported from 1.10: https://gist.github.com/stevebeattie/0eb190004e10ba0926ad8782f89676ad
  Resolves #1557140</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.7.5-4" date="1522843201">- Fix and enable tests (%check).
- Backport a change which makes tests exit with nonzero status when they fail.
- Add a fix for upstream tests for CVE-2018-7750 (broken in previous).</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.7.5-5" date="1539345600">- Split handler tables for server and client side
- Fix CVE-2018-1000805
- Resolves: rhbz#1637365</changelog>
</package>
<package pkgid="8bd56fef2fd7a8ccf15dd94ec89b72b32394976174c705db34f5963e156bf5af" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.12.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.10.1.el6]" date="1446811200">- [sound] Fix USB audio issues (wrong URB_ISO_ASAP semantics) (Jaroslav Kysela) [1273916 1255071]
- [security] keys: Don't permit request_key() to construct a new keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix crash when attempt to garbage collect an uninstantiated keyring (David Howells) [1275927 1273463] {CVE-2015-7872}
- [security] keys: Fix race between key destruction and finding a keyring by name (David Howells) [1275927 1273463] {CVE-2015-7872}
- [ipc] Initialize msg/shm IPC objects before doing ipc_addid() (Stanislav Kozina) [1271504 1271505] {CVE-2015-7613}
- [fs] vfs: Test for and handle paths that are unreachable from their mnt_root (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [fs] dcache: Handle escaped paths in prepend_path (Eric W. Biederman) [1209368 1209369] {CVE-2015-2925}
- [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]
- [hid] fix unused rsize usage (Don Zickus) [1268203 1256568]
- [hid] fix data access in implement() (Don Zickus) [1268203 1256568]
- [fs] NFS: Hold i_lock in nfs_wb_page_cancel() while locking a request (Benjamin Coddington) [1273721 1135601]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.11.1.el6]" date="1447416000">- [kvm] svm: unconditionally intercept DB (Paolo Bonzini) [1279467 1279468] {CVE-2015-8104}
- [x86] virt: guest to host DoS by triggering an infinite loop in microcode (Paolo Bonzini) [1277557 1277559] {CVE-2015-5307}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.12.1.el6]" date="1448280000">- Revert: [netdrv] igb: add support for 1512 PHY (Stefan Assmann) [1278275 1238551]</changelog>
</package>
<package pkgid="4a7208c322d26746d81d7de511625e36bbae8e0cea29f886a76bc7153aa81664" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.22.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.20.1.el6]" date="1453464000">- [sched] kernel: sched: Fix nohz load accounting -- again (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Move sched_avg_update to update_cpu_load (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure more NO_HZ load average woes (Rafael Aquini) [1300349 1167755]
- [sched] kernel: sched: Cure load average vs NO_HZ woes (Rafael Aquini) [1300349 1167755]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.21.1.el6]" date="1456142400">- [fs] pipe: fix offset and len mismatch on pipe_iov_copy_to_user failure (Seth Jennings) [1310148 1302223] {CVE-2016-0774}
- [fs] gfs2: Add missing else in trans_add_meta/data (Robert S Peterson) [1304332 1267995]
- [fs] fs-cache: Synchronise object death state change vs operation submission (David Howells) [1308471 1096893]
- [fs] fs-cache: Reduce cookie ref count if submit fails (David Howells) [1308471 1096893]
- [mm] memcg: oom_notify use-after-free fix (Rafael Aquini) [1302763 1294400]
- [x86] fix corruption of XMM registers when interrupt handlers use FPU (Mikulas Patocka) [1298994 1259023]
- [net] tcp: honour SO_BINDTODEVICE for TW_RST case too (Florian Westphal) [1303044 1292300]
- [net] add inet_sk_transparent() helper (Florian Westphal) [1303044 1292300]
- [net] ipv6: tcp_ipv6 policy route issue (Florian Westphal) [1303044 1292300]
- [net] ipv6: reuse rt6_need_strict (Florian Westphal) [1303044 1292300]
- [net] tcp: resets are misrouted (Florian Westphal) [1303044 1292300]
- [net] tcp: tcp_v4_send_reset: binding oif to iif in no sock case (Florian Westphal) [1303044 1292300]
- [crypto] api: Only abort operations on fatal signal (Herbert Xu) [1296014 1272314]
- [crypto] testmgr: don't use interruptible wait in tests (Herbert Xu) [1296014 1272314]
- [kernel] sched: add wait_for_completion_killable_timeout (Herbert Xu) [1296014 1272314]
- [net] sctp: add routing output fallback (Xin Long) [1307073 1229124]
- [net] sctp: fix dst leak (Xin Long) [1307073 1229124]
- [net] sctp: fix src address selection if using secondary addresses (Xin Long) [1307073 1229124]
- [net] sctp: reduce indent level on sctp_v4_get_dst (Xin Long) [1307073 1229124]
- [scsi] hpsa: Update driver revision to RH5 (Joseph Szczypek) [1306192 1244959]
- [scsi] hpsa: fix issues with multilun devices (Joseph Szczypek) [1306192 1244959]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.22.1.el6]" date="1458216000">- [mm] always decrement anon_vma degree when the vma list is empty (Jerome Marchand) [1318364 1309898]</changelog>
</package>
<package pkgid="c1703bbf6d2e6769a71315edb9d6eb26b7f7f93f9d2acc59c47658cc861d02b2" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.26.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.24.1.el6]" date="1458907200">- [sched] fix KABI break (Seth Jennings) [1314878 1230310]
- [sched] fair: Test list head instead of list entry in throttle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] sched,perf: Fix periodic timers (Seth Jennings) [1314878 1230310]
- [sched] sched: debug: Remove the cfs bandwidth timer_active printout (Seth Jennings) [1314878 1230310]
- [sched] Cleanup bandwidth timers (Seth Jennings) [1314878 1230310]
- [sched] sched: core: Use hrtimer_start_expires (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix unlocked reads of some cfs_b-&gt;quota/period (Seth Jennings) [1314878 1230310]
- [sched] Fix potential near-infinite distribute_cfs_runtime loop (Seth Jennings) [1314878 1230310]
- [sched] fair: Fix tg_set_cfs_bandwidth deadlock on rq-&gt;lock (Seth Jennings) [1314878 1230310]
- [sched] Fix hrtimer_cancel/rq-&gt;lock deadlock (Seth Jennings) [1314878 1230310]
- [sched] Fix cfs_bandwidth misuse of hrtimer_expires_remaining (Seth Jennings) [1314878 1230310]
- [sched] Refine the code in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [sched] Update rq clock earlier in unthrottle_cfs_rq (Seth Jennings) [1314878 1230310]
- [block] Fix q_suspended logic error for io submission (David Milburn) [1314209 1227342]
- [block] nvme: No lock while DMA mapping data (David Milburn) [1314209 1227342]
- [netdrv] ixgbe: finish ixgbe: Update ixgbe to use new vlan accleration (John Greene) [1315706 1249244]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.25.1.el6]" date="1459857600">- [x86] nmi/64: Fix a paravirt stack-clobbering bug in the NMI code (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [x86] nmi/64: Switch stacks on userspace NMI entry (Denys Vlasenko) [1259580 1259581] {CVE-2015-5157}
- [fs] anon_inodes implement dname (Aristeu Rozanski) [1322707 1296019]
- [fs] xfs: Avoid pathological backwards allocation (Bill O'Donnell) [1320031 1302777]
- [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Jacob Tanenbaum) [1297421 1297422] {CVE-2015-8767}
- [net] udp: move logic out of udp[46]_ufo_send_check (Sabrina Dubroca) [1319276 1299975]
- [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1315696 1309241]
- [md] raid10: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid1: don't clear bitmap bit when bad-block-list write fails (Jes Sorensen) [1320863 1273546]
- [md] raid10: submit_bio_wait returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] raid1: submit_bio_wait() returns 0 on success (Jes Sorensen) [1320863 1273546]
- [md] crash in md-raid1 and md-raid10 due to incorrect list manipulation (Jes Sorensen) [1320863 1273546]
- [md] raid10: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]
- [md] raid1: ensure device failure recorded before write request returns (Jes Sorensen) [1320863 1273546]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.26.1.el6]" date="1460462400">- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1326043 1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1326043 1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1326043 1324318]</changelog>
</package>
<package pkgid="51f71fab3d2ff8d5a0f263730264c0241af332a99984c1e7d95d671e44a66242" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="573.3.1.el6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.1.1.el6]" date="1436875200">- [redhat] Update dracut dependency to pull in drbg module (Herbert Xu) [1241518 1241338]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.2.1.el6]" date="1437566400">- [net] udp: fix behavior of wrong checksums (Denys Vlasenko) [1240758 1240759] {CVE-2015-5364 CVE-2015-5366}
- [fs] vfs: Unhash and evict unused children dentries after rmdir (Lukas Czerner) [1243400 1241030]
- [fs] vfs: Prevent syncing frozen file system (Lukas Czerner) [1243404 1241791]
- [fs] vfs: Prevent freeing unlinked file to be indefinitely delayed (Lukas Czerner) [1243406 1236736]
- [fs] vmcore: continue vmcore initialization if PT_NOTE is found empty (Baoquan He) [1245195 1236437]
- [fs] vmcore: prevent PT_NOTE p_memsz overflow during header update (Baoquan He) [1245195 1236437]
- [kernel] audit/fix non-modular users of module_init in core code (Baoquan He) [1245195 1236437]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-573.3.1.el6]" date="1439208000">- [md] Revert "dm: don't schedule delayed run of the queue if nothing to do" (Mike Snitzer) [1246095 1240767]
- [md] Revert "dm: only run the queue on completion if congested or no requests pending" (Mike Snitzer) [1246095 1240767]</changelog>
</package>
<package pkgid="1e8ac870e7e682be48627774488b62ac17903e92431d34b5be2a66f569c54704" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.11.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.9.1.el6]" date="1475841600">- [net] vlan: Fix FCOE_MTU support (Maurizio Lombardi) [1381592 1367250]
- [s390] mm: fix asce_bits handling with dynamic pagetable levels (Steve Best) [1377472 1341758]
- [powerpc] eeh: Block PCI configuration space access during EEH (Gustavo Duarte) [1379596 1216944]
- [fs] ecryptfs: prevent mounts backed by procfs (Mateusz Guzik) [1347101 1347102] {CVE-2016-1583}
- [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1341546 1316461] {CVE-2016-2143}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.10.1.el6]" date="1476187200">- [scsi] fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (Maurizio Lombardi) [1382620 1341298]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="cd3b8c6907ba23f82fe8a59445a4f4ceca8cc4203e2370cefe285d3490b0d8b5" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.11.1.el6]" date="1477483200">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
</package>
<package pkgid="f3556648fcc2fd5472bd5cd50f6c4f6b5055d1f3246b3b4df45cb15edaf42c2d" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.12.1.el6]" date="1479124800">- [netdrv] mlx5: Fix RC transport send queue overhead computation (Slava Shwartsman) [1392799 1384212]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.13.2.el6]" date="1487419200">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="56738d529a4af6ab25d587483a8b23d4eb66297985f06ce1061459c2f60e7806" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.15.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.13.1.el6]" date="1479902400">- [net] Fix use after free in the recvmmsg exit path (Davide Caratti) [1390805 1390046] {CVE-2016-7117}
- [net] vlan: Propagate MAC address to VLANs (Jarod Wilson) [1396479 1381585]
- [net] tcp: fix use after free in tcp_xmit_retransmit_queue() (Mateusz Guzik) [1379527 1379529] {CVE-2016-6828}
- [net] netfilter: x_tables: check for bogus target offset (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: validate e-&gt;target_offset early (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] netfilter: x_tables: make sure e-&gt;next_offset covers remaining blob size (Mateusz Guzik) [1351421 1351422] {CVE-2016-4998}
- [net] ipv6: Don't change dst-&gt;flags using assignments (Marcelo Leitner) [1391974 1389478]
- [scsi] libfc: Revert: use offload EM instance again (Chris Leech) [1392818 1383078]
- [netdrv] sfc: report supported link speeds on SFP connections (Jarod Wilson) [1388168 1384621]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1392875 1342114]
- [hv] avoid vfree() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: handle various crash scenarios (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support kexec on ws2012 r2 and above (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Support handling messages on multiple CPUs (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: remove code duplication in message handling (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid unneeded compiler optimizations in vmbus_wait_for_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid wait_for_completion() on crash (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: avoid scheduling in interrupt context in vmbus_initiate_unload() (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: don't loose HVMSG_TIMER_EXPIRED messages (Vitaly Kuznetsov) [1385482 1333167]
- [hv] vmbus: Force all channel messages to be delivered on CPU 0 (Vitaly Kuznetsov) [1385482 1333167]
- [scsi] mpt3sas: Fix panic when aer correct error occurred (Frank Ramsay) [1396272 1374743]
- [fs] nfs4.1: Remove a bogus BUG_ON() in nfs4_layoutreturn_done (Steve Dickson) [1385480 1376467]
- [firmware] dmi_scan: DMI information in sysfs is missing on SMBIOS 3.0 based systems (Steve Best) [1393464 1353807]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.14.1.el6]" date="1483617600">- [net] sctp: validate chunk len before actually using it (Hangbin Liu) [1399456 1399457] {CVE-2016-9555}
- [netdrv] qlcnic: add wmb() call in transmit data path (Harish Patil) [1403143 1342659]
- [kernel] audit: fix a double fetch in audit_log_single_execve_arg() (Paul Moore) [1359302 1359304] {CVE-2016-6136}
- [fs] nfs: Kill fscache warnings when mounting without -ofsc (David Howells) [1399172 1353844]
- [fs] nfs: Fix a compile issue when CONFIG_NFS_FSCACHE was undefined (David Howells) [1399172 1353844]
- [fs] nfs: Don't pass mount data to nfs_fscache_get_super_cookie() (David Howells) [1399172 1353844]
- [fs] nfsd: handle fileid wraparound (Dave Wysochanski) [1399174 1397552]
- [scsi] hpsa: correct logical resets (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generate a controller NMI (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: update driver version to 3.4.10-0-RH3 (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: Check for null devices in ioaccel submission patch (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: check for null device pointers (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: correct skipping masked peripherals (Joseph Szczypek) [1399175 1083110]
- [scsi] hpsa: generalize external arrays (Joseph Szczypek) [1399175 1083110]
- [fs] ext4: fix extent tree corruption caused by hole punch (Lukas Czerner) [1397808 1351798]
- [hv] do not lose pending heartbeat vmbus packets (Vitaly Kuznetsov) [1397739 1378614]
- [powerpc] ppc64: Fix incorrect return value from __copy_tofrom_user (Gustavo Duarte) [1398185 1387243]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.15.1.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424626 1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="7b7b0be2fb969ba401e22a420407524b431b865a759f2f4f7a694126ad95d759" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.3.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.1.1.el6]" date="1462536000">- [net] tcp/dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1333571 1314774]
- [net] tcp/dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1333571 1314774]
- [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1333571 1314774]
- [base] firmware: Add lock for firmware devices (Lyude Paul) [1333572 1309875]
- [net] netlabel: fix a problem with netlbl_secattr_catmap_setrng (Paul Moore) [1333579 1321174]
- [md] dm: only initialize the request_queue once (Mike Snitzer) [1333575 1328329]
- [md] raid10: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid1: include bio_end_io_list in nr_queued to prevent freeze_array hang (Jes Sorensen) [1333576 1320595]
- [md] raid5: Compare apples to apples (or sectors to sectors) (Jes Sorensen) [1333581 1295969]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.2.1.el6]" date="1465214400">- [sched] Revert "kernel: sched: Cure load average vs NO_HZ woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Cure more NO_HZ load average woes" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Move sched_avg_update to update_cpu_load" (Rafael Aquini) [1343015 1326373]
- [sched] Revert "kernel: sched: Fix nohz load accounting -- again" (Rafael Aquini) [1343015 1326373]
- [fs] lockd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [fs] nfsd: Don't try to register/unregister callbacks on the inet6addr_chain if the ipv6 module isn't loaded (Scott Mayhew) [1341496 1336483]
- [isdn] avoid calling tty_ldisc_flush() in atomic context (Sabrina Dubroca) [1337443 1328115]
- [redhat] Update dracut dependency to pull in ecb module (Herbert Xu) [1334431 1315832]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
</package>
<package pkgid="fe1c0e98644ab462504121d84c194b856487ea64498d63fc91d4b5962e3123c2" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.4.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.3.1.el6]" date="1466942400">- [infiniband] security: Restrict use of the write interface (Don Dutile) [1332547 1332548] {CVE-2016-4565}</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.2.el6]" date="1471262400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}</changelog>
</package>
<package pkgid="02437bdbded9c2115638e683f14a8d57611695a57f73bd3d3a843c41bc7b373c" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.1.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.4.1.el6]" date="1468497600">- [ipmi] Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg() (David Arcari) [1355980 1347189]
- [fs] ext4: Remove useless spinlock in ext4_getattr() (Lukas Czerner) [1355981 1315933]
- [net] tcp: increase size at which tcp_bound_to_half_wnd bounds to &gt; TCP_MSS_DEFAULT (Davide Caratti) [1354446 1349776]
- [net] tcp: Prevent overzealous packetization by SWS logic (Davide Caratti) [1354446 1349776]
- [fs] configfs: fix race between dentry put and lookup (Robert S Peterson) [1353828 1333448]
- [drm] move idr2 implementation to lib (Milos Vyletel) [1353827 1316790]
- [fs] cifs: Create dedicated keyring for spnego operations (Scott Mayhew) [1351670 1267754]
- [infiniband] srp: Fix backport error in ib_srp::srp_queuecommand (Don Dutile) [1348062 1321094]
- [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1347539 1344740]
- [sched] avoid kernel panic during power off (Frank Ramsay) [1343894 1313035]</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
</package>
<package pkgid="7dfc7ff446749e0988565ca7eb96f93573db42a5ab211177df3bc5a807200eaa" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.6.2.el6"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; [2.6.32-642.5.1.el6]" date="1470225600">- [scsi] megaraid_sas: Do not fire MR_DCMD_PD_LIST_QUERY to controllers which do not support it (Tomas Henzl) [1359039 1352826]
- [scsi] libfc: sanity check cpu number extracted from xid (Chris Leech) [1359036 1351356]
- [security] keys: potential uninitialized variable (Mateusz Guzik) [1345945 1345946] {CVE-2016-4470}
- [fs] gfs2: Lock holder cleanup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Large-filesystem fix for 32-bit systems (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Get rid of gfs2_ilookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Fix gfs2_lookup_by_inum lock inversion (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Initialize iopen glock holder for new inodes (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Release iopen glock in gfs2_create_inode error cases (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Wait for iopen glock dequeues (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Re-add an omission from upstream (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Eliminate parameter non_block on gfs2_inode_lookup (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Don't filter out I_FREEING inodes anymore (Robert S Peterson) [1359038 1238861]
- [fs] gfs2: Check if iopen is held when deleting inode (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Don't do glock put when inode creation fails (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Prevent delete work from occurring on glocks used for create (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Always use iopen glock for gl_deletes (Robert S Peterson) [1359037 1173286]
- [fs] gfs2: Update master statfs buffer with sd_statfs_spin locked (Robert S Peterson) [1359037 1173286]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-642.6.1.el6]" date="1472126400">- [net] tcp: make challenge acks less predictable (Florian Westphal) [1355606 1355607] {CVE-2016-5696}
- [fs] sunrpc: move NO_CRKEY_TIMEOUT to the auth-&gt;au_flags (Scott Mayhew) [1366962 1294939]
- [usbhid] hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands (Yauheni Kaliuta) [1359999 1360008] {CVE-2016-5829}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-642.6.2.el6]" date="1477310400">- [mm] close FOLL MAP_PRIVATE race (Larry Woodman) [1385116 1385117] {CVE-2016-5195}</changelog>
</package>
<package pkgid="2ceb32a7fbdc266126e40962f2f590793aadc2b9ac00b591749879da2a5be9dd" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="642.el6"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-640.el6]" date="1460116800">- [net] use GFP_ATOMIC in dst_ops_extend_register (Sabrina Dubroca) [1323252]
- [kernel] revert "sched: core: Use hrtimer_start_expires" (Jiri Olsa) [1324318]
- [kernel] Revert "Cleanup bandwidth timers" (Jiri Olsa) [1324318]
- [kernel] revert "fair: Test list head instead of list entry in throttle_cfs_rq" (Jiri Olsa) [1324318]
- [kernel] revert "sched, perf: Fix periodic timers" (Jiri Olsa) [1324318]
- [kernel] Revert "fix KABI break" (Jiri Olsa) [1324318]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-641.el6]" date="1460462400">- [netdrv] ixgbe: restore proper CHECKSUM_UNNECESSARY behavior for LRO packets (Neil Horman) [1318426]
- [netdrv] revert " net/mlx5_core: Add pci error handlers to mlx5_core driver" (Don Dutile) [1324599]
- [x86] kernel: espfix not working for 32-bit KVM paravirt guests (Jacob Tanenbaum) [1172767] {CVE-2014-8134}</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; [2.6.32-642.el6]" date="1460462401">- [scsi] fc: revert - ensure scan_work isn't active when freeing fc_rport (Ewan Milne) [1326447]
- [netdrv] ixgbe: Update ixgbe driver to use __netdev_pick_tx in ixgbe_select_queue (John Greene) [1310749]
- [netdrv] mlx5e: Fix adding vlan rule with vid zero twice (Kamal Heib) [1322809]</changelog>
</package>
<package pkgid="03b31fb49eb99083f2db50652bc03c3da8c7537bd21461a0543d77ee99ba00f7" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="310c93583392178b29690b57f509eb72de985bba541ff3fd1c2f8a870e7cd7d7" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="5fe32859f8c934bebb020b757d8ced77540c5df159a855b3e9c65af26b83b79d" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="5c7b96132b3b991a79e41708a694b995bedc25f339b15b65f0491c6381c48518" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="9d71a943c3413fe194ac41a7520920b7f16e27f8fc5e4a4c98faf193f8f76baa" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="ee42762154dbfa0c7f671597f8a2ece3cb3d60fc8c3d593606813a0141638bb3" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="07868a190ce61bb67b0327b89aa50fd6bdc9d53b3a50deb72838a6133fdd9d86" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="1a3a88fabfaa560cb4f2dd4c577fb1bb57971fa7dc12f4652ec4cfa5341f7f4c" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="96e5c58547aca557c9fe504dad53393053736805941251f105bb46b729950789" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="93c05ff0788783842c48718c347c2f740083eea31e549beee0b25b148c69a5e8" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="52f93969bc508fd66cad9ae297f7c00783956a9817ee5dcf7faf1c60ff738575" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="618ba4f7c7c0745c55f3c878eb80685f049ce7cb302ef22f61f70b7e5fa95b29" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="9774db9a591f3b072fe0c9c5817c3e6ad5a205f7694756964c3352e1b910fbcb" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="37cc9a8888d1bcbdf0a212a3e1772e08d131b5ad1845658e2d3d6701649090db" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
</package>
<package pkgid="dd5e479a997b99cf4bd7a0a529c0a30647c0ddffb4ca262ec4813b5411aaedce" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.11.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.9.1.el6]" date="1542801600">- [block] make sure queue_lock is held when setting flag (Ming Lei) [1650024]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
</package>
<package pkgid="f77f55fd2782dd240dd4fa082698f58d6cb0dbf0179fc4b4d3752dd0f5527e60" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.12.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.10.1.el6]" date="1543492800">- [net] sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close (Xin Long) [1646405]
- [x86] kvm: Update cpuid properly when CR4.OSXAVE or CR4.PKE is changed (Wei Huang) [1425051]
- [mm] mempolicy: migrate_to_node should only migrate to node (Rafael Aquini) [1577094]
- [mm] vmscan: avoid possible deadlock caused by too_many_isolated() (Rafael Aquini) [1577094]
- [fs] seqfile: always allow oom killer (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc instead of oom kill processes (Rodrigo Freire) [1632434]
- [fs] seq_file: fallback to vmalloc allocation (Rodrigo Freire) [1632434]
- [fs] proc/stat: convert to single_open_size() (Rodrigo Freire) [1632434]
- [fs] seq_file: always clear m-&gt;count when we free m-&gt;buf (Rodrigo Freire) [1632434]
- [fs] seq_file: single_open_size() new helper (Rodrigo Freire) [1632434]
- [fs] stat: Use size_t for sizes instead of unsigned (Rodrigo Freire) [1632434]
- [fs] proc: speed up /proc/stat handling (Rodrigo Freire) [1632434]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.11.1.el6]" date="1548158400">- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1644401]
- [sound] alsa: rawmidi: Change resized buffers atomically (Denys Vlasenko) [1593083] {CVE-2018-10902}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.12.1.el6]" date="1551960000">- [x86] vDSO: Don't generate retpoline for indirect call (Waiman Long) [1638552]
- [fs] cifs: fix reparse point/symlink breakage (Leif Sahlberg) [1636484]
- [scsi] qla2xxx: Mask off Scope bits in retry delay (Himanshu Madhani) [1588133]
- [net] tcp: make tcp_retransmit_timer a no-op on empty write queue (Paolo Abeni) [1585892]
- [kernel] sched/sysctl: Check user input value of sysctl_sched_time_avg (Lauro Ramos Venancio) [1579128]
- [fs] Fix up non-directory creation in SGID directories (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] hugetlbfs: switch to inode_init_owner() (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] udf: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ubifs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ramfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext4: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext3: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] ext2: replace inode uid, gid, mode init with helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] btrfs: replace inode uid, gid, mode initialization with helper function (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [fs] vfs: Add inode uid,gid,mode init helper (Miklos Szeredi) [1600951] {CVE-2018-13405}
- [s390] kernel: adapt to changed CPU vulnerabilities function prototypes (Hendrik Brueckner) [1625381]
- [s390] detect etoken facility (Hendrik Brueckner) [1625381]
- [s390] Correct register corruption in critical section cleanup (Hendrik Brueckner) [1625381]
- [s390] remove indirect branch from do_softirq_own_stack (Hendrik Brueckner) [1625381]
- [s390] move spectre sysfs attribute code (Hendrik Brueckner) [1625381]
- [s390] kernel: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] ftrace: use expoline for indirect branches (Hendrik Brueckner) [1625381]
- [s390] move expoline assembler macros to a header (Hendrik Brueckner) [1625381]
- [s390] correct module section names for expoline code revert (Hendrik Brueckner) [1625381]
- [x86] speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Oleksandr Natalenko) [1670328]
- [perf] Fix a race between ring_buffer_detach() and ring_buffer_attach() (Jiri Olsa) [1589340]
- [perf] Fix mmap() accounting hole (Jiri Olsa) [1627672]
- [perf] Fix perf mmap bugs (Jiri Olsa) [1627672]</changelog>
</package>
<package pkgid="88398736335d20652c2af134e3c181b0d764f246c810ee1919796b333cb90998" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.14.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.13.1.el6]" date="1554120000">- [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1686170]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.1.el6]" date="1555329600">- [s390] kernel: Add crypto card toleration support (Hendrik Brueckner) [1695496]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.14.2.el6]" date="1556107200">- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
</package>
<package pkgid="f2da8fd66b5caeaed63d349a6176a786a7977133d95c8cc1291b040df30ef875" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.15.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.2.el6]" date="1559217600">- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.3.el6]" date="1560427200">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}</changelog>
</package>
<package pkgid="56cd31f09a45cfc294fa717d701ed8caba46dfa3934348b232a4754bbe43024a" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.17.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.15.1.el6]" date="1558699200">- [x86] x86/speculation: Don't print MDS_MSG_SMT message if mds_nosmt specified (Waiman Long) [1710081 1710517]
- [x86] x86/spec_ctrl: Fix incorrect MDS handling in late microcode loading (Waiman Long) [1710081 1710517]
- [x86] x86/speculation: Fix misuse of boot_cpu_has() with bug bits (Waiman Long) [1710121]
- [x86] x86/speculation/mds: Fix documentation typo (Waiman Long) [1710517]
- [documentation] Documentation: Correct the possible MDS sysfs values (Waiman Long) [1710517]
- [x86] x86/mds: Add MDSUM variant to the MDS documentation (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Fix comment (Waiman Long) [1710517]
- [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds=full, nosmt cmdline option (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [kernel] sched/smt: Provide sched_smt_active() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/speculation: Provide arch_smt_update() (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
- [x86] x86/mm: Fix compilation warning in pgtable_types.h (Waiman Long) [1692386 1692387 1692388] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.16.1.el6]" date="1559044800">- [virt] xenbus: Fix memory leak on release (Vitaly Kuznetsov) [1661666]
- [fs] dcache: fix locking around setting DCACHE_SHRINKING flag (Miklos Szeredi) [1672269]
- [x86] KVM: SVM: Selective cr0 intercept (Wei Huang) [1655873]
- [x86] KVM: SVM: Restore unconditional cr0 intercept under npt (Wei Huang) [1655873]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
</package>
<package pkgid="6b1d5e88e100440d48100a870e78e23025e1d44d0d8f32090b669c66fbd298a0" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.18.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.17.1.el6]" date="1561032000">- [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719614] {CVE-2019-11479}
- [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719840] {CVE-2019-11478}
- [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719585] {CVE-2019-11477}
- [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719585] {CVE-2019-11477}
- [lib] idr: free the top layer if idr tree has the maximum height (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix top layer handling (Denys Vlasenko) [1698139] {CVE-2019-3896}
- [lib] idr: fix backtrack logic in idr_remove_all (Denys Vlasenko) [1698139] {CVE-2019-3896}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.1.el6]" date="1562673600">- [virt] xenbus: don't look up transaction IDs for ordinary writes (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: don't BUG() on user mode induced condition (Vitaly Kuznetsov) [1663262]
- [virt] xenbus: Add proper handling of XS_ERROR from Xenbus for transactions (Vitaly Kuznetsov) [1663262]
- [fs] proc: restrict kernel stack dumps to root (Denys Vlasenko) [1638193] {CVE-2018-17972}
- [crypto] salsa20 - fix blkcipher_walk API usage (Bruno Eduardo de Oliveira Meneguele) [1543984]
- [mm] vmscan: do not loop on too_many_isolated for ever (Rafael Aquini) [1658254]
- [x86] spec_ctrl: Don't report the use of retpoline on Skylake as vulnerable (Waiman Long) [1666102]
- [mm] try harder to allocate vmemmap blocks (Rafael Aquini) [1591394]
- [v4l] dvb: revert spectre v1 mitigation (Josh Poimboeuf) [1647975]
- [fs] binfmt_misc.c: do not allow offset overflow (Bill O'Donnell) [1710149]
- [x86] pti: Don't use PCID and INVPCID in x86-32 (Waiman Long) [1702782]
- [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664197] {CVE-2019-5489}
- [x86] spec: Move retp_compiler() inline function to bugs.c (Waiman Long) [1722185]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.18.2.el6]" date="1564056000">- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
</package>
<package pkgid="a4d5ba0e43ca9db7ba6b85392788f473f0cd6285855f242decdd6a1879dfb464" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.2.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.1.1.el6]" date="1529582400">- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1574592]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1574592]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1574592]
- [x86] microcode: Sanitize per-cpu microcode reloading interface (Prarit Bhargava) [1574592]
- [x86] virt_spec_ctrl: Set correct host SSDB value for AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] bugs: Fix missing void (Waiman Long) [1584356] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584356] {CVE-2018-3639}
- [uapi] prctl: Add force disable speculation (Waiman Long) [1584356] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Show IBPB in the Spectre_v2 sysfs file (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Check MSR_IA32_ARCH_CAPABILITIES for Meltdown vulnearability (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] pti: Fix kexec warning on debug kernel (Waiman Long) [1584356] {CVE-2018-3639}
- [x86] kvm/fpu: Enable eager FPU restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] always enable eager FPU by default (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Load xsave pointer *after* initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix 32-bit signal frame handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always restore_xinit_state() when use_eager_cpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Rename drop_init_fpu() to fpu_reset_state() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fix math_state_restore() race with kernel_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Fold __drop_fpu() into its sole user (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse drop_init_fpu() in flush_thread() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce restore_init_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Document user_fpu_begin() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Factor out memset(xstate, 0) in fpu_finit() paths (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change xstateregs_get()/set() to use -&gt;xsave.i387 rather than -&gt;fxsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Always allow FPU in interrupt if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't abuse has_fpu in __kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Introduce per-cpu in_kernel_fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Check tsk_used_math() in kernel_fpu_end() for eager FPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Change math_error() to use unlazy_fpu(), kill (now) unused save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Merge simd_math_error() into math_error() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't do __thread_fpu_end() if use_eager_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Don't reset thread.fpu_counter (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: shift drop_init_fpu() from save_xstate_sig() to handle_signal() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Allow FPU to be used at interrupt time even with eagerfpu (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387.c: Initialize thread xstate only on CPU0 only once (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: fix kvm's usage of kernel_fpu_begin/end() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] rhel: initialize scattered CPUID features early (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: make eagerfpu= boot param tri-state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: enable eagerfpu by default for xsaveopt (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: decouple non-lazy/eager fpu restore from xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: use non-lazy fpu restore for processors supporting xsave (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: remove unnecessary user_fpu_end() in save_xstate_sig() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop_fpu() before restoring new state from sigframe (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Unify signal handling code paths for x86 and x86_64 kernels (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: drop the fpu state during thread exit (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signals: ia32_signal.c: add __user casts to fix sparse warnings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Consolidate inline asm routines for saving/restoring fpu state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] signal: Cleanup ifdefs and is_ia32, is_x32 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu/xsave: Keep __user annotation in casts (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] debug: Add KERN_&lt;LEVEL&gt; to bare printks, convert printks to pr_&lt;level&gt; (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] extable: Remove open-coded exception table entries in arch/x86/include/asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Split up &lt;asm/i387.h&gt; into exported and internal interfaces (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: Uninline the generic FP helpers that we expose to kernel modules (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: (DON'T ACTUALLY) support lazy restore of FPU state (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: use 'restore_fpu_checking()' directly in task switching code (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix up some fpu_counter confusion (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: re-introduce FPU state preloading at context switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU flag from thread_info to task_struct (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move AMD K7/K8 fpu fxsave/fxrstor workaround from save to restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: do not preload FPU state at task switch time (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: don't ever touch TS_USEDFPU directly, use helper functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: move TS_USEDFPU clearing out of __save_init_fpu and into callers (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: fix x86-64 preemption-unsafe user stack save/restore (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] i387: math_state_restore() isn't called from asm (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fix potentially dangerous trailing '; ' in #defined values/expressions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Fix FPU exception handling on non-SSE systems (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Fix common misspellings (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] kvm: Initialize fpu state in preemptible context (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-32, fpu: Rewrite fpu_save_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove PSHUFB_XMM5_* macros (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Remove unnecessary ifdefs from i387 code. (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Simplify constraints for fxsave/fxtstor (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Fix cs value in convert_from_fxsr() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] x86-64, fpu: Disable preemption when using TS_USEDFPU (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge __save_init_fpu() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge tolerant_fwait() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] fpu: Merge fpu_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Disable xsave in i387 emulation mode (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make xstate_enable_boot_cpu() __init, protect on CPU 0 (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Add __init attribute to setup_xstate_features() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Make init_xstate_buf static (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Check cpuid level for XSTATE_CPUID (0x0d) (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Introduce xstate enable functions (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Do not include asm/i387.h in asm/xsave.h (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Avoid unnecessary __clear_user() and xrstor in signal handling (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Cleanup return codes in check_for_xstate() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Separate fpu and xsave initialization (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] xsave: Move boot cpu initialization to xsave_init() (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: change save_i387_xstate() to rely on unlazy_fpu()" (Paolo Bonzini) [1589047] {CVE-2018-3665}
- [x86] Revert "[x86] fpu: shift clear_used_math() from save_i387_xstate() to handle_signal()" (Paolo Bonzini) [1589047] {CVE-2018-3665}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.2.1.el6]" date="1530619200">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1596113] {CVE-2018-10872}
- [fs] gfs2: Flush delayed work earlier in gfs2_inode_lookup (Andreas Grunbacher) [1506281]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576757] {CVE-2018-10675}
- [mm] Fix NULL pointer dereference in dequeue_hwpoisoned_huge_page() (Larry Woodman) [1381653]
- [fs] NFSv4.1: Fix up replays of interrupted requests (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Simplify struct nfs4_sequence_args too (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Label each entry in the session slot tables with its slot number (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Shrink struct nfs4_sequence_res by moving the session pointer (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: nfs4_alloc_slots doesn't need zeroing (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: clean up nfs4_recall_slot to use nfs4_alloc_slots (Benjamin Coddington) [1553423]
- [fs] NFSv4.1: Fix a NFSv4.1 session initialisation regression (Benjamin Coddington) [1553423]
- [scsi] ipr: Fix sync scsi scan (Gustavo Duarte) [1572310]
- [scsi] ipr: Wait to do async scan until scsi host is initialized (Gustavo Duarte) [1572310]</changelog>
</package>
<package pkgid="539ee3c08ebc1f4d2e72f2f87a5e47733e6474cbe992ced071fbcb1673929382" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.22.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.19.1.el6]" date="1565438400">- [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1732107]
- [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1728931]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.20.1.el6]" date="1565784000">- [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}
- [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1724512] {CVE-2019-1125}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
</package>
<package pkgid="3e65c68a341849689c80c6829d9f3ae7cf335f24efe701f60c2c71115b7d11e3" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.21.1.el6]" date="1565956800">- [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712858] {CVE-2019-11810}
- [net] net: Set sk_prot_creator when copying sockets to the right proto (Andrea Claudi) [1657117] {CVE-2018-9568}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.22.1.el6]" date="1565956801">- Rebuild</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
</package>
<package pkgid="831d1f2b3bbc49da24896b83f2c8be871e31ad399690515649d3c16815f05e93" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573041600">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="f6027a0bd9b90bad4ce934d4379de0c310127f78e47338abadaca48792aecb4f" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.24.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.2.el6]" date="1573128000">- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.3.el6]" date="1573560000">- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="36cb1206a16125b73675a7454981018c3e922686dd8d6fb05bb6d448c932f268" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.25.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.23.1.el6]" date="1568721600">- [vhost] vhost: make sure log_num &lt; in_num (Eugenio Perez) [1750869 1750869] {CVE-2019-14835}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.24.1.el6]" date="1569585600">- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.25.1.el6]" date="1574251200">- [kvm] KVM: VMX: Set VMENTER_L1D_FLUSH_NOT_REQUIRED if !X86_BUG_L1TF (Waiman Long) [1733760]
- [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746799] {CVE-2019-14821}
- [virt] KVM: MMIO: Lock coalesced device when checking for available entry (Bandan Das) [1746799] {CVE-2019-14821}
- [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1749512]
- [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1749512]
- [security] KEYS: prevent creating a different user's keyrings (David Howells) [1537371]
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Denys Vlasenko) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}</changelog>
</package>
<package pkgid="8d487df6ef77663826c2305db8f521ab815661c945ac2883378cfd9e248e71b6" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.26.1.el6]" date="1576670400">- [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1764544]
- [drm] vmwgfx: refuse to hibernate if we have any resources v2 (Kenneth Yin) [1748195]
- [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1739948]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
</package>
<package pkgid="413496762d84e9e429bede93968364b92ee9b4bca6d111d98a85eaded65b1c2b" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.27.1.el6]" date="1578484800">- [mm] mempolicy: fix a memory corruption by refcount imbalance in alloc_pages_vma() (Waiman Long) [1785321]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
</package>
<package pkgid="2c71e1625a87a8fcd1811394761018a9473965e54ac173069a5452369bdb8463" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.29.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.28.1.el6]" date="1580472000">- [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1795404]
- [isdn] mISDN: enforce CAP_NET_RAW for raw sockets (Andrea Claudi) [1779473] {CVE-2019-17055}
- [net] cfg80211: wext: avoid copying malformed SSIDs (Jarod Wilson) [1778625] {CVE-2019-17133}
- [netdrv] bonding: speed/duplex update at NETDEV_UP event (Patrick Talbert) [1772779]
- [netdrv] bonding: make speed, duplex setting consistent with link state (Patrick Talbert) [1772779]
- [netdrv] bonding: simplify / unify event handling code for 3ad mode (Patrick Talbert) [1772779]
- [netdrv] bonding: unify all places where actor-oper key needs to be updated (Patrick Talbert) [1772779]
- [netdrv] bonding: simple code refactor (Patrick Talbert) [1772779]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.2.el6]" date="1588852800">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}</changelog>
</package>
<package pkgid="2a719bd9a8ce0886a9bb592323184abcda5b34168e6bbe65c598f586022bdcdf" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.3.5.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.3.el6]" date="1533297600">- [x86] syscall: Fix regression when using the last syscall (process_vm_writev) (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}
- [x86] syscall: Fix regression on strace and stap (Lauro Ramos Venancio) [1589032] {CVE-2018-3693}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.4.el6]" date="1533729600">- [x86] x86/mm: Simplify p[g4um]d_page() macros (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/mm: Fix regression with huge pages on PAE (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Fix pud/pmd interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [x86] x86/asm: Move PUD_PAGE macros to page_types.h (Josh Poimboeuf) [1593376] {CVE-2018-3620}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rb_to_skb() and other rb tree helpers (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] add rbnode to struct sk_buff (Florian Westphal) [1611376] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Florian Westphal) [1611376] {CVE-2018-5390}</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.3.5.el6]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Frantisek Hrbata) [1593376] {CVE-2018-3620}</changelog>
</package>
<package pkgid="915ec613738fd37809f534d16ff60e6b3c631edf14c52b2161bf24d740f30b93" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.30.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.2.el6]" date="1590753600">- x86/speculation: Provide SRBDS late microcode loading support (Waiman Long)
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}</changelog>
</package>
<package pkgid="183e7851ef5b87f579efe40162ee0a4de545f7585f3a1c1cb99a11a1f8059a89" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.31.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.29.1.el6]" date="1584014400">- [wireless] rtlwifi: Fix potential overflow on P2P code (Jarod Wilson) [1775226] {CVE-2019-17666}
- [x86] mm: revert x86_64 and arm64 ELF_ET_DYN_BASE base changes (Denys Vlasenko) [1485759]
- [powerpc] powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB (Denys Vlasenko) [1485759]
- binfmt_elf: use ELF_ET_DYN_BASE only for PIE (Denys Vlasenko) [1485759]
- [powerpc] powerpc: Use generic PIE randomization (Denys Vlasenko) [1485759]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.30.1.el6]" date="1590667200">- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827226] {CVE-2020-10711}
- [netdrv] bonding: don't set slave-&gt;link in bond_update_speed_duplex() (Patrick Talbert) [1828604]
- [security] KEYS: prevent KEYCTL_READ on negative key (Patrick Talbert) [1498368] {CVE-2017-12192}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
</package>
<package pkgid="8d6cac4851344ae489f38a5a25fe15bcfc31f8bbb1b5ee84b6c5f4716d1a1fa5" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.33.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.31.1.el6]" date="1592222400">- [x86] x86/speculation: Provide SRBDS late microcode loading support (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827185] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827185] {CVE-2020-0543}
- [x86] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827185] {CVE-2020-0543}
- [netdrv] bonding/802.3ad: fix link_failure_count tracking (Patrick Talbert) [1841819]
- [mm] mm: migration: add migrate_entry_wait_huge() (Waiman Long) [1839653]
- [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1796810]
- [powerpc] powerpc/security: Fix spectre_v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Update Spectre v2 reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1796810]
- [powerpc] powerpc/fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1796810]
- [powerpc] powerpc/pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for software count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1796810]
- [powerpc] powerpc/asm: Add a patch_site macro &amp; helpers for patching instructions (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Disable the speculation barrier from the command line (Gustavo Duarte) [1796810]
- [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Patch barrier_nospec in modules (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1796810]
- [powerpc] powerpc/64s: Add barrier_nospec (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Add helper to check if offset is within relative branch range (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Have patch_instruction detect faults (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Introduce asm-prototypes.h (Gustavo Duarte) [1796810]
- [powerpc] powerpc: Move local setup.h declarations to arch includes (Gustavo Duarte) [1796810]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.32.1.el6]" date="1594036800">- [wireless] libertas: make lbs_ibss_join_existing() return error code on rates overflow (Jarod Wilson) [1776569]
- [wireless] libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held (Jarod Wilson) [1776569]
- [wireless] libertas: Fix two buffer overflows at parsing bss descriptor (Jarod Wilson) [1776569]
- [security] keys: Protect request_key() against a type with no match function (Patrick Talbert) [1433220] {CVE-2017-2647}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
</package>
<package pkgid="27bfe458d147e4639c2049df8aad599780ef431ce5bca334393db49aef5ce0a7" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.35.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.33.1.el6]" date="1597060800">- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1824907]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.34.1.el6]" date="1598356800">- [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705003]
- [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705003]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-754.35.1.el6]" date="1600257600">- [ata] libata: fix NULL sdev dereference race in atapi_qc_complete() (Kenneth Yin) [1876296]</changelog>
</package>
<package pkgid="51a8dcbb87b40291b673491b23450c083842b035c5b5c10de12596a657d61ad5" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.1.el6]" date="1535716800">- [x86] set __max_smt_threads for 1 core systems (Prarit Bhargava) [1623255]
- [md] dm rq: fix a race condition in rq_completed() (Ming Lei) [1574568]
- [scsi] scsi_transport_fc: Hold queue lock while calling blk_run_queue_async() (Ming Lei) [1574568]
- [block] Avoid scheduling delayed work on a dead queue (Ming Lei) [1574568]
- [block] Avoid that request_fn is invoked on a dead queue (Ming Lei) [1574568]
- [block] Let blk_drain_queue() caller obtain the queue lock (Ming Lei) [1574568]
- [block] Rename queue dead flag (Ming Lei) [1574568]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.6.2.el6]" date="1536926400">- [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625976] {CVE-2018-14634}
- [fs] exec.c: account for argv/envp pointers (Yauheni Kaliuta) [1625976] {CVE-2018-14634}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-754.6.3.el6]" date="1537272000">- [kvm] VMX: fixes for vmentry_l1d_flush module parameter (Marcelo Tosatti) [1628796]
- [x86] speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Marcelo Tosatti) [1628796]
- [x86] KVM: VMX: skip L1TF flush on VM-entry if EPT is disabled (Marcelo Tosatti) [1616397]</changelog>
</package>
<package pkgid="06a42127f7a2eb8bed4cf884d8c794475005a5d9a35e3134de4d40fcc74a8d71" name="python-perf" arch="i686">
  <version epoch="0" ver="2.6.32" rel="754.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-752.el6]" date="1525348800">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1572487]
- [fs] fix WARNING in rmdir() (Miklos Szeredi) [1282117]
- [net] sctp: label accepted/peeled off sockets (Marcelo Leitner) [1571357]
- [net] security: export security_sk_clone (Marcelo Leitner) [1571357]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-753.el6]" date="1526040000">- [x86] vm86-32: Properly set up vm86-32 stack for task switching (Waiman Long) [1572865]
- [x86] spec_ctrl: Enable IBRS and RSB stuffing in 32-bit interrupts (Waiman Long) [1571362]
- [x86] entry/32: Fix regressions in 32-bit debug exception (Waiman Long) [1571362]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-754.el6]" date="1527163200">- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581053] {CVE-2018-3639}
- [x86] amd: Disable AMD SSBD mitigation in a VM (Waiman Long) [1580360]
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] kvm: Expose the RDS bit to the guest (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs/AMD: Add support to disable RDS on Fam(15, 16, 17)h if requested (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566899] {CVE-2018-3639}
- [x86] invpcid: Enable 'noinvpcid' boot parameter for X86_32 (Waiman Long) [1560494]
- [x86] dumpstack_32: Fix kernel panic in dump_trace (Waiman Long) [1577351]
- [fs] gfs2: For fs_freeze, do a log flush and flush the ail1 list (Robert S Peterson) [1569148]
- [net] dccp: check sk for closed state in dccp_sendmsg() (Stefano Brivio) [1576586] {CVE-2018-1130}
- [net] ipv6: dccp: add missing bind_conflict to dccp_ipv6_mapped (Stefano Brivio) [1576586] {CVE-2018-1130}</changelog>
</package>
<package pkgid="b0f94eab5125347f1765762bd9f4c10129cb6745968d4ff2bbc51162b2def377" name="python-prettytable" arch="noarch">
  <version epoch="0" ver="0.7.2" rel="11.el6"/>
  <changelog author="P&#xE1;draig Brady &lt;pbrady@redhat.com&gt; - 0.7.2-1" date="1389096000">- Latest upstream</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 0.7.2-4" date="1406808000">- fix license handling</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 0.7.2-11" date="1487592000">- Bumping release so this RHEL-6 package obsoletes the one in epel6</changelog>
</package>
<package pkgid="9122feaeca3ea41fc476988f2e06fa37d3ecf2663355f449b3622530fdc9c523" name="python-reportlab" arch="i686">
  <version epoch="0" ver="2.3" rel="3.el6_10.1"/>
  <changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 2.3-2" date="1258977600">- Do not bundle fonts
- Point the config to Fedora's font locations</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.3-3" date="1276862400">- Add -fno-strict-aliasing to pass "Testsuite regressions" test
- Make docs subpackage "noarch"
- Resolves: #605103</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.3-3.el6_10.1" date="1579003200">- Do not eval strings passed to toColor
- Resolves: #1788551</changelog>
</package>
<package pkgid="6b3401b4a3265d0b2f86f0291bce38f1e05d99e2349774429f829346cf0345ab" name="python-reportlab-docs" arch="noarch">
  <version epoch="0" ver="2.3" rel="3.el6_10.1"/>
  <changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 2.3-2" date="1258977600">- Do not bundle fonts
- Point the config to Fedora's font locations</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.3-3" date="1276862400">- Add -fno-strict-aliasing to pass "Testsuite regressions" test
- Make docs subpackage "noarch"
- Resolves: #605103</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.3-3.el6_10.1" date="1579003200">- Do not eval strings passed to toColor
- Resolves: #1788551</changelog>
</package>
<package pkgid="76b4f822c128b5254bd72cd5233cfe4009682597064836c728ae81a4c35199fb" name="python-requests" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="4.el6"/>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.0-2" date="1430222400">- Remove bundled directories altogether, requests are smart enough
  to import system modules, fixes a problem with updating requests
  from 2.3.0
Resolves: rhbz#1212145</changelog>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.0-3" date="1432296000">- Use explicit version in Requires to force update
Resolves: rhbz#1224002</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.0-4" date="1476878400">- Ensure that urllib3.connection module is imported only once so connections
  to HTTPS servers that require SNI support do not fail
Resolves: rhbz#1382682</changelog>
</package>
<package pkgid="157562c573de4057f9d210ad42d9737235ebad1969a51f1b5e962541a672ec7c" name="python-rhsm" arch="i686">
  <version epoch="0" ver="1.18.6" rel="1.el6"/>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.4-1" date="1476619200">- Added 6.9 releaser (adarshvritant@gmail.com)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.5-1" date="1480075200">- 1396405: Use an int for port on connections (csnyder@redhat.com)
- 1393010: Correlate request ID, method and handler in logs
  (csnyder@redhat.com)
- 1394776: Fix port, insecure, and handler options on M2Crypto wrapper
  (csnyder@redhat.com)
- 1394351: Add httplib constants to m2cryptohttp (khowell@redhat.com)
- 1390688: Add missing socket import (khowell@redhat.com)
- Reduce usage of m2crypto (#184) (kevin@kahowell.net)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.6-1" date="1481284800">- 1400719: Proxy host not available for release command (wpoteat@redhat.com)
- 1397201: Expose classes in m2crypto wrapper (khowell@redhat.com)</changelog>
</package>
<package pkgid="e9d6a27ca0ff4d1dd058f0bf686541603c3e19cd85ad88489b1a740ab715a041" name="python-rhsm-certificates" arch="i686">
  <version epoch="0" ver="1.18.6" rel="1.el6"/>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.4-1" date="1476619200">- Added 6.9 releaser (adarshvritant@gmail.com)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.5-1" date="1480075200">- 1396405: Use an int for port on connections (csnyder@redhat.com)
- 1393010: Correlate request ID, method and handler in logs
  (csnyder@redhat.com)
- 1394776: Fix port, insecure, and handler options on M2Crypto wrapper
  (csnyder@redhat.com)
- 1394351: Add httplib constants to m2cryptohttp (khowell@redhat.com)
- 1390688: Add missing socket import (khowell@redhat.com)
- Reduce usage of m2crypto (#184) (kevin@kahowell.net)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.6-1" date="1481284800">- 1400719: Proxy host not available for release command (wpoteat@redhat.com)
- 1397201: Expose classes in m2crypto wrapper (khowell@redhat.com)</changelog>
</package>
<package pkgid="f719d8931e6cee9d9ef976756cc0fadf8187eed4749e76fa9e72a91e12af502d" name="python-sss" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="23c56c7516ee04f749da931f160120738baa52cbd271b31372882fdd1bc41327" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="0e57dab5f269000696500d52f72867b79dabc2dd8291d8279cbb218cf861c94e" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="79638968776b02d9dc79e64fb23da603d9bdc4c868d8f8d658c60d74d5171d36" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="76d7fd7f131de6c49e52d1e1939f7c85181fd59f72092c3aebd336748060755e" name="python-tdb" arch="i686">
  <version epoch="0" ver="1.3.8" rel="1.el6_7"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.2.1-3" date="1302004800">- Resolves: rhbz#692251 - tdb_extend() can cause a memory-usage explosion if
-                         the size of its entries are very large</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.10-1" date="1343908800">- Resolves: rhbz#766334 - Rebase libtdb to match the version required
                          by Samba4
- Enable the Python bindings to satisfy samba4 BuildRequirements
- Obsoletes tdb-1.2.9-limit-tdb_expand.patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.8-1" date="1459512000">- Rebase libtdb to 1.3.8
- related: #1322688</changelog>
</package>
<package pkgid="b95dff68afdbc1ba2247df434025ef8e9333307ba5b63f60121ce151a7a3d017" name="python-test" arch="i686">
  <version epoch="0" ver="2.6.6" rel="66.el6_8"/>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.6-64" date="1432296000">- Enable use of deepcopy() with instance methods
Resolves: rhbz#1223037</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.6-65" date="1466510400">- Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
  Raise an error when STARTTLS fails (upstream patch)
- Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
  Disabled HTTP header injections in httplib (upstream patch)
Resolves: rhbz#1346354</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-66" date="1470744000">- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359161</changelog>
</package>
<package pkgid="c4ad9f1f7b9fbd4964cdc3e02a6c44742e13bcb8e34c882a5b9c0a6c0fbdd31b" name="python-test" arch="i686">
  <version epoch="0" ver="2.6.6" rel="68.el6_10"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-66" date="1470744000">- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359162</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-67" date="1559736000">- Security fix for CVE-2019-9636
Resolves: rhbz#1716744</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-68" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1716744</changelog>
</package>
<package pkgid="f02a98487a64e5e17d098150c1a33e7e0b4e8963a8b802ba5fc1a6e2f0a58b61" name="python-tevent" arch="i686">
  <version epoch="0" ver="0.9.26" rel="2.el6_7"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.18-3" date="1375876800">- Resolves: rhnz#978962 - tevent_loop_wait() never finishes</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-1" date="1459512000">- Rebase libtevent to 0.9.26
- Remove upstreamed or no longer applicable patches
- Related: rhbz#1322688</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.9.26-2" date="1459771200">- temporarily disable make check, which keeps failing in mock despite
  working correctly on a full system
- Related: rhbz#1322688</changelog>
</package>
<package pkgid="487c022104df6889bb28eb2f414b7cedaa372a8e92242130645a63bd1bc40f95" name="python-tools" arch="i686">
  <version epoch="0" ver="2.6.6" rel="66.el6_8"/>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.6-64" date="1432296000">- Enable use of deepcopy() with instance methods
Resolves: rhbz#1223037</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.6-65" date="1466510400">- Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
  Raise an error when STARTTLS fails (upstream patch)
- Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
  Disabled HTTP header injections in httplib (upstream patch)
Resolves: rhbz#1346354</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-66" date="1470744000">- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359161</changelog>
</package>
<package pkgid="d5d6ed66f5e38435a798004235bc066793cb6d43a8496382f6adf0f9763c0ca8" name="python-tools" arch="i686">
  <version epoch="0" ver="2.6.6" rel="68.el6_10"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-66" date="1470744000">- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359162</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-67" date="1559736000">- Security fix for CVE-2019-9636
Resolves: rhbz#1716744</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-68" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1716744</changelog>
</package>
<package pkgid="3a314d9cec9018e91fc1548bdd6773115686ac2dd7b66902f69d7f5248c50da7" name="python-twisted-web" arch="i686">
  <version epoch="0" ver="8.2.0" rel="5.el6_8"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 8.2.0-3.2" date="1264507200">- fix source URL</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 8.2.0-4" date="1471003200">- Fix HTTPoxy CVE-2016-1000111
Resolves: rhbz#1358789</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 8.2.0-5" date="1471003201">- Rebase HTTPoxy patch and bump release for rebuild
Resolves: rhbz#1358789</changelog>
</package>
<package pkgid="c94f94f4682e6795108539c2136e9c9345b548430d531bd51e98f96d02a41a91" name="python-twisted-web" arch="i686">
  <version epoch="0" ver="8.2.0" rel="6.el6_10"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 8.2.0-4" date="1471003200">- Fix HTTPoxy CVE-2016-1000111
Resolves: rhbz#1358790</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 8.2.0-5" date="1471003201">- Rebase HTTPoxy patch and bump release for rebuild
Resolves: rhbz#1358790</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 8.2.0-7" date="1586260800">- Fix CVE-2020-10108 HTTP request smuggling when presented with two Content-Length headers
Resolves: rhbz#1813439
- Remove useless macros definitions</changelog>
</package>
<package pkgid="4d05a440e1ca6282252428478bedffed01637d8c0e918734c817aae27ac9dab0" name="python-urlgrabber" arch="noarch">
  <version epoch="0" ver="3.9.1" rel="11.el6"/>
  <changelog author="James Antill &lt;james@fedoraproject.org&gt; 3.9.1-9" date="1369828800">- Fix a typo when raising the error for setting timestamp.
- Resolves: rhbz#807030</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; 3.9.1-10" date="1450094400">- Fix parsing of FTP 213 responses.
- Resolves: bug#970262
- Set proper errcode when raising URLGRabError.
- Resolves: bug#1271242</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; 3.9.1-11" date="1450699200">- Add ftp_disable_epsv option.
- Resolves: bug#849177</changelog>
</package>
<package pkgid="28da1c500350b92c48f15eb162ddeb17ee8620e5b24ce198f7cb956ee2728bfd" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.479.el6_7.1"/>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.478.el6" date="1433332800">- kvm-vdi-Avoid-direct-AIO-callback.patch [bz#1130046]
- kvm-vdi-Initialize-acb-bh-in-vdi_aio_setup.patch [bz#1130046]
- Resolves: bz#1130046
  (test case 084 of qemu-iotests fail for vdi)</changelog>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.479.el6" date="1434974400">- kvm-posix-aio-compat-fix-acb-ev_signo-race-condition.patch [bz#1233292]
- Resolves: bz#1233292
  (qemu-kvm randomly crashes with "kill failed failed: Invalid argument")</changelog>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.479.el6_7.1" date="1438862400">- kvm-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch [bz#1248761]
- kvm-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch [bz#1248761]
- kvm-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch [bz#1248761]
- kvm-rtl8139-check-IP-Header-Length-field-CVE-2015-5165.patch [bz#1248761]
- kvm-rtl8139-check-IP-Total-Length-field-CVE-2015-5165.patch [bz#1248761]
- kvm-rtl8139-skip-offload-on-short-TCP-header-CVE-2015-51.patch [bz#1248761]
- kvm-rtl8139-check-TCP-Data-Offset-field-CVE-2015-5165.patch [bz#1248761]
- Resolves: bz#1248761
  (CVE-2015-5165 qemu-kvm: Qemu: rtl8139 uninitialized heap memory information leakage to guest [rhel-6.7.z])</changelog>
</package>
<package pkgid="b24a149db75da3a4f092b01e9f598dddce731a3fad09f1c8c5ed6118caed3f62" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.479.el6_7.2"/>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.479.el6" date="1434974400">- kvm-posix-aio-compat-fix-acb-ev_signo-race-condition.patch [bz#1233292]
- Resolves: bz#1233292
  (qemu-kvm randomly crashes with "kill failed failed: Invalid argument")</changelog>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.479.el6_7.1" date="1438862400">- kvm-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch [bz#1248761]
- kvm-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch [bz#1248761]
- kvm-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch [bz#1248761]
- kvm-rtl8139-check-IP-Header-Length-field-CVE-2015-5165.patch [bz#1248761]
- kvm-rtl8139-check-IP-Total-Length-field-CVE-2015-5165.patch [bz#1248761]
- kvm-rtl8139-skip-offload-on-short-TCP-header-CVE-2015-51.patch [bz#1248761]
- kvm-rtl8139-check-TCP-Data-Offset-field-CVE-2015-5165.patch [bz#1248761]
- Resolves: bz#1248761
  (CVE-2015-5165 qemu-kvm: Qemu: rtl8139 uninitialized heap memory information leakage to guest [rhel-6.7.z])</changelog>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.479.el6_7.2" date="1443441600">- kvm-net-add-checks-to-validate-ring-buffer-pointers-CVE-.patch [bz#1263274]
- Resolves: bz#1263274
  (CVE-2015-5279 qemu-kvm: qemu: Heap overflow vulnerability in ne2000_receive() function [rhel-6.7.z])</changelog>
</package>
<package pkgid="e6bf6f808e0f34cc385317e26bde9e9b9542632ab76d8510c36468db0a31988c" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.479.el6_7.3"/>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.479.el6_7.1" date="1438862400">- kvm-rtl8139-avoid-nested-ifs-in-IP-header-parsing-CVE-20.patch [bz#1248761]
- kvm-rtl8139-drop-tautologous-if-ip-.-statement-CVE-2015-.patch [bz#1248761]
- kvm-rtl8139-skip-offload-on-short-Ethernet-IP-header-CVE.patch [bz#1248761]
- kvm-rtl8139-check-IP-Header-Length-field-CVE-2015-5165.patch [bz#1248761]
- kvm-rtl8139-check-IP-Total-Length-field-CVE-2015-5165.patch [bz#1248761]
- kvm-rtl8139-skip-offload-on-short-TCP-header-CVE-2015-51.patch [bz#1248761]
- kvm-rtl8139-check-TCP-Data-Offset-field-CVE-2015-5165.patch [bz#1248761]
- Resolves: bz#1248761
  (CVE-2015-5165 qemu-kvm: Qemu: rtl8139 uninitialized heap memory information leakage to guest [rhel-6.7.z])</changelog>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.479.el6_7.2" date="1443441600">- kvm-net-add-checks-to-validate-ring-buffer-pointers-CVE-.patch [bz#1263274]
- Resolves: bz#1263274
  (CVE-2015-5279 qemu-kvm: qemu: Heap overflow vulnerability in ne2000_receive() function [rhel-6.7.z])</changelog>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.479.el6_7.3" date="1450267200">- kvm-net-pcnet-add-check-to-validate-receive-data-size-CV.patch [bz#1287950]
- kvm-pcnet-fix-rx-buffer-overflow-CVE-2015-7512.patch [bz#1287950]
- Resolves: bz#1287950
  (CVE-2015-7504 CVE-2015-7512 qemu-kvm: various flaws [rhel-6.7.z])</changelog>
</package>
<package pkgid="b45dab44c957534793b0f47a21c61ed45916c7565b49585e044ab39967853a8f" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.479.el6_7.4"/>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.479.el6_7.2" date="1443441600">- kvm-net-add-checks-to-validate-ring-buffer-pointers-CVE-.patch [bz#1263274]
- Resolves: bz#1263274
  (CVE-2015-5279 qemu-kvm: qemu: Heap overflow vulnerability in ne2000_receive() function [rhel-6.7.z])</changelog>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.479.el6_7.3" date="1450267200">- kvm-net-pcnet-add-check-to-validate-receive-data-size-CV.patch [bz#1287950]
- kvm-pcnet-fix-rx-buffer-overflow-CVE-2015-7512.patch [bz#1287950]
- Resolves: bz#1287950
  (CVE-2015-7504 CVE-2015-7512 qemu-kvm: various flaws [rhel-6.7.z])</changelog>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.479.el6_7.4" date="1453723200">- kvm-fw_cfg-add-check-to-validate-current-entry-value-CVE.patch [bz#1298045]
- Resolves: bz#1298045
  (CVE-2016-1714 qemu-kvm: Qemu: nvram: OOB r/w access in processing firmware configurations [rhel-6.7.z])</changelog>
</package>
<package pkgid="6c6c7f949294f03caf00f1b07ec7e7609468b40efab94bcf56d448ecb7286660" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.491.el6_8.1"/>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.490.el6" date="1456747200">- kvm-qemu-ga-implement-win32-guest-set-user-password.patch [bz#1174181]
- kvm-util-add-base64-decoding-function.patch [bz#1174181]
- kvm-qga-convert-to-use-error-checked-base64-decode.patch [bz#1174181]
- kvm-qga-use-more-idiomatic-qemu-style-eol-operators.patch [bz#1174181]
- kvm-qga-use-size_t-for-wcslen-return-value.patch [bz#1174181]
- kvm-qga-use-wide-chars-constants-for-wchar_t-comparisons.patch [bz#1174181]
- kvm-qga-fix-off-by-one-length-check.patch [bz#1174181]
- kvm-qga-check-utf8-to-utf16-conversion.patch [bz#1174181]
- Resolves: bz#1174181
  (RFE: provide QEMU guest agent command for setting root account password (Linux guest))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.12.1.2-2.491.el6" date="1459339200">- Revert "warning when  CPU threads&gt;1 for non-Intel CPUs" fix</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.12.1.2-2.491.el6_8.1" date="1462276800">- kvm-Add-vga.h-unmodified-from-Linux.patch [bz#1331407]
- kvm-vga.h-remove-unused-stuff-and-reformat.patch [bz#1331407]
- kvm-vga-use-constants-from-vga.h.patch [bz#1331407]
- kvm-vga-Remove-some-should-be-done-in-BIOS-comments.patch [bz#1331407]
- kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch [bz#1331407]
- kvm-vga-add-vbe_enabled-helper.patch [bz#1331407]
- kvm-vga-factor-out-vga-register-setup.patch [bz#1331407]
- kvm-vga-update-vga-register-setup-on-vbe-changes.patch [bz#1331407]
- kvm-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch [bz#1331407]
- Resolves: bz#1331407
  (EMBARGOED CVE-2016-3710 qemu-kvm: qemu: incorrect banked access bounds checking in vga module [rhel-6.8.z])</changelog>
</package>
<package pkgid="2c6e04cccc18b909135553d07873cc45672e78b77fb580b6617fe0a39e3bcd8e" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.491.el6_8.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.12.1.2-2.491.el6_8.1" date="1462276800">- kvm-Add-vga.h-unmodified-from-Linux.patch [bz#1331407]
- kvm-vga.h-remove-unused-stuff-and-reformat.patch [bz#1331407]
- kvm-vga-use-constants-from-vga.h.patch [bz#1331407]
- kvm-vga-Remove-some-should-be-done-in-BIOS-comments.patch [bz#1331407]
- kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch [bz#1331407]
- kvm-vga-add-vbe_enabled-helper.patch [bz#1331407]
- kvm-vga-factor-out-vga-register-setup.patch [bz#1331407]
- kvm-vga-update-vga-register-setup-on-vbe-changes.patch [bz#1331407]
- kvm-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch [bz#1331407]
- Resolves: bz#1331407
  (EMBARGOED CVE-2016-3710 qemu-kvm: qemu: incorrect banked access bounds checking in vga module [rhel-6.8.z])</changelog>
  <changelog author="Jeff E. Nelson &lt;jen@redhat.com&gt; - 0.12.1.2-2.491.el6_8.2" date="1466596800">- kvm-vga-add-sr_vbe-register-set.patch [bz#1347192]
- Resolves: bz#1347192
  (Regression from CVE-2016-3712: windows installer fails to start)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.12.1.2-2.491.el6_8.3" date="1469620800">- kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359724]
- Resolves: bz#1359724
  (EMBARGOED CVE-2016-5403 qemu-kvm: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-6.8.z])</changelog>
</package>
<package pkgid="acc9fbc36068b516f27a8048d5d42f07643faa71220ca89d09933d8b8bb13c6f" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.491.el6_8.6"/>
  <changelog author="Yash Mankad &lt;ymankad@redhat.com&gt; - 0.12.1.2-2.491.el6.4" date="1483963200">- kvm-virtio-introduce-virtqueue_unmap_sg.patch [bz#1408389]
- kvm-virtio-introduce-virtqueue_discard.patch [bz#1408389]
- kvm-virtio-decrement-vq-inuse-in-virtqueue_discard.patch [bz#1408389]
- kvm-balloon-fix-segfault-and-harden-the-stats-queue.patch [bz#1408389]
- kvm-virtio-balloon-discard-virtqueue-element-on-reset.patch [bz#1408389]
- kvm-virtio-zero-vq-inuse-in-virtio_reset.patch [bz#1408389]
- Resolves: bz#1408389
  ([RHEL6.8.z] KVM guest shuts itself down after 128th reboot)</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.491.el6_8.5" date="1484654400">- kvm-net-check-packet-payload-length.patch [bz#1398213]
- Resolves: bz#1398213
  (CVE-2016-2857 qemu-kvm: Qemu: net: out of bounds read in net_checksum_calculate() [rhel-6.8.z])</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.491.el6_8.6" date="1486641600">- kvm-cirrus_vga-fix-division-by-0-for-color-expansion-rop.patch [bz#1418230 bz#1419416]
- kvm-cirrus_vga-fix-off-by-one-in-blit_region_is_unsafe.patch [bz#1418230 bz#1419416]
- kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch [bz#1418230 bz#1419416]
- kvm-display-cirrus-ignore-source-pitch-value-as-needed-i.patch [bz#1418230 bz#1419416]
- kvm-cirrus-handle-negative-pitch-in-cirrus_invalidate_re.patch [bz#1418230 bz#1419416]
- kvm-cirrus-allow-zero-source-pitch-in-pattern-fill-rops.patch [bz#1418230 bz#1419416]
- kvm-cirrus-fix-blit-address-mask-handling.patch [bz#1418230 bz#1419416]
- kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch [bz#1418230 bz#1419416]
- Resolves: bz#1418230
  (CVE-2017-2615 qemu-kvm: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.8.z])
- Resolves: bz#1419416
  (CVE-2017-2615 qemu-kvm-rhev: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.8.z])</changelog>
</package>
<package pkgid="9e730ddb638ffb509b2a2f9bf025896eb97367defe11643a3fe67004c9b29315" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.491.el6_8.7"/>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.491.el6_8.5" date="1484654400">- kvm-net-check-packet-payload-length.patch [bz#1398213]
- Resolves: bz#1398213
  (CVE-2016-2857 qemu-kvm: Qemu: net: out of bounds read in net_checksum_calculate() [rhel-6.8.z])</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.491.el6_8.6" date="1486641600">- kvm-cirrus_vga-fix-division-by-0-for-color-expansion-rop.patch [bz#1418230 bz#1419416]
- kvm-cirrus_vga-fix-off-by-one-in-blit_region_is_unsafe.patch [bz#1418230 bz#1419416]
- kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch [bz#1418230 bz#1419416]
- kvm-display-cirrus-ignore-source-pitch-value-as-needed-i.patch [bz#1418230 bz#1419416]
- kvm-cirrus-handle-negative-pitch-in-cirrus_invalidate_re.patch [bz#1418230 bz#1419416]
- kvm-cirrus-allow-zero-source-pitch-in-pattern-fill-rops.patch [bz#1418230 bz#1419416]
- kvm-cirrus-fix-blit-address-mask-handling.patch [bz#1418230 bz#1419416]
- kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch [bz#1418230 bz#1419416]
- Resolves: bz#1418230
  (CVE-2017-2615 qemu-kvm: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.8.z])
- Resolves: bz#1419416
  (CVE-2017-2615 qemu-kvm-rhev: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.8.z])</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.491.el6_8.7" date="1486987200">- kvm-cirrus-fix-patterncopy-checks.patch [bz#1420486 bz#1420488]
- kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1420486 bz#1420488]
- kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1420486 bz#1420488]
- Resolves: bz#1420486
  (EMBARGOED CVE-2017-2620 qemu-kvm: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.8.z])
- Resolves: bz#1420488
  (EMBARGOED CVE-2017-2620 qemu-kvm-rhev: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.8.z])</changelog>
</package>
<package pkgid="2f744c8b536667568001cb7e5b09f2c0c5d4d501a76614b4e1fa856740ba5ca1" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.503.el6"/>
  <changelog author="Yash Mankad &lt;ymankad@redhat.com&gt; - 0.12.1.2-2.501.el6" date="1484308800">- kvm-Revert-iotests-Use-_img_info.patch [bz#1405882]
- kvm-Revert-block-commit-speed-is-an-optional-parameter.patch [bz#1405882]
- kvm-Revert-iotests-Disable-086.patch [bz#1405882]
- kvm-Revert-iotests-Fix-049-s-reference-output.patch [bz#1405882]
- kvm-Revert-iotests-Fix-026-s-reference-output.patch [bz#1405882]
- kvm-Revert-qcow2-Support-exact-L1-table-growth.patch [bz#1405882]
- kvm-Revert-qcow2-Free-allocated-L2-cluster-on-error.patch [bz#1405882]
- kvm-net-check-packet-payload-length.patch [bz#1398214]
- Resolves: bz#1398214
  (CVE-2016-2857 qemu-kvm: Qemu: net: out of bounds read in net_checksum_calculate() [rhel-6.9])
- Reverts: bz#1405882
  (test cases 026 030 049 086 and 095 of qemu-iotests fail for qcow2 with qemu-kvm-rhev-0.12.1.2-2.498.el6)</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.502.el6" date="1486728000">- kvm-cirrus_vga-fix-division-by-0-for-color-expansion-rop.patch [bz#1418231 bz#1419417]
- kvm-cirrus_vga-fix-off-by-one-in-blit_region_is_unsafe.patch [bz#1418231 bz#1419417]
- kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch [bz#1418231 bz#1419417]
- kvm-display-cirrus-ignore-source-pitch-value-as-needed-i.patch [bz#1418231 bz#1419417]
- kvm-cirrus-handle-negative-pitch-in-cirrus_invalidate_re.patch [bz#1418231 bz#1419417]
- kvm-cirrus-allow-zero-source-pitch-in-pattern-fill-rops.patch [bz#1418231 bz#1419417]
- kvm-cirrus-fix-blit-address-mask-handling.patch [bz#1418231 bz#1419417]
- kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch [bz#1418231 bz#1419417]
- Resolves: bz#1418231
  (CVE-2017-2615 qemu-kvm: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.9])
- Resolves: bz#1419417
  (CVE-2017-2615 qemu-kvm-rhev: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-6.9])</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.503.el6" date="1486987200">- kvm-cirrus-fix-patterncopy-checks.patch [bz#1420487 bz#1420489]
- kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1420487 bz#1420489]
- kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1420487 bz#1420489]
- Resolves: bz#1420487
  (EMBARGOED CVE-2017-2620 qemu-kvm: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.9])
- Resolves: bz#1420489
  (EMBARGOED CVE-2017-2620 qemu-kvm-rhev: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-6.9])</changelog>
</package>
<package pkgid="dbe6f0b10e1c1a64cc5495c31598db49adf5f480627d3918af3516bf40bc25f6" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.503.el6_9.3"/>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.503.el6_9.1" date="1490616000">- kvm-vns-tls-don-t-use-depricated-gnutls-functions.patch [bz#1428750]
- kvm-vnc-apply-display-size-limits.patch [bz#1400438 bz#1425943]
- Resolves: bz#1400438
  (qemu-kvm coredump in vnc_refresh_server_surface [rhel-6.9.z])
- Resolves: bz#1425943
  (CVE-2017-2633 qemu-kvm-rhev: Qemu: VNC: memory corruption due to unchecked resolution limit [rhel-6.9.z])
- Resolves: bz#1428750
  (Fails to build in brew)</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.503.el6_9.2" date="1493294400">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1443447 bz#1443449]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1443447 bz#1443449]
- Resolves: bz#1443447
  (CVE-2017-7718 qemu-kvm: Qemu: display: cirrus: OOB read access issue [rhel-6.9.z])
- Resolves: bz#1443449
  (CVE-2017-7718 qemu-kvm-rhev: Qemu: display: cirrus: OOB read access issue [rhel-6.9.z])
- Resolves: bz#1447544
  (CVE-2016-9603 qemu-kvm-rhev: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.9.z] )
- Resolves: bz#1447540
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.9.z])</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.503.el6_9.3" date="1493985600">- kvm-cirrus-avoid-write-only-variables.patch [bz#1444377 bz#1444379]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1444377 bz#1444379]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1444377 bz#1444379]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1444377 bz#1444379]
- kvm-cirrus-fix-PUTPIXEL-macro.patch [bz#1444377 bz#1444379]
- Resolves: bz#1444377
  (CVE-2017-7980 qemu-kvm: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.9.z])
- Resolves: bz#1444379
  (CVE-2017-7980 qemu-kvm-rhev: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.9.z])</changelog>
</package>
<package pkgid="b5752f2118969b6e0a7ec8d9ce50c734b8540c9016035ba0249d9297e8d451ff" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.503.el6_9.4"/>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.503.el6_9.2" date="1493294400">- kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1443447 bz#1443449]
- kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1443447 bz#1443449]
- Resolves: bz#1443447
  (CVE-2017-7718 qemu-kvm: Qemu: display: cirrus: OOB read access issue [rhel-6.9.z])
- Resolves: bz#1443449
  (CVE-2017-7718 qemu-kvm-rhev: Qemu: display: cirrus: OOB read access issue [rhel-6.9.z])
- Resolves: bz#1447544
  (CVE-2016-9603 qemu-kvm-rhev: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.9.z] )
- Resolves: bz#1447540
  (CVE-2016-9603 qemu-kvm: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-6.9.z])</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.503.el6_9.3" date="1493985600">- kvm-cirrus-avoid-write-only-variables.patch [bz#1444377 bz#1444379]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1444377 bz#1444379]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1444377 bz#1444379]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1444377 bz#1444379]
- kvm-cirrus-fix-PUTPIXEL-macro.patch [bz#1444377 bz#1444379]
- Resolves: bz#1444377
  (CVE-2017-7980 qemu-kvm: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.9.z])
- Resolves: bz#1444379
  (CVE-2017-7980 qemu-kvm-rhev: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.9.z])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.503.el6_9.4" date="1513252800">- Fix CVE-2017-5715</changelog>
</package>
<package pkgid="20bdddfd1aff77ca536a9ef0e76a9c485d9b794f4677097996481a47d3be1581" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.503.el6_9.5"/>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.503.el6_9.3" date="1493985600">- kvm-cirrus-avoid-write-only-variables.patch [bz#1444377 bz#1444379]
- kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1444377 bz#1444379]
- kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1444377 bz#1444379]
- kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1444377 bz#1444379]
- kvm-cirrus-fix-PUTPIXEL-macro.patch [bz#1444377 bz#1444379]
- Resolves: bz#1444377
  (CVE-2017-7980 qemu-kvm: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.9.z])
- Resolves: bz#1444379
  (CVE-2017-7980 qemu-kvm-rhev: Qemu: display: cirrus: OOB r/w access issues in bitblt routines [rhel-6.9.z])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.503.el6_9.4" date="1513252800">- Fix CVE-2017-5715</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.503.el6_9.5" date="1518782400">- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501296]
- Resolves: bz#1501296
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-6.9.z])</changelog>
</package>
<package pkgid="9bb92ac1c368d7c2836d07f9e8c6718942e7fcd4886d23b3eb9cc72c90607290" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.503.el6_9.6"/>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.503.el6_9.4" date="1513252800">- Fix CVE-2017-5715</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.503.el6_9.5" date="1518782400">- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501296]
- Resolves: bz#1501296
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-6.9.z])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.503.el6_9.6" date="1526040000">- qemu-kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574067]
- Resolves: bz#1574067
  (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-6.9.z])</changelog>
</package>
<package pkgid="7964eb4bc31a5a964a0865ace3f55d057945ca7432838fbf5302781b5504e147" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.506.el6_10.1"/>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.505.el6" date="1519646400">- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [bz#1525939 bz#1528024]
- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [bz#1525939 bz#1528024]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [bz#1525939 bz#1528024]
- kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501298]
- kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1486641]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534692]
- Resolves: bz#1486641
  (CVE-2017-13672 qemu-kvm-rhev: Qemu: vga: OOB read access during display update [rhel-6.10])
- Resolves: bz#1501298
  (CVE-2017-15289 qemu-kvm: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-6.10])
- Resolves: bz#1525939
  (CVE-2017-5715 qemu-kvm: hw: cpu: speculative execution branch target injection [rhel-6.10])
- Resolves: bz#1528024
  (CVE-2017-5715 qemu-kvm-rhev: hw: cpu: speculative execution branch target injection [rhel-6.10])
- Resolves: bz#1534692
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-6.10])
- Resolves: bz#1549152
  (qemu-kvm-rhev: remove unused patch file [rhel-6.10])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6" date="1526299200">- kvm-vga-add-share_surface-flag.patch [bz#1553674]
- kvm-vga-add-sanity-checks.patch [bz#1553674]
- Resolves: bz#1553674
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-6])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.1" date="1529582400">- qemu-kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574074]
- qemu-kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1574074]
- qemu-kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1574074]
- Resolves: bz#1574074
  (CVE-2018-3639 qemu-kvm: hw: cpu: speculative store bypass [rhel-6.10.z])</changelog>
</package>
<package pkgid="57c128bd1b79e07752fbc5f94bbdfb5e0dc713c867abc2831569e0cf5e838aa6" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.506.el6_10.3"/>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6" date="1526299200">- kvm-vga-add-share_surface-flag.patch [bz#1553674]
- kvm-vga-add-sanity-checks.patch [bz#1553674]
- Resolves: bz#1553674
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-6])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.1" date="1529582400">- qemu-kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574074]
- qemu-kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1574074]
- qemu-kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1574074]
- Resolves: bz#1574074
  (CVE-2018-3639 qemu-kvm: hw: cpu: speculative store bypass [rhel-6.10.z])</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.506.el6_10.3" date="1557489600">- kvm-target-i386-define-md-clear-bit.patch [bz#1698996]
- Resolves: bz#1698996
  (CVE-2018-12130 qemu-kvm: hardware: MFBDS)</changelog>
</package>
<package pkgid="844de9309808e3fd28aee7df13f2ffe027fec6bd6fdf832db62224d9382ab036" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.506.el6_10.4"/>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.1" date="1529582400">- qemu-kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574074]
- qemu-kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1574074]
- qemu-kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1574074]
- Resolves: bz#1574074
  (CVE-2018-3639 qemu-kvm: hw: cpu: speculative store bypass [rhel-6.10.z])</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.506.el6_10.3" date="1557489600">- kvm-target-i386-define-md-clear-bit.patch [bz#1698996]
- Resolves: bz#1698996
  (CVE-2018-12130 qemu-kvm: hardware: MFBDS)</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.4" date="1560859200">- kvm-target-i386-Sanitize-the-XSAVE-related-feature-bits.patch [bz#1673779]
- kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1689790]
- Resolves: bz#1673779
  (RHEL8 VM's do not install on RHEL6 KVM hypervisor)
- Resolves: bz#1689790
  (CVE-2019-9824 qemu-kvm: QEMU: Slirp: information leakage in tcp_emu() due to uninitialized stack variables [rhel-6])</changelog>
</package>
<package pkgid="f38b921cc09b9e2e8e64fbfddbd88dc631b6248e0715e338d984de571be1f8b8" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.506.el6_10.5"/>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.506.el6_10.3" date="1557489600">- kvm-target-i386-define-md-clear-bit.patch [bz#1698996]
- Resolves: bz#1698996
  (CVE-2018-12130 qemu-kvm: hardware: MFBDS)</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.4" date="1560859200">- kvm-target-i386-Sanitize-the-XSAVE-related-feature-bits.patch [bz#1673779]
- kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1689790]
- Resolves: bz#1673779
  (RHEL8 VM's do not install on RHEL6 KVM hypervisor)
- Resolves: bz#1689790
  (CVE-2019-9824 qemu-kvm: QEMU: Slirp: information leakage in tcp_emu() due to uninitialized stack variables [rhel-6])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.5" date="1568030400">- kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669066]
- kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669066]
- kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669066]
- kvm-qxl-check-release-info-object.patch [bz#1712728]
- kvm-net-Use-iov-helper-functions.patch [bz#1636415]
- kvm-net-increase-buffer-size-to-accommodate-Jumbo-frame-.patch [bz#1636415]
- kvm-net-ignore-packet-size-greater-than-INT_MAX.patch [bz#1636415]
- kvm-net-drop-too-large-packet-early.patch [bz#1636415]
- kvm-PATCH-slirp-fix-buffer-overrun.patch [bz#1586251]
- kvm-Fix-build-from-previous-commit.patch [bz#1586251]
- kvm-slirp-remove-mbuf-m_hdr-m_dat-indirection.patch [bz#1586251]
- kvm-slirp-Convert-mbufs-to-use-g_malloc-and-g_free.patch [bz#1586251]
- kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586251]
- kvm-pcnet-fix-possible-buffer-overflow.patch [bz#1636774]
- Resolves: bz#1586251
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-6.10.z])
- Resolves: bz#1636415
  (CVE-2018-10839 qemu-kvm: Qemu: ne2000: integer overflow leads to buffer overflow issue [rhel-6])
- Resolves: bz#1636774
  (CVE-2018-17962 qemu-kvm: Qemu: pcnet: integer overflow leads to buffer overflow [rhel-6])
- Resolves: bz#1669066
  (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-6.10.z])
- Resolves: bz#1712728
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-6])</changelog>
</package>
<package pkgid="24f9e154a7b992a61e9d8054c08c1eaea48a23516d1e9a7f01d6378dba6a43c5" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.506.el6_10.6"/>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.4" date="1560859200">- kvm-target-i386-Sanitize-the-XSAVE-related-feature-bits.patch [bz#1673779]
- kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1689790]
- Resolves: bz#1673779
  (RHEL8 VM's do not install on RHEL6 KVM hypervisor)
- Resolves: bz#1689790
  (CVE-2019-9824 qemu-kvm: QEMU: Slirp: information leakage in tcp_emu() due to uninitialized stack variables [rhel-6])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.5" date="1568030400">- kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669066]
- kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669066]
- kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669066]
- kvm-qxl-check-release-info-object.patch [bz#1712728]
- kvm-net-Use-iov-helper-functions.patch [bz#1636415]
- kvm-net-increase-buffer-size-to-accommodate-Jumbo-frame-.patch [bz#1636415]
- kvm-net-ignore-packet-size-greater-than-INT_MAX.patch [bz#1636415]
- kvm-net-drop-too-large-packet-early.patch [bz#1636415]
- kvm-PATCH-slirp-fix-buffer-overrun.patch [bz#1586251]
- kvm-Fix-build-from-previous-commit.patch [bz#1586251]
- kvm-slirp-remove-mbuf-m_hdr-m_dat-indirection.patch [bz#1586251]
- kvm-slirp-Convert-mbufs-to-use-g_malloc-and-g_free.patch [bz#1586251]
- kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586251]
- kvm-pcnet-fix-possible-buffer-overflow.patch [bz#1636774]
- Resolves: bz#1586251
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-6.10.z])
- Resolves: bz#1636415
  (CVE-2018-10839 qemu-kvm: Qemu: ne2000: integer overflow leads to buffer overflow issue [rhel-6])
- Resolves: bz#1636774
  (CVE-2018-17962 qemu-kvm: Qemu: pcnet: integer overflow leads to buffer overflow [rhel-6])
- Resolves: bz#1669066
  (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-6.10.z])
- Resolves: bz#1712728
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-6])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.6" date="1581336000">- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734747]
- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749731]
- kvm-tcp_emu-Fix-oob-access.patch [bz#1791558]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791558]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791558]
- Resolves: bz#1734747
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-6.10.z])
- Resolves: bz#1749731
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-6])
- Resolves: bz#1791558
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-6.10.z])</changelog>
</package>
<package pkgid="2c8d289e255beae0113cb13787b128b1b083189c718b369d269c0fc696074b02" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.506.el6_10.7"/>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.5" date="1568030400">- kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669066]
- kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669066]
- kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669066]
- kvm-qxl-check-release-info-object.patch [bz#1712728]
- kvm-net-Use-iov-helper-functions.patch [bz#1636415]
- kvm-net-increase-buffer-size-to-accommodate-Jumbo-frame-.patch [bz#1636415]
- kvm-net-ignore-packet-size-greater-than-INT_MAX.patch [bz#1636415]
- kvm-net-drop-too-large-packet-early.patch [bz#1636415]
- kvm-PATCH-slirp-fix-buffer-overrun.patch [bz#1586251]
- kvm-Fix-build-from-previous-commit.patch [bz#1586251]
- kvm-slirp-remove-mbuf-m_hdr-m_dat-indirection.patch [bz#1586251]
- kvm-slirp-Convert-mbufs-to-use-g_malloc-and-g_free.patch [bz#1586251]
- kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586251]
- kvm-pcnet-fix-possible-buffer-overflow.patch [bz#1636774]
- Resolves: bz#1586251
  (CVE-2018-11806 qemu-kvm: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-6.10.z])
- Resolves: bz#1636415
  (CVE-2018-10839 qemu-kvm: Qemu: ne2000: integer overflow leads to buffer overflow issue [rhel-6])
- Resolves: bz#1636774
  (CVE-2018-17962 qemu-kvm: Qemu: pcnet: integer overflow leads to buffer overflow [rhel-6])
- Resolves: bz#1669066
  (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-6.10.z])
- Resolves: bz#1712728
  (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-6])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.6" date="1581336000">- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734747]
- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749731]
- kvm-tcp_emu-Fix-oob-access.patch [bz#1791558]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791558]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791558]
- Resolves: bz#1734747
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-6.10.z])
- Resolves: bz#1749731
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-6])
- Resolves: bz#1791558
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-6.10.z])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.7" date="1585137600">- kvm-slirp-disable-tcp_emu.patch [bz#1791680]
- kvm-slirp-add-slirp_fmt-helpers.patch [bz#1798966]
- kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798966]
- Resolves: bz#1791680
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-6])
- Resolves: bz#1798966
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-6.10.z])</changelog>
</package>
<package pkgid="cc2bed3761dddc19d959d87792bdffb2ec2b2aaa4a62050cafa6a8741bc5534b" name="qemu-guest-agent" arch="i686">
  <version epoch="2" ver="0.12.1.2" rel="2.506.el6_10.8"/>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.6" date="1581336000">- kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734747]
- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749731]
- kvm-tcp_emu-Fix-oob-access.patch [bz#1791558]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791558]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791558]
- Resolves: bz#1734747
  (CVE-2019-14378 qemu-kvm: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-6.10.z])
- Resolves: bz#1749731
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-6])
- Resolves: bz#1791558
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-6.10.z])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 0.12.1.2-2.506.el6_10.7" date="1585137600">- kvm-slirp-disable-tcp_emu.patch [bz#1791680]
- kvm-slirp-add-slirp_fmt-helpers.patch [bz#1798966]
- kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798966]
- Resolves: bz#1791680
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-6])
- Resolves: bz#1798966
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-6.10.z])</changelog>
  <changelog author="Danilo Cesar Lemes de Paula &lt;ddepaula@redhat.com&gt; - 0.12.1.2-2.506.el6_10.8" date="1599739200">- kvm-qemu-kvm-QEMU-usb-check-RNDIS-message-length.patch [bz#1869684]
- kvm-qemu-kvm-QEMU-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869684]
- Resolves: bz#1869684
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-6.10.z])</changelog>
</package>
<package pkgid="0a521b41c957aa47565dabd92e9357314aac6367b870f6ab126b2ec03d33a8c4" name="quagga" arch="i686">
  <version epoch="0" ver="0.99.15" rel="14.el6"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.15-12" date="1478779200">- fix start() function in watchqugga initscript (#862826, #1208617)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.15-13" date="1478865600">- fix path of ripd pid file (#842308)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 0.99.15-14" date="1485864000">- Resolves: #1416013 - CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory</changelog>
</package>
<package pkgid="a55c4d701a5e6116c3527c47c36fd607deeee70946929875d6d01a3219aa5ae6" name="quagga-contrib" arch="i686">
  <version epoch="0" ver="0.99.15" rel="14.el6"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.15-12" date="1478779200">- fix start() function in watchqugga initscript (#862826, #1208617)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.15-13" date="1478865600">- fix path of ripd pid file (#842308)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 0.99.15-14" date="1485864000">- Resolves: #1416013 - CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory</changelog>
</package>
<package pkgid="a701c3d18347bfc83ddad14e2bebe8851e487940d7ed01dd29876209fa3b2b65" name="quagga-devel" arch="i686">
  <version epoch="0" ver="0.99.15" rel="14.el6"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.15-12" date="1478779200">- fix start() function in watchqugga initscript (#862826, #1208617)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.99.15-13" date="1478865600">- fix path of ripd pid file (#842308)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 0.99.15-14" date="1485864000">- Resolves: #1416013 - CVE-2017-5495 quagga: Telnet interface input buffer allocates unbounded amounts of memory</changelog>
</package>
<package pkgid="0631dfb3061c71e25a34d8e706fc4aa2a56ead9f397825ad47479a33ffcb6912" name="rpcbind" arch="i686">
  <version epoch="0" ver="0.2.0" rel="11.el6_7"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-10" date="1345464000">- Make is_loopback check more permissive (bz 731542)
- Removed the rpcbind(3) reference in the man page (bz 813898)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-11" date="1350993600">- Stop rpcbind from "swallowing" broadcast RPC replies (bz 864056)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-11.el6_7" date="1448884800">- Fix memory corruption in PMAP_CALLIT code (bz 1283638)</changelog>
</package>
<package pkgid="070d683de09ff14e54b39a9bf7e3c3ec960e86ef4fdc4535c6531d2ef69f9a18" name="rpcbind" arch="i686">
  <version epoch="0" ver="0.2.0" rel="13.el6_9.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-13" date="1467028800">- Soft static allocate rpc uid/gid (bz 1300533)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-13_9" date="1495108800">- Fix for CVE-2017-8779 (bz 1449461)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-13_9.1" date="1496145600">- Stop freeing static memory (bz 1458240)</changelog>
</package>
<package pkgid="70e6b9b92e071be36508fe9d6b12786659dfaeb6e5a9f424d65ea93fb7331345" name="rpcbind" arch="i686">
  <version epoch="0" ver="0.2.0" rel="13.el6_9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-12" date="1447416000">- Fix memory corruption in PMAP_CALLIT code (bz 1186933)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-13" date="1467028800">- Soft static allocate rpc uid/gid (bz 1300533)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-13_9" date="1495108800">- Fix for CVE-2017-8779 (bz 1449461)</changelog>
</package>
<package pkgid="9e1a4a704ac6602fc9230f4a7f6abd42d87ed8c8c90ee524e1856b14aeae2b7b" name="samba" arch="i686">
  <version epoch="0" ver="3.6.23" rel="24.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-21" date="1442577600">- resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
- resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
</package>
<package pkgid="b973735a8f9f358f8d2c3c2b1d04fa92dd5274af46603618d7aa299ad9c1f389" name="samba" arch="i686">
  <version epoch="0" ver="3.6.23" rel="25.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-25" date="1457352000">- resolves: #1314668 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="4df69b702f2c8ba215339fff4e1fd5217a7c57cfc9cef562e82fd59a0eeb9c4b" name="samba" arch="i686">
  <version epoch="0" ver="3.6.23" rel="30.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-28" date="1460376000">- related: #1322686 - Update manpages</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-29" date="1460462400">- related: #1322686 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-30" date="1460462401">- related: #1322686 - Update manpages</changelog>
</package>
<package pkgid="23ba28ab4a0ec52f5c3dd8ab8c4359a2213dae91291b59e4e98dab4764b126d9" name="samba" arch="i686">
  <version epoch="0" ver="3.6.23" rel="41.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
</package>
<package pkgid="030f60620d9cfffa7f67aaad4b10656e36e7e80c46c03225754293116f5c71ad" name="samba" arch="i686">
  <version epoch="0" ver="3.6.23" rel="43.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
</package>
<package pkgid="0f55a6b2db254448466cd080f7b848382fe141f81b2081db2f827ea235aa5603" name="samba" arch="i686">
  <version epoch="0" ver="3.6.23" rel="45.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="ea8654bd0ce8f574a8feebe8bd87d15e12acc8cdf83be27a754eee1ff2a78e0c" name="samba" arch="i686">
  <version epoch="0" ver="3.6.23" rel="51.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-49" date="1516708800">- resolves: #1536053 - Fix regression with non-wide symlinks to directories</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-50" date="1521028800">- resolves: #1553018 - Fix CVE-2018-1050</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-51" date="1522152000">- resolves: #1513877 - Fix memory leak in winbind</changelog>
</package>
<package pkgid="ec397f83af81e62f9ce6802b6eeb3c9e45c901c57294b00327a47d1e0e4cbce7" name="samba-client" arch="i686">
  <version epoch="0" ver="3.6.23" rel="24.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-21" date="1442577600">- resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
- resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
</package>
<package pkgid="88fc84ccd9228db497cbb722cb14eb99c0b2d255ab3349443f81c239cf7fabae" name="samba-client" arch="i686">
  <version epoch="0" ver="3.6.23" rel="25.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-25" date="1457352000">- resolves: #1314668 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="1ac68e0fba505ce71f5320965662f4a0b7d78b7a492d12afdea0e34b5c7ab7d5" name="samba-client" arch="i686">
  <version epoch="0" ver="3.6.23" rel="30.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-28" date="1460376000">- related: #1322686 - Update manpages</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-29" date="1460462400">- related: #1322686 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-30" date="1460462401">- related: #1322686 - Update manpages</changelog>
</package>
<package pkgid="640519fdaf6ca4311e0ba563ceff2f5b74285ed3b2c553e974446079177ded46" name="samba-client" arch="i686">
  <version epoch="0" ver="3.6.23" rel="41.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
</package>
<package pkgid="5f1c7b3309eb348ec162beebd081ee2d9a324e48359bd43dffd1bc0ca795afa2" name="samba-client" arch="i686">
  <version epoch="0" ver="3.6.23" rel="43.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
</package>
<package pkgid="4a22a89ef6d238e2ff32cfc2e34935a60c2f0ed18721bb5b2c5fbaa8010e399a" name="samba-client" arch="i686">
  <version epoch="0" ver="3.6.23" rel="45.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="b99c6ed4536833654ce55343d751356be19d9e36f5276eae2d787e8b77cd9eb1" name="samba-client" arch="i686">
  <version epoch="0" ver="3.6.23" rel="51.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-49" date="1516708800">- resolves: #1536053 - Fix regression with non-wide symlinks to directories</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-50" date="1521028800">- resolves: #1553018 - Fix CVE-2018-1050</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-51" date="1522152000">- resolves: #1513877 - Fix memory leak in winbind</changelog>
</package>
<package pkgid="38a23f85bfb5523f0713cb5a1c4bb3f2e228440b2c77e7c467c64db1913830e2" name="samba-common" arch="i686">
  <version epoch="0" ver="3.6.23" rel="24.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-21" date="1442577600">- resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
- resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
</package>
<package pkgid="f4053298ea66c3d2f36c86d95d3f06c855ff5fe9d6aa0b76eb8b28cd36fbc6dc" name="samba-common" arch="i686">
  <version epoch="0" ver="3.6.23" rel="25.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-25" date="1457352000">- resolves: #1314668 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="cbce38f57e98d41d502583daddba671949dd48955125589f03b4d11bc1e09fbd" name="samba-common" arch="i686">
  <version epoch="0" ver="3.6.23" rel="30.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-28" date="1460376000">- related: #1322686 - Update manpages</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-29" date="1460462400">- related: #1322686 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-30" date="1460462401">- related: #1322686 - Update manpages</changelog>
</package>
<package pkgid="b449d5c1a6a393e880e39c5634aad6690ecdaa567c864203c3f5a7d974ababa7" name="samba-common" arch="i686">
  <version epoch="0" ver="3.6.23" rel="41.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
</package>
<package pkgid="90aa765cb2dace8f239e9c44f1bab699480c37fcf63e55075c41687d8a8b4ccf" name="samba-common" arch="i686">
  <version epoch="0" ver="3.6.23" rel="43.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
</package>
<package pkgid="7246b1ba5729bc259b17e6a40cf5341ff442ab140bfa0944caa209fa77ef09a6" name="samba-common" arch="i686">
  <version epoch="0" ver="3.6.23" rel="45.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="d69ce3ed23a672d751699e73b4f6d41a0f062771a5622a5eee8bd989f7d20359" name="samba-common" arch="i686">
  <version epoch="0" ver="3.6.23" rel="51.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-49" date="1516708800">- resolves: #1536053 - Fix regression with non-wide symlinks to directories</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-50" date="1521028800">- resolves: #1553018 - Fix CVE-2018-1050</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-51" date="1522152000">- resolves: #1513877 - Fix memory leak in winbind</changelog>
</package>
<package pkgid="639067963f3fb377fdb61c95446abf9b179a7a7c5bc514f4816be2ba9a30ddd8" name="samba-doc" arch="i686">
  <version epoch="0" ver="3.6.23" rel="24.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-21" date="1442577600">- resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
- resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
</package>
<package pkgid="9cf895534b6e74d07e26d38ea47e008806a1bbc3e775e4ce76cc40d02449c05c" name="samba-doc" arch="i686">
  <version epoch="0" ver="3.6.23" rel="25.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-25" date="1457352000">- resolves: #1314668 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="494eb9bf37cad27d4e1a9c5b2617c9c96cd1c2390d7848c04c486c9defff40af" name="samba-doc" arch="i686">
  <version epoch="0" ver="3.6.23" rel="30.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-28" date="1460376000">- related: #1322686 - Update manpages</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-29" date="1460462400">- related: #1322686 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-30" date="1460462401">- related: #1322686 - Update manpages</changelog>
</package>
<package pkgid="487c39be2cc89854757c4d8e8cc44fb02203571ee610638bf8c392853c8dc63a" name="samba-doc" arch="i686">
  <version epoch="0" ver="3.6.23" rel="41.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
</package>
<package pkgid="799a44613aadd686dac2295234e740c26f536c5ea0af7a09c04cde91dbe78587" name="samba-doc" arch="i686">
  <version epoch="0" ver="3.6.23" rel="43.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
</package>
<package pkgid="f03a0861f9e57f4b218997f007df391d044d82fecb0f52a99fe96233bfad4469" name="samba-doc" arch="i686">
  <version epoch="0" ver="3.6.23" rel="45.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="144b9c35a095df88e9512782f886547f11b34be3806c3059c2d2705f38bedbc7" name="samba-doc" arch="i686">
  <version epoch="0" ver="3.6.23" rel="51.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-49" date="1516708800">- resolves: #1536053 - Fix regression with non-wide symlinks to directories</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-50" date="1521028800">- resolves: #1553018 - Fix CVE-2018-1050</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-51" date="1522152000">- resolves: #1513877 - Fix memory leak in winbind</changelog>
</package>
<package pkgid="87c8fb14cc12a2f5a03a2c27766ec2c2437c642ddad0afc4abc7ea1ec79ffece" name="samba-domainjoin-gui" arch="i686">
  <version epoch="0" ver="3.6.23" rel="24.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-21" date="1442577600">- resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
- resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
</package>
<package pkgid="11ad25d6b077b0dae834e11414cd966ddc59c00e05f6a4c9b329e3be4f8fc68e" name="samba-domainjoin-gui" arch="i686">
  <version epoch="0" ver="3.6.23" rel="25.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-25" date="1457352000">- resolves: #1314668 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="fdb30246e5cc455eb0f3dd68125f3086f43c2a974101db349ee0c5cbefc17ba1" name="samba-domainjoin-gui" arch="i686">
  <version epoch="0" ver="3.6.23" rel="30.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-28" date="1460376000">- related: #1322686 - Update manpages</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-29" date="1460462400">- related: #1322686 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-30" date="1460462401">- related: #1322686 - Update manpages</changelog>
</package>
<package pkgid="44afc054533ea3d34651ab07f9d48b6fc753ab2ee5833a25f1a29691368ba8a4" name="samba-domainjoin-gui" arch="i686">
  <version epoch="0" ver="3.6.23" rel="41.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
</package>
<package pkgid="35970965591e16829e0d70968acf8c375edc8e37f72fa9a17e18197940e7d4ee" name="samba-domainjoin-gui" arch="i686">
  <version epoch="0" ver="3.6.23" rel="43.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
</package>
<package pkgid="f837492c8088d888733568aceaf21dcce9a3cb6a101afaeae2dd33b70f93c3cb" name="samba-domainjoin-gui" arch="i686">
  <version epoch="0" ver="3.6.23" rel="45.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="89515fe65fee034431dacc71aa642c113ba33744d4a94173d0f4d30f0b336fd4" name="samba-domainjoin-gui" arch="i686">
  <version epoch="0" ver="3.6.23" rel="51.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-49" date="1516708800">- resolves: #1536053 - Fix regression with non-wide symlinks to directories</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-50" date="1521028800">- resolves: #1553018 - Fix CVE-2018-1050</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-51" date="1522152000">- resolves: #1513877 - Fix memory leak in winbind</changelog>
</package>
<package pkgid="77bca153824bacd372aefa26b00e2b16e2e509cf00cf9883655e1ace9c4a0161" name="samba-swat" arch="i686">
  <version epoch="0" ver="3.6.23" rel="24.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-21" date="1442577600">- resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
- resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
</package>
<package pkgid="525c89fc0a541fb28d133cf882a771c86782256defa4d5e5becc305c11809779" name="samba-swat" arch="i686">
  <version epoch="0" ver="3.6.23" rel="25.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-25" date="1457352000">- resolves: #1314668 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="67e9f038dcfb22dc27ecea8be50711476aa73fcc02a73f89a47109287a2f3f2a" name="samba-swat" arch="i686">
  <version epoch="0" ver="3.6.23" rel="30.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-28" date="1460376000">- related: #1322686 - Update manpages</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-29" date="1460462400">- related: #1322686 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-30" date="1460462401">- related: #1322686 - Update manpages</changelog>
</package>
<package pkgid="70a6a3787f85f0e846795bcbfa863adcec9c3b6c7e2042c90449c345d7795e60" name="samba-swat" arch="i686">
  <version epoch="0" ver="3.6.23" rel="41.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
</package>
<package pkgid="4bb61c3b8c5f8501a041c52b2f37f2903ca1655ac2cf50d2e2875d6fbfc8a84d" name="samba-swat" arch="i686">
  <version epoch="0" ver="3.6.23" rel="43.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
</package>
<package pkgid="04ead7acd140e04a79218b23401db3fc43d438832eeb1301be6806bec32a0fb2" name="samba-swat" arch="i686">
  <version epoch="0" ver="3.6.23" rel="45.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="86a2efb1930a333e909d399edef4958c937309c96c845178220e504c11159ba9" name="samba-swat" arch="i686">
  <version epoch="0" ver="3.6.23" rel="51.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-49" date="1516708800">- resolves: #1536053 - Fix regression with non-wide symlinks to directories</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-50" date="1521028800">- resolves: #1553018 - Fix CVE-2018-1050</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-51" date="1522152000">- resolves: #1513877 - Fix memory leak in winbind</changelog>
</package>
<package pkgid="b080d94672e9e34d5c7666042db60b6889301b2eeb6cc56d4886c46263e5c1b0" name="samba-winbind" arch="i686">
  <version epoch="0" ver="3.6.23" rel="24.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-21" date="1442577600">- resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
- resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
</package>
<package pkgid="298d6b8ed1ace122516b13762c64f8065baa998817708c8067d1e38665caab14" name="samba-winbind" arch="i686">
  <version epoch="0" ver="3.6.23" rel="25.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-25" date="1457352000">- resolves: #1314668 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="cff3d9aa81c6030df34c83fd6f283958662fb96df4d5a294b4d3f2ccc1822a32" name="samba-winbind" arch="i686">
  <version epoch="0" ver="3.6.23" rel="30.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-28" date="1460376000">- related: #1322686 - Update manpages</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-29" date="1460462400">- related: #1322686 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-30" date="1460462401">- related: #1322686 - Update manpages</changelog>
</package>
<package pkgid="6c16995e2c9043a36e1aee158c36fadc1d90ec46f094637eeb8d54d57f0f02b5" name="samba-winbind" arch="i686">
  <version epoch="0" ver="3.6.23" rel="41.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
</package>
<package pkgid="902dfd69d4ed34e7ce1ac6792185b3ec104b5a780af9879b2b03ca822599014b" name="samba-winbind" arch="i686">
  <version epoch="0" ver="3.6.23" rel="43.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
</package>
<package pkgid="aa2f1afd91ae79daa4d971a7a0ea091afe8d4d18be0ce381418fc2e203c69e80" name="samba-winbind" arch="i686">
  <version epoch="0" ver="3.6.23" rel="45.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="fdcb254527cceefc97990cadc9c0465a9034fb35bb553495829c78989401a9a1" name="samba-winbind" arch="i686">
  <version epoch="0" ver="3.6.23" rel="51.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-49" date="1516708800">- resolves: #1536053 - Fix regression with non-wide symlinks to directories</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-50" date="1521028800">- resolves: #1553018 - Fix CVE-2018-1050</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-51" date="1522152000">- resolves: #1513877 - Fix memory leak in winbind</changelog>
</package>
<package pkgid="888e3c520a86ea523fd2b927ca288b6b6d209d7800c9ebf6f81dca2c14167967" name="samba-winbind-clients" arch="i686">
  <version epoch="0" ver="3.6.23" rel="24.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-21" date="1442577600">- resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
- resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
</package>
<package pkgid="8d4142a5de060c32f3e0e3194e0a7819a9fe6fade7e45a342769048ed647e6fc" name="samba-winbind-clients" arch="i686">
  <version epoch="0" ver="3.6.23" rel="25.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-25" date="1457352000">- resolves: #1314668 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="c82f4d7ce431407409c57456d6aa1e63479d39ae8847de0ce93787267f31541c" name="samba-winbind-clients" arch="i686">
  <version epoch="0" ver="3.6.23" rel="30.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-28" date="1460376000">- related: #1322686 - Update manpages</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-29" date="1460462400">- related: #1322686 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-30" date="1460462401">- related: #1322686 - Update manpages</changelog>
</package>
<package pkgid="746097bac4bb6d4c1b8b2a310d4a47631cdaf29be1bf6c959dbd65c589d0e11c" name="samba-winbind-clients" arch="i686">
  <version epoch="0" ver="3.6.23" rel="41.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
</package>
<package pkgid="d6511ed0b340ebf232c3281794612d3a49aa910654be491cc3a1f78d5953be08" name="samba-winbind-clients" arch="i686">
  <version epoch="0" ver="3.6.23" rel="43.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
</package>
<package pkgid="3598f4b0b89b863899ad5b262022f60cdd811fe7dbb6c44400c1c8ef4362caf7" name="samba-winbind-clients" arch="i686">
  <version epoch="0" ver="3.6.23" rel="45.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="dfdb41aede3e4d11b49ccf2ab720152da659e2f3c4c077230466a4729decf721" name="samba-winbind-clients" arch="i686">
  <version epoch="0" ver="3.6.23" rel="51.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-49" date="1516708800">- resolves: #1536053 - Fix regression with non-wide symlinks to directories</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-50" date="1521028800">- resolves: #1553018 - Fix CVE-2018-1050</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-51" date="1522152000">- resolves: #1513877 - Fix memory leak in winbind</changelog>
</package>
<package pkgid="81e7c61a520764ec678168d4a9f04b382c23abbfaf79409f00f2047b57cf6940" name="samba-winbind-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="24.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-21" date="1442577600">- resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
- resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
</package>
<package pkgid="bdf95a1909537ee91992baa0fb13aef0a24b29f3af609f3e440890d3137a5253" name="samba-winbind-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="25.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-25" date="1457352000">- resolves: #1314668 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="bd454c4f0665b22ca96d25fffbb430723047b5bf9939b956c28f2bd4aa0849f9" name="samba-winbind-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="30.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-28" date="1460376000">- related: #1322686 - Update manpages</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-29" date="1460462400">- related: #1322686 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-30" date="1460462401">- related: #1322686 - Update manpages</changelog>
</package>
<package pkgid="d9fc9a47a5ba98b9b5622f85cb787b1c6c2cf9db7d8c798bfb5f61c01e311730" name="samba-winbind-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="41.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
</package>
<package pkgid="0c90057193778be53e1312e38c9dae2a58b52be4cd9431bd07c728e398d24901" name="samba-winbind-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="43.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
</package>
<package pkgid="dcbb0d8e0b1d6c3615aefd477c766189799bfe3739777c3b310c281d8c54d4ab" name="samba-winbind-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="45.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="e6bc473335acd0f7504939501ea8ee12219cc3114291da2dad44db70b03b663c" name="samba-winbind-devel" arch="i686">
  <version epoch="0" ver="3.6.23" rel="51.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-49" date="1516708800">- resolves: #1536053 - Fix regression with non-wide symlinks to directories</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-50" date="1521028800">- resolves: #1553018 - Fix CVE-2018-1050</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-51" date="1522152000">- resolves: #1513877 - Fix memory leak in winbind</changelog>
</package>
<package pkgid="0a5cf1b62f7d53219c52fc7888829b732291e10f408150514aee2f52eac957f2" name="samba-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="3.6.23" rel="24.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-21" date="1442577600">- resolves: #1252180 - Fix 'force group' with 'winbind use default domain'.
- resolves: #1250100 - Fix segfault in pam_winbind if option parsing fails</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
</package>
<package pkgid="c5e3e9d6383fc502ad0f53d0e32927386d4ab5bb706b2823e7cf15454a381597" name="samba-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="3.6.23" rel="25.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-22" date="1449835200">- resolves: #1290706 - CVE-2015-5299
- related: #1290706 - CVE-2015-5296
- related: #1290706 - CVE-2015-5252
- related: #1290706 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-24" date="1450180800">- related: #1290706 - Update patch for CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-25" date="1457352000">- resolves: #1314668 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="f94cb2710263862570ee876756a51bbd18906bbbfae17b50b9135a9f7f511a5d" name="samba-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="3.6.23" rel="30.el6_7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-28" date="1460376000">- related: #1322686 - Update manpages</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-29" date="1460462400">- related: #1322686 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-30" date="1460462401">- related: #1322686 - Update manpages</changelog>
</package>
<package pkgid="573e40e35a021c7dc2f04fe3d25362799bb8895c9326c646554cc43ff5103d0d" name="samba-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="3.6.23" rel="41.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
</package>
<package pkgid="9ef6e90fab6e0acfb66f675af09d6d592ae616afb3fe5cb037624aa0ccb5c141" name="samba-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="3.6.23" rel="43.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
</package>
<package pkgid="a0ca3180a494bfd3894fb1e5c05b94111548e1612c655ef92d5ae1f072534811" name="samba-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="3.6.23" rel="45.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="17a88a60356c8cc93f7317f651c5906a4226a0a7f28b9628209fcfe9afaf4e4f" name="samba-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="3.6.23" rel="51.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-49" date="1516708800">- resolves: #1536053 - Fix regression with non-wide symlinks to directories</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-50" date="1521028800">- resolves: #1553018 - Fix CVE-2018-1050</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-51" date="1522152000">- resolves: #1513877 - Fix memory leak in winbind</changelog>
</package>
<package pkgid="6908ffd0fd0045f8cc5a5eb5d5f34bc431c549912fbe410dfe0cdeaf7dcc289b" name="samba4" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="d6c665a0b05dce38022e759293e4cd465b83e0feee20deb1cf042cb7d3c747db" name="samba4" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="4377f5b38b8ee0ce57a0398b93817caf3c189de5496bf8bf66a4e83154c3702d" name="samba4" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="7dca37e56e76be867d36556e9f1685c27387843c4d4ae21043ddc15f601c9748" name="samba4" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="f7a7156987f43988bd9b8c6009e9ef2676de5ab28aa9ab111ce61388480eefa8" name="samba4" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="624a5c0c37038663930e52eb24cf51f2f7f1ad013280899a82937c864f9abfe8" name="samba4" arch="i686">
  <version epoch="0" ver="4.2.10" rel="15.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514313 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-14" date="1514894400">- resolves: #1492780 - Do not build with -Wl,-z,now on ppc64</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-15" date="1521028800">- resolves: #1552005 - Fix CVE-2018-1050</changelog>
</package>
<package pkgid="a66896b0a4e8deb48dc0e717c70f307c629c0c60f1ab0df7d8b375c8ddc6e790" name="samba4" arch="i686">
  <version epoch="0" ver="4.2.10" rel="6.el6_7"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322688</changelog>
</package>
<package pkgid="357e73be6a14905c7a0a00938d14c15f24448ed9fc17ecd0a0ab0bd47b95a6d1" name="samba4" arch="i686">
  <version epoch="0" ver="4.2.10" rel="7.el6_8"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351957 - Fix CVE-2016-2119</changelog>
</package>
<package pkgid="400484748fb46dab7402233f8e4ee20fe4c5c1f5a53f8be8b247662b1ca0ed33" name="samba4" arch="i686">
  <version epoch="0" ver="4.2.10" rel="9.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
</package>
<package pkgid="1f7286a1868aad462a0655870a291fa1edec7a36e90452e8de04adcfc41bc043" name="samba4-client" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="7f109282a89b3a8afe97c841add6f63fa20b72c805d1e0b826abdf4c03e55423" name="samba4-client" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="736535562d2104424b55a462b3bc7fd0405a0ee9031a67a30b99274485156a13" name="samba4-client" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="99c6eef0a9e81fae45080c36abada09a4e8c88787f51bc9112ab9e9fe59332cc" name="samba4-client" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="7d51901809263de4969d753bc2ab55eba639b2a1ff62942265c5810b93cb6bc1" name="samba4-client" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="73df029d8cada60ab50a55c578a926dd1ee3731c2e1494df02d0d4582df369af" name="samba4-client" arch="i686">
  <version epoch="0" ver="4.2.10" rel="15.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514313 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-14" date="1514894400">- resolves: #1492780 - Do not build with -Wl,-z,now on ppc64</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-15" date="1521028800">- resolves: #1552005 - Fix CVE-2018-1050</changelog>
</package>
<package pkgid="030284a71ae7785902201216c6ee40775508a47a6f304078f3c85e51f2d3aa52" name="samba4-client" arch="i686">
  <version epoch="0" ver="4.2.10" rel="6.el6_7"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322688</changelog>
</package>
<package pkgid="1441cba29f7c7a56b35610c1e93a265ae4b754695e3d6b4b86891ee4f24deac4" name="samba4-client" arch="i686">
  <version epoch="0" ver="4.2.10" rel="7.el6_8"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351957 - Fix CVE-2016-2119</changelog>
</package>
<package pkgid="54e2eda75a5ca6c05fa6b860f2ce7ea117d7bae05e2cf6c887cf727c13a7b659" name="samba4-client" arch="i686">
  <version epoch="0" ver="4.2.10" rel="9.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
</package>
<package pkgid="8f3f4d698574a59ce794c9c14c9a3013b39bd11963e83872b87b5b8a7c53c9aa" name="samba4-common" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="7df4395f686a0c7e87d0ad895616c03dbeff4e4256257443170dc1c18d960db7" name="samba4-common" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="f72de9dcdebf7f341c953114812c64f482140f24d0791a4ab612eee9141c6041" name="samba4-common" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="dcf7a8ca7d903ef975ef77ff27e3376b44a0fb1a0b8094dff3d0f6ff65c80a0f" name="samba4-common" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="e0761a78eea036b5722da561c902eb013869861487495bd04bc57eedaf1cfdeb" name="samba4-common" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="d1fa4072b11f4f568f59c3a43ad3eeba500a314bffede9a495e460f3b8a7bbea" name="samba4-common" arch="i686">
  <version epoch="0" ver="4.2.10" rel="15.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514313 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-14" date="1514894400">- resolves: #1492780 - Do not build with -Wl,-z,now on ppc64</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-15" date="1521028800">- resolves: #1552005 - Fix CVE-2018-1050</changelog>
</package>
<package pkgid="8572a556238388fa201a5c97ca3ddc3c03d12801c8c138d61c2cd1e918163f64" name="samba4-common" arch="i686">
  <version epoch="0" ver="4.2.10" rel="6.el6_7"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322688</changelog>
</package>
<package pkgid="9fe23b7818634e526664c651991eefdb117c6eb473e55c2f0b18a0f97ba06fa8" name="samba4-common" arch="i686">
  <version epoch="0" ver="4.2.10" rel="7.el6_8"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351957 - Fix CVE-2016-2119</changelog>
</package>
<package pkgid="1bd6789ac1255fdd06a7ffceca7e167b3f9360bc79edab93b54fd8b60a5d6d70" name="samba4-common" arch="i686">
  <version epoch="0" ver="4.2.10" rel="9.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
</package>
<package pkgid="5e542c50db9d8de690c3d58baf286bd4fe7a27d8a62c4292089d6eaa44684790" name="samba4-dc" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="5c347f321f8430f94f3dd1377446bcd9f5f9cc4aecb32d0a93f427bea97d247a" name="samba4-dc" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="25186df70658c9a4b3080ee0bd3ea5875ca35ab9c12791765a8e317e81363138" name="samba4-dc" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="520a1b7a9276ffdc0ece64d226d19d97bc7a2005c649cb2a1414217aa5530e8b" name="samba4-dc" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="906e2cbaf54f583d3f8699b0d18ebf4943891ce46ee65e4307df3200b122ba84" name="samba4-dc" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="b274f0773ba96eb1a9815093f3b7c911644a13f994afa3ed3483be3b99e75128" name="samba4-dc" arch="i686">
  <version epoch="0" ver="4.2.10" rel="15.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514313 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-14" date="1514894400">- resolves: #1492780 - Do not build with -Wl,-z,now on ppc64</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-15" date="1521028800">- resolves: #1552005 - Fix CVE-2018-1050</changelog>
</package>
<package pkgid="c4264ed93284e6e629ee5fb477b1d549b0fab4fb14e22d805b78d62e8ec8ed78" name="samba4-dc" arch="i686">
  <version epoch="0" ver="4.2.10" rel="6.el6_7"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322688</changelog>
</package>
<package pkgid="58f89013671392f9694d33aed833f771c95aab7eea7635716169bad34f8dc118" name="samba4-dc" arch="i686">
  <version epoch="0" ver="4.2.10" rel="7.el6_8"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351957 - Fix CVE-2016-2119</changelog>
</package>
<package pkgid="7c6fb61b2ef28a533a8ba6d34c06fcce6f2e650bdd8f18027c4c9cd9e9707997" name="samba4-dc" arch="i686">
  <version epoch="0" ver="4.2.10" rel="9.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
</package>
<package pkgid="c907576b8a0f887c185c5c236d4e3c965c79e99c4fbe2e572af0aa20c15d11a6" name="samba4-dc-libs" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="f739e744c0944cc4a2b53ae92c7a3f2082d231519f48b982e36607f1434201df" name="samba4-dc-libs" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="81e932f704735fe11d4cd17a84dbbe820851c94877d7ca2efa4d1918a5b57df6" name="samba4-dc-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="47544d853bda1a5d07a50c5dc23fc2d1885876873de354dde6a2c105f0d4b9ef" name="samba4-dc-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="ac35cc446098f2927f4b27509194df763b942f73cd69dad0e50b80eafc640789" name="samba4-dc-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="a58b90e133886d65d148ea48fd2e1f60de4b9b36c83b848861274eef7cad29de" name="samba4-dc-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="15.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514313 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-14" date="1514894400">- resolves: #1492780 - Do not build with -Wl,-z,now on ppc64</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-15" date="1521028800">- resolves: #1552005 - Fix CVE-2018-1050</changelog>
</package>
<package pkgid="0bfbaf1ba888e9b138ef5120dac972df14d3bd03f6b8d007233605bfdcb129a8" name="samba4-dc-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="6.el6_7"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322688</changelog>
</package>
<package pkgid="6e537b83c0df2055eb34561d60c3148336e90e070448b3d85aa50a0f4c273a7f" name="samba4-dc-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="7.el6_8"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351957 - Fix CVE-2016-2119</changelog>
</package>
<package pkgid="7fc8c7e7800dd565ee624011ce352e214eb9aca703eabac050b7bd70c3053752" name="samba4-dc-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="9.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
</package>
<package pkgid="198ed7af83c82352899df23461ed81df4163746d1f6eb89ee04ab995b6cf2e63" name="samba4-devel" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="6028d92f9d96e306d79c8829315cb3caccfd3f8ed651ecb4096a9d2bb3bfdb6d" name="samba4-devel" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="55f529511e95ec0a9f7887358ddff78f7ba458c5f042eba316f1e466af776622" name="samba4-devel" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="f464721f4dbd5beb629686ec6eb0a89edb4ce6571ad7cd7bd1c07a4cb84cd1fc" name="samba4-devel" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="f0fb00e5f6b9dbdc54216975b000d378cf1e75d98212e0790a03b915c8899c1e" name="samba4-devel" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="c53586437fd10c052ca45f3affe76266e6cedc218c8d769322184087de1fa8e5" name="samba4-devel" arch="i686">
  <version epoch="0" ver="4.2.10" rel="15.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514313 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-14" date="1514894400">- resolves: #1492780 - Do not build with -Wl,-z,now on ppc64</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-15" date="1521028800">- resolves: #1552005 - Fix CVE-2018-1050</changelog>
</package>
<package pkgid="915252dafc74e9088130272ddeff0b70386b39c68594c0a88819f50dcf868b6a" name="samba4-devel" arch="i686">
  <version epoch="0" ver="4.2.10" rel="6.el6_7"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322688</changelog>
</package>
<package pkgid="8f93f605c9d9c46e09c065f029cfcd24a5a97ceb198e15742bb16ab86227e257" name="samba4-devel" arch="i686">
  <version epoch="0" ver="4.2.10" rel="7.el6_8"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351957 - Fix CVE-2016-2119</changelog>
</package>
<package pkgid="da5544b83c1e1276544ed0d0962f6e586920e8afec67820a955b80324feea760" name="samba4-devel" arch="i686">
  <version epoch="0" ver="4.2.10" rel="9.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
</package>
<package pkgid="c9d69cdbeab7cd4198d28d0199f727f26f622d865861541720d4540c94327cd0" name="samba4-libs" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="a8e56be02c9359031c42fb848bdcca2b32ed75d1efd83dbb4e58c90eab2993b7" name="samba4-libs" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="b3e1b3dbb59837b5b576ae5286774e08dd18b93d160af26169b1f9f07380c5a8" name="samba4-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="a86ae50964615e5720d9d81d7501101d5ae011426d8cc6a42be3cd08b8b31d42" name="samba4-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="2526af8ea832eeec6c716025da9a2ae18c73d7c09e6ab3315676837486f372a7" name="samba4-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="81f50fd64506025092260bca0785cbf2557977bd2b446d0f5868fb6916a0c73b" name="samba4-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="15.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514313 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-14" date="1514894400">- resolves: #1492780 - Do not build with -Wl,-z,now on ppc64</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-15" date="1521028800">- resolves: #1552005 - Fix CVE-2018-1050</changelog>
</package>
<package pkgid="1e6f4d4952a0553b4a5282cffd20607340fc8c83ad73b92e9ae9af27b804d0be" name="samba4-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="6.el6_7"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322688</changelog>
</package>
<package pkgid="94d63d565ce8f0e5939b7a367822ff8cd541c0056eb7d591085761e2bc1e282f" name="samba4-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="7.el6_8"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351957 - Fix CVE-2016-2119</changelog>
</package>
<package pkgid="6bdf4bf3c5769b398982ed545ad310561be402548642f0a55a85dd4b08e7dc36" name="samba4-libs" arch="i686">
  <version epoch="0" ver="4.2.10" rel="9.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
</package>
<package pkgid="cd3eee7436285a6d43b92badbe473c8fcf94e9eb5ee330db8ede86a6f2c3c719" name="samba4-pidl" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="bb2a0150524e11808ae428420f82709f2c42a07606e553037cf3c4e8ebf53cb1" name="samba4-pidl" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="289a67f01af74975178be8aebcfff6ed84826282d1d35f1fed8b60950e4bd5d4" name="samba4-pidl" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="01eed4dbb199e8b5b85e2d99f8e2b8f0dc3228ccd9a8c311242a9270eeb465ae" name="samba4-pidl" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="90b3353e3d49890ed70976909ba6b105bba414ed1314d2d370b0e6fadd4de1c0" name="samba4-pidl" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="a78e311688ca714442488ee751f1c294fefd1c35aec4744136bfd6f03853137f" name="samba4-pidl" arch="i686">
  <version epoch="0" ver="4.2.10" rel="15.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514313 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-14" date="1514894400">- resolves: #1492780 - Do not build with -Wl,-z,now on ppc64</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-15" date="1521028800">- resolves: #1552005 - Fix CVE-2018-1050</changelog>
</package>
<package pkgid="6ebcd1fd5ce8930ee48bbb30f7451c1e72a4899a3e13626749ad2e1a661a039c" name="samba4-pidl" arch="i686">
  <version epoch="0" ver="4.2.10" rel="6.el6_7"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322688</changelog>
</package>
<package pkgid="c5645c55363ece55ad5f282b1acdc06668f19eb546fb3ed81a52be82b6058643" name="samba4-pidl" arch="i686">
  <version epoch="0" ver="4.2.10" rel="7.el6_8"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351957 - Fix CVE-2016-2119</changelog>
</package>
<package pkgid="ae3083d151282cdb4050b047659b14b32e485679a1efcf450ed02343b1f10703" name="samba4-pidl" arch="i686">
  <version epoch="0" ver="4.2.10" rel="9.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
</package>
<package pkgid="aa813ed75489eba90b0c4f595402fd570a9a7be7ce4e747d6eb72467c6bfbc06" name="samba4-python" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="1f2694d7b60243a447ae8fb52e0949bf47d23b2fe3685230d2dc5aa701127199" name="samba4-python" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="cf5c118683bd37173249e25f6308d57368d14270a079d1e616ac1da4c68b184e" name="samba4-python" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="e1aefeff220131130b3ddf77159d55166aad1b3cf3356b11718c07d1a73e9bcc" name="samba4-python" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="2cd6a76fab2374c662a71bf53f1e75d2ae16013c3660aec3e154b62dd209c22e" name="samba4-python" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="3184e47503ebfc8a81ab8b60e1b7cd370f4c6842a1e5553c882ede697102906e" name="samba4-python" arch="i686">
  <version epoch="0" ver="4.2.10" rel="15.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514313 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-14" date="1514894400">- resolves: #1492780 - Do not build with -Wl,-z,now on ppc64</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-15" date="1521028800">- resolves: #1552005 - Fix CVE-2018-1050</changelog>
</package>
<package pkgid="d8235a914e87eda62e9e69f7a4e612b7a66febe82088f0206a8d1ee427dc8e6b" name="samba4-python" arch="i686">
  <version epoch="0" ver="4.2.10" rel="6.el6_7"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322688</changelog>
</package>
<package pkgid="f090c27e0fb3053048ec8d32bde87ec85ccd99bf992d7bc8807719da256ea2e6" name="samba4-python" arch="i686">
  <version epoch="0" ver="4.2.10" rel="7.el6_8"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351957 - Fix CVE-2016-2119</changelog>
</package>
<package pkgid="dc3513277d1bf9fb82c084d5053d9c892f5abf5bb0af06c74c32929e8b45dc20" name="samba4-python" arch="i686">
  <version epoch="0" ver="4.2.10" rel="9.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
</package>
<package pkgid="6faed5d27bb9d7beafb46407a1e911d0ab0975a255a7004014a989614a922c00" name="samba4-swat" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="ef4bb23c246bf1f5cc7f42ff3d67955bfe505d07992ff42d792d9d9eb1eb5a60" name="samba4-swat" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="e809d16efa41b351bc4eb3233b36e4a0f63203568ad527d6714129678c15558e" name="samba4-test" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="693e7523b73324d8b67253c46b188bcda341be721ac6015dc23e77d4e753c499" name="samba4-test" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="547be4dbd9a88b14efc668f51cce4792a466f2d2b1deb6aa3945b134c79af9f5" name="samba4-test" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="700721f6c6536473239d3ce98aaec683de49342b22e589e28981050ae88bec51" name="samba4-test" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="5ba8098ebe1c760245f0011d48c0d7631f2ccd14757927519ed228059b026958" name="samba4-test" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="e6d92264185bfc73b483abd367b8343fd947a22692d52d03722bb144f196722f" name="samba4-test" arch="i686">
  <version epoch="0" ver="4.2.10" rel="15.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514313 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-14" date="1514894400">- resolves: #1492780 - Do not build with -Wl,-z,now on ppc64</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-15" date="1521028800">- resolves: #1552005 - Fix CVE-2018-1050</changelog>
</package>
<package pkgid="bf223469df379bb85acfe2282dfe1155367ea8727c242126c53527f056929d59" name="samba4-test" arch="i686">
  <version epoch="0" ver="4.2.10" rel="6.el6_7"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322688</changelog>
</package>
<package pkgid="47c5a22a122b850f4e6d8fc8a7b56422efd7415e1acd27b56c3dd59ea9ec81e3" name="samba4-test" arch="i686">
  <version epoch="0" ver="4.2.10" rel="7.el6_8"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351957 - Fix CVE-2016-2119</changelog>
</package>
<package pkgid="6487ddf1de421475b3394d1523e628487f0145f4678bef9b37805ed3be9287b2" name="samba4-test" arch="i686">
  <version epoch="0" ver="4.2.10" rel="9.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
</package>
<package pkgid="7b5b522b79cfab5c525d9322910496907c99280a5628cd3ece408028707ba8b0" name="samba4-winbind" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="3eebf74b9bd00bccecbdb30adb5a2e8671cf461a57d8c25222c727359bf84e87" name="samba4-winbind" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="94fa068a46a57bfaeed754d8e5d3091bf1dde189998ca1504d819cf536c6a96c" name="samba4-winbind" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="792f6b96c354501a6e3ec848c168e09dea5632c802f8b24d2226eff1b95174fa" name="samba4-winbind" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="1e79e159b915bbe2344bf8bc779edadcfc0364ffd579e67531203a79ae0ceb85" name="samba4-winbind" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="ddadbe3759556a8b187edf3b71009b0ac312abc96f07fe3e0182cdd589d325c7" name="samba4-winbind" arch="i686">
  <version epoch="0" ver="4.2.10" rel="15.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514313 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-14" date="1514894400">- resolves: #1492780 - Do not build with -Wl,-z,now on ppc64</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-15" date="1521028800">- resolves: #1552005 - Fix CVE-2018-1050</changelog>
</package>
<package pkgid="1d2eaf547949768afd1d362d0776fe102536af430951246f04235a5ca8f91072" name="samba4-winbind" arch="i686">
  <version epoch="0" ver="4.2.10" rel="6.el6_7"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322688</changelog>
</package>
<package pkgid="0d7dd864af2dab0976b7287bc7c901e934ad721f5cce068c2b14db63bd00ba3c" name="samba4-winbind" arch="i686">
  <version epoch="0" ver="4.2.10" rel="7.el6_8"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351957 - Fix CVE-2016-2119</changelog>
</package>
<package pkgid="4549e45c977f78de6090aaea73e9b2f85ca49c7b764923fd90b22e697b03359a" name="samba4-winbind" arch="i686">
  <version epoch="0" ver="4.2.10" rel="9.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
</package>
<package pkgid="e2daaabddc5cc4db9c0026004ca8e336c49fa6827e9b3cc0f8685f5c237130ce" name="samba4-winbind-clients" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="0dda5a77cd88316b4dd4efbd26224228f29355712d7297a2f54d3c847d952673" name="samba4-winbind-clients" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="c159c1e5f3b38bd23530c4d18f0e69cf14eb3902b2e0a8ccdc25c2e8fdf8cf88" name="samba4-winbind-clients" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="8a272c871fd49308e4946a4f0597bf2fe2a6b417fdd46b7ed0f0daf9a6b8b3c9" name="samba4-winbind-clients" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="680e6f8b6a1a957341b46a999a9c4a04c0dcdbb488742fab27ce41c45a98d33c" name="samba4-winbind-clients" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="99a7e730fffb472e6b428a010c6a92be65ea0572fa503bd3fb198fe691e5fdc8" name="samba4-winbind-clients" arch="i686">
  <version epoch="0" ver="4.2.10" rel="15.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514313 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-14" date="1514894400">- resolves: #1492780 - Do not build with -Wl,-z,now on ppc64</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-15" date="1521028800">- resolves: #1552005 - Fix CVE-2018-1050</changelog>
</package>
<package pkgid="7a78acc059270cf7a05c90e92d5d7889f5ad59879ed8c55216dfd318f6466f63" name="samba4-winbind-clients" arch="i686">
  <version epoch="0" ver="4.2.10" rel="6.el6_7"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322688</changelog>
</package>
<package pkgid="d04b58a37a59495b85ef78990756a676849366dd6e5b842a0308008356780b09" name="samba4-winbind-clients" arch="i686">
  <version epoch="0" ver="4.2.10" rel="7.el6_8"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351957 - Fix CVE-2016-2119</changelog>
</package>
<package pkgid="56d353b605d28b58756cf1221e58c97730fbd5bfec1b71cfc7eda20253f40cfd" name="samba4-winbind-clients" arch="i686">
  <version epoch="0" ver="4.2.10" rel="9.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
</package>
<package pkgid="3b91149e7ecf17c91c0defc59c00440ab49207d900e67d50d1993e3fcd57bb68" name="samba4-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="4.0.0" rel="67.el6_7.rc4"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-65.rc4" date="1423742400">- resolves: #1191388 - CVE-2015-0240: RCE in netlogon.</changelog>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
</package>
<package pkgid="cf4b213a054cacc726e85b3f9e15efdaffb671771b789759ec0bf50abe2fb2db" name="samba4-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="4.0.0" rel="68.el6_7.rc4"/>
  <changelog author="- Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.0.0-66.rc4" date="1424088000">- related: #1191388 - Update patchset for CVE-2015-0240.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-67.rc4" date="1449835200">- resolves: #1290708 - CVE-2015-7540
- related: #1290708 - CVE-2015-5299
- related: #1290708 - CVE-2015-5296
- related: #1290708 - CVE-2015-5252
- related: #1290708 - CVE-2015-5330</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.0.0-68.rc4" date="1457092800">- resolves: #1314670 - Fix CVE-2015-7560</changelog>
</package>
<package pkgid="f6692c9b49ab7dc4fdb35a9186e5d636f07b50e6771ddf45ae929baf849143cb" name="samba4-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="09339fba1bc0c657c53340c13d41f89a9bea2c4441845ce02cb1112a2f7a5b48" name="samba4-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="9e0af30e8320585779022ce02b1a2055f1d9c1ef9fdae39e47117d58ec245dc3" name="samba4-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="f9ecc52a17c105417cb8c41e45fb585a8bf3d1888c9a11cfb626485e4ecc2b2d" name="samba4-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="4.2.10" rel="15.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514313 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-14" date="1514894400">- resolves: #1492780 - Do not build with -Wl,-z,now on ppc64</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-15" date="1521028800">- resolves: #1552005 - Fix CVE-2018-1050</changelog>
</package>
<package pkgid="0e5a8daf0a66de48ced2fbab95525ffbb48c3c47523539a9fad5d72386a8ec4b" name="samba4-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="4.2.10" rel="6.el6_7"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322688</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322688</changelog>
</package>
<package pkgid="28455f2a14bc3d303b08f0ed659c294ece4713977c6d25c9b4d75123ffb7f700" name="samba4-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="4.2.10" rel="7.el6_8"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351957 - Fix CVE-2016-2119</changelog>
</package>
<package pkgid="270b1ef71787722604218e6f8eae8daf9b6ffa928f31a32b4b738eff748d4911" name="samba4-winbind-krb5-locator" arch="i686">
  <version epoch="0" ver="4.2.10" rel="9.el6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
</package>
<package pkgid="55b46710f27a6502c6e2f19faf3310c2ea235267c5f1c5fb368fa82199516f62" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.4"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.2" date="1438257600">- Allow nmbd to create pids files/dirs under /var/run/samba with correct labeling.
Resolves:#1248520</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.3" date="1438603200">- Add default labeling for /var/run/samba/nmbd
Resolves:#1248520</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.4" date="1438689600">- Allow nsswitch domain to search samba pid dirs to allow to connect to nmbd_t
Resolves:#1248520</changelog>
</package>
<package pkgid="f45b1edb4a1279083a2bea8c2880268c0db6411b157ba222f49e667ca401e9db" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.7"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.5" date="1441108800">- Allow Chromium to use setcap inside its SUID sandbox.
Resolves:#1258392</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.6" date="1441713600">- Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
Resolves:#1257318
Resolves:#1257319</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
</package>
<package pkgid="1dfe63b421a7fcc01fd6d92ec2ebcba90ca933b82276f04d64a3fbbed4a89720" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.8"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.6" date="1441713600">- Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
Resolves:#1257318
Resolves:#1257319</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.8" date="1449489600">- Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
Resolves:#1289019</changelog>
</package>
<package pkgid="622539abb6ce9b7c0eb86c7d53fb1799a6ca98324aa0dc427f3bc672503c56ef" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.9"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.8" date="1449489600">- Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
Resolves:#1289019</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; 3.7.19-279.el6_7.9" date="1460462400">- Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.
Related: #1322688</changelog>
</package>
<package pkgid="178817e226d6baee9e2bd8dc6e9849cd45584de2f4f769df15d65f5036d1b8ae" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="292.el6_8.3"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.1" date="1477483200">- Allow ipc_lock capability for glusterd.
- GlusterFS volumes of RDMA transport proceed fuse mount and requires ipc_lock capability.
Resolves: #1388582</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.2" date="1478692800">- Allow glusterd to manage socket files labeled as glusterd_brick_t.
Resolves: rhbz#1393267
- Allow runnig php7 in fpm mode. From selinux-policy side, we need to allow httpd to read/write hugetlbfs
Resolves: rhbz#1393253</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.3" date="1483531200">- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
Resolves: rhbz#1409482</changelog>
</package>
<package pkgid="29c83cb6cddf1f8e710306aaea2c8cad138959cfd9833ae5fb7e9a6d2709374d" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="307.el6"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-305" date="1479988800">- Fix typo bug sepgsql_contexts file
Resolves: rhbz#1397703
- Allow sssd_t domain to manage samba files and dirs.
Resolves: rhbz#1395403
- Create conman_unconfined_script_t type for conman script stored in /use/share/conman/exec/
Resolves: rhbz#1397117
- Allow consolekit_t domain to manage consolekit_log_t dirs
Resolves: rhbz#1397802</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-306" date="1481025600">- Allow hostname_t domain to manage cluster_tmp_t files
Resolves: rhbz#1400234
- Allow ipsec_mgmt_t domain use nsswitch
Resolves:rhbz#1401611
- Allow conman_t domain to list conman_uconfined_script_exec_t dirs.
Resolves:rhbz#1397117</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307" date="1481716800">- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
Resolves: rhbz#1404152
- Label /usr/bin/puppet* binaries as puppet_exec_t
Resolves: rhbz#1386181</changelog>
</package>
<package pkgid="cdbf6e7669e5d5f1a21068eb68125c559ff0b471ba26d51256027df7950db09b" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="307.el6_9.3"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.1" date="1498132800">- Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
Resolves: rhbz#1462824
- Disable mysqld_safe_t secure mode environment cleansing.
Resolves: rhbz#1464145</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.2" date="1498737600">- Label /usr/bin/mysqld_safe_helper as mysqld_exec_t instead of bin_t.
Resolves: rhbz#1466327</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.3" date="1512561600">- Allow sysadm_t to run puppet_exec_t binaries as puppet_t
Resolves: rhbz#1522765</changelog>
</package>
<package pkgid="2dbae1e0e941fb8f2b3f1735b47b4b5b5895f9082f1535de4601171970685ebb" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.4"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.2" date="1438257600">- Allow nmbd to create pids files/dirs under /var/run/samba with correct labeling.
Resolves:#1248520</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.3" date="1438603200">- Add default labeling for /var/run/samba/nmbd
Resolves:#1248520</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.4" date="1438689600">- Allow nsswitch domain to search samba pid dirs to allow to connect to nmbd_t
Resolves:#1248520</changelog>
</package>
<package pkgid="d24cd0bf4f3d401f5846986c07d7e62d116a94ed66336e1be1ad5805c9daf64b" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.7"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.5" date="1441108800">- Allow Chromium to use setcap inside its SUID sandbox.
Resolves:#1258392</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.6" date="1441713600">- Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
Resolves:#1257318
Resolves:#1257319</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
</package>
<package pkgid="5191dfa2356a55eb0e449b5a19adac5b786276c423930717666388b9691ade32" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.8"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.6" date="1441713600">- Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
Resolves:#1257318
Resolves:#1257319</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.8" date="1449489600">- Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
Resolves:#1289019</changelog>
</package>
<package pkgid="327b96686ea5f77a5954cf86a60bdba540bac1d8be5b6e0821bc83f5e73aef62" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.9"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.8" date="1449489600">- Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
Resolves:#1289019</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; 3.7.19-279.el6_7.9" date="1460462400">- Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.
Related: #1322688</changelog>
</package>
<package pkgid="29bed18b6b655579a0bc075ad893aade17383368c279c0e5e92435d8fcc71a72" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="292.el6_8.3"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.1" date="1477483200">- Allow ipc_lock capability for glusterd.
- GlusterFS volumes of RDMA transport proceed fuse mount and requires ipc_lock capability.
Resolves: #1388582</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.2" date="1478692800">- Allow glusterd to manage socket files labeled as glusterd_brick_t.
Resolves: rhbz#1393267
- Allow runnig php7 in fpm mode. From selinux-policy side, we need to allow httpd to read/write hugetlbfs
Resolves: rhbz#1393253</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.3" date="1483531200">- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
Resolves: rhbz#1409482</changelog>
</package>
<package pkgid="e6e6a8aae1b5ebd860ba507ed772c8a4f3dfbab02de689ad2403fc332e2ffbee" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="307.el6"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-305" date="1479988800">- Fix typo bug sepgsql_contexts file
Resolves: rhbz#1397703
- Allow sssd_t domain to manage samba files and dirs.
Resolves: rhbz#1395403
- Create conman_unconfined_script_t type for conman script stored in /use/share/conman/exec/
Resolves: rhbz#1397117
- Allow consolekit_t domain to manage consolekit_log_t dirs
Resolves: rhbz#1397802</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-306" date="1481025600">- Allow hostname_t domain to manage cluster_tmp_t files
Resolves: rhbz#1400234
- Allow ipsec_mgmt_t domain use nsswitch
Resolves:rhbz#1401611
- Allow conman_t domain to list conman_uconfined_script_exec_t dirs.
Resolves:rhbz#1397117</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307" date="1481716800">- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
Resolves: rhbz#1404152
- Label /usr/bin/puppet* binaries as puppet_exec_t
Resolves: rhbz#1386181</changelog>
</package>
<package pkgid="ba63efd959353ba6c550f8dd623aee421da76cd9b93e18df71bca5760d199e12" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="307.el6_9.3"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.1" date="1498132800">- Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
Resolves: rhbz#1462824
- Disable mysqld_safe_t secure mode environment cleansing.
Resolves: rhbz#1464145</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.2" date="1498737600">- Label /usr/bin/mysqld_safe_helper as mysqld_exec_t instead of bin_t.
Resolves: rhbz#1466327</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.3" date="1512561600">- Allow sysadm_t to run puppet_exec_t binaries as puppet_t
Resolves: rhbz#1522765</changelog>
</package>
<package pkgid="3344a3387db091868b0eb2986797bd497598a49384cce7389bb1ebc821d88bbd" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.4"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.2" date="1438257600">- Allow nmbd to create pids files/dirs under /var/run/samba with correct labeling.
Resolves:#1248520</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.3" date="1438603200">- Add default labeling for /var/run/samba/nmbd
Resolves:#1248520</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.4" date="1438689600">- Allow nsswitch domain to search samba pid dirs to allow to connect to nmbd_t
Resolves:#1248520</changelog>
</package>
<package pkgid="2de35811cd86edc54ac609e900f06580452a37e18717087d0f96f26bd4fa3d4f" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.7"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.5" date="1441108800">- Allow Chromium to use setcap inside its SUID sandbox.
Resolves:#1258392</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.6" date="1441713600">- Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
Resolves:#1257318
Resolves:#1257319</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
</package>
<package pkgid="80107f8cd3d6e4123e5f60878afa39aa4e22c01578137eee879bf97dcd6b9e25" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.8"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.6" date="1441713600">- Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
Resolves:#1257318
Resolves:#1257319</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.8" date="1449489600">- Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
Resolves:#1289019</changelog>
</package>
<package pkgid="6bfee119272be3f929c40071c5ec08076bcf60de42a8de02a628863698f0aed1" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.9"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.8" date="1449489600">- Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
Resolves:#1289019</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; 3.7.19-279.el6_7.9" date="1460462400">- Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.
Related: #1322688</changelog>
</package>
<package pkgid="e4caba6c9f79680f567b42fc7966dd63b8a764d32c9338df69d3af089d859fe8" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="292.el6_8.3"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.1" date="1477483200">- Allow ipc_lock capability for glusterd.
- GlusterFS volumes of RDMA transport proceed fuse mount and requires ipc_lock capability.
Resolves: #1388582</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.2" date="1478692800">- Allow glusterd to manage socket files labeled as glusterd_brick_t.
Resolves: rhbz#1393267
- Allow runnig php7 in fpm mode. From selinux-policy side, we need to allow httpd to read/write hugetlbfs
Resolves: rhbz#1393253</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.3" date="1483531200">- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
Resolves: rhbz#1409482</changelog>
</package>
<package pkgid="0d73d4de3058dc63bd1b9d95c04d88601da4348e981355d87a562fe8053e49b3" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="307.el6"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-305" date="1479988800">- Fix typo bug sepgsql_contexts file
Resolves: rhbz#1397703
- Allow sssd_t domain to manage samba files and dirs.
Resolves: rhbz#1395403
- Create conman_unconfined_script_t type for conman script stored in /use/share/conman/exec/
Resolves: rhbz#1397117
- Allow consolekit_t domain to manage consolekit_log_t dirs
Resolves: rhbz#1397802</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-306" date="1481025600">- Allow hostname_t domain to manage cluster_tmp_t files
Resolves: rhbz#1400234
- Allow ipsec_mgmt_t domain use nsswitch
Resolves:rhbz#1401611
- Allow conman_t domain to list conman_uconfined_script_exec_t dirs.
Resolves:rhbz#1397117</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307" date="1481716800">- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
Resolves: rhbz#1404152
- Label /usr/bin/puppet* binaries as puppet_exec_t
Resolves: rhbz#1386181</changelog>
</package>
<package pkgid="0a01da2f03e640243879ffe83610ca1da8bb70bda284221db154eb9de7754c1b" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="307.el6_9.3"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.1" date="1498132800">- Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
Resolves: rhbz#1462824
- Disable mysqld_safe_t secure mode environment cleansing.
Resolves: rhbz#1464145</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.2" date="1498737600">- Label /usr/bin/mysqld_safe_helper as mysqld_exec_t instead of bin_t.
Resolves: rhbz#1466327</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.3" date="1512561600">- Allow sysadm_t to run puppet_exec_t binaries as puppet_t
Resolves: rhbz#1522765</changelog>
</package>
<package pkgid="1a17dfd7753e7f9ce70a7e69ab5d143353d351eb4efdf03207a9d37f0e800e9d" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.4"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.2" date="1438257600">- Allow nmbd to create pids files/dirs under /var/run/samba with correct labeling.
Resolves:#1248520</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.3" date="1438603200">- Add default labeling for /var/run/samba/nmbd
Resolves:#1248520</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.4" date="1438689600">- Allow nsswitch domain to search samba pid dirs to allow to connect to nmbd_t
Resolves:#1248520</changelog>
</package>
<package pkgid="ec033934fffd1c694553bcb2abbc81b3ab810a81316e47412c818c449f0ca11a" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.7"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.5" date="1441108800">- Allow Chromium to use setcap inside its SUID sandbox.
Resolves:#1258392</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.6" date="1441713600">- Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
Resolves:#1257318
Resolves:#1257319</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
</package>
<package pkgid="8d22cc81d5890d48b08d72d6f2ff6b6ca408c33e5c67af57f3ef619e05ecea6b" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.8"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.6" date="1441713600">- Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
Resolves:#1257318
Resolves:#1257319</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.8" date="1449489600">- Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
Resolves:#1289019</changelog>
</package>
<package pkgid="e3af18e6ba7162eb95d256a791ee02707f1d733461aa4caf97378a9e96bf9189" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.9"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.8" date="1449489600">- Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
Resolves:#1289019</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; 3.7.19-279.el6_7.9" date="1460462400">- Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.
Related: #1322688</changelog>
</package>
<package pkgid="612d47d59c1414ad2dab622512531fc48e444dbe9b89c3bbaaef17d2eb13f5d7" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="292.el6_8.3"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.1" date="1477483200">- Allow ipc_lock capability for glusterd.
- GlusterFS volumes of RDMA transport proceed fuse mount and requires ipc_lock capability.
Resolves: #1388582</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.2" date="1478692800">- Allow glusterd to manage socket files labeled as glusterd_brick_t.
Resolves: rhbz#1393267
- Allow runnig php7 in fpm mode. From selinux-policy side, we need to allow httpd to read/write hugetlbfs
Resolves: rhbz#1393253</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.3" date="1483531200">- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
Resolves: rhbz#1409482</changelog>
</package>
<package pkgid="398b732bd2bdc10ddf3edff04b24e8b453af1d8468e2671933b4343d70065032" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="307.el6"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-305" date="1479988800">- Fix typo bug sepgsql_contexts file
Resolves: rhbz#1397703
- Allow sssd_t domain to manage samba files and dirs.
Resolves: rhbz#1395403
- Create conman_unconfined_script_t type for conman script stored in /use/share/conman/exec/
Resolves: rhbz#1397117
- Allow consolekit_t domain to manage consolekit_log_t dirs
Resolves: rhbz#1397802</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-306" date="1481025600">- Allow hostname_t domain to manage cluster_tmp_t files
Resolves: rhbz#1400234
- Allow ipsec_mgmt_t domain use nsswitch
Resolves:rhbz#1401611
- Allow conman_t domain to list conman_uconfined_script_exec_t dirs.
Resolves:rhbz#1397117</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307" date="1481716800">- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
Resolves: rhbz#1404152
- Label /usr/bin/puppet* binaries as puppet_exec_t
Resolves: rhbz#1386181</changelog>
</package>
<package pkgid="91ad7b260c80b7cef0ba31e3922f18eb53e022b02fa8bbdaa6c5a8ff1f0e3948" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="307.el6_9.3"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.1" date="1498132800">- Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
Resolves: rhbz#1462824
- Disable mysqld_safe_t secure mode environment cleansing.
Resolves: rhbz#1464145</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.2" date="1498737600">- Label /usr/bin/mysqld_safe_helper as mysqld_exec_t instead of bin_t.
Resolves: rhbz#1466327</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.3" date="1512561600">- Allow sysadm_t to run puppet_exec_t binaries as puppet_t
Resolves: rhbz#1522765</changelog>
</package>
<package pkgid="d05c5c759a201041f213584a54dd012f62bb4a12a7115854069581795482f90d" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.4"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.2" date="1438257600">- Allow nmbd to create pids files/dirs under /var/run/samba with correct labeling.
Resolves:#1248520</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.3" date="1438603200">- Add default labeling for /var/run/samba/nmbd
Resolves:#1248520</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.4" date="1438689600">- Allow nsswitch domain to search samba pid dirs to allow to connect to nmbd_t
Resolves:#1248520</changelog>
</package>
<package pkgid="cfcb2a163e6fc15c2505391cda10b60cf0b3ce2f4b6f7d5b29af302a2e182151" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.7"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.5" date="1441108800">- Allow Chromium to use setcap inside its SUID sandbox.
Resolves:#1258392</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.6" date="1441713600">- Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
Resolves:#1257318
Resolves:#1257319</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
</package>
<package pkgid="d86a9affe16127871450edeff36973502bf9b5fe3815bf4e8240b48b3be1fde2" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.8"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.6" date="1441713600">- Allow qpidd to be working with MRG. It requires to manage symlinks in /var/lib/qpidd.
Resolves:#1257318
Resolves:#1257319</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.8" date="1449489600">- Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
Resolves:#1289019</changelog>
</package>
<package pkgid="21be5699b0c9781135ce664ec567e6e3cf9cb3f5bdf4b3f1c49091ee48dff4d9" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="279.el6_7.9"/>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.7" date="1442404800">- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437</changelog>
  <changelog author="Miroslav Grepl &lt;mgrepl@redhat.com&gt; 3.7.19-279.el6_7.8" date="1449489600">- Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
Resolves:#1289019</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; 3.7.19-279.el6_7.9" date="1460462400">- Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.
Related: #1322688</changelog>
</package>
<package pkgid="090b200629aa18495f20ad5c09c87f49406de35f299b8526622f75b24c509950" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="292.el6_8.3"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.1" date="1477483200">- Allow ipc_lock capability for glusterd.
- GlusterFS volumes of RDMA transport proceed fuse mount and requires ipc_lock capability.
Resolves: #1388582</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.2" date="1478692800">- Allow glusterd to manage socket files labeled as glusterd_brick_t.
Resolves: rhbz#1393267
- Allow runnig php7 in fpm mode. From selinux-policy side, we need to allow httpd to read/write hugetlbfs
Resolves: rhbz#1393253</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-292.3" date="1483531200">- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
Resolves: rhbz#1409482</changelog>
</package>
<package pkgid="25bbb3278f4b0c6135dfce27cbe743f284e113c8630656a837c2f23cba4335a2" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="307.el6"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-305" date="1479988800">- Fix typo bug sepgsql_contexts file
Resolves: rhbz#1397703
- Allow sssd_t domain to manage samba files and dirs.
Resolves: rhbz#1395403
- Create conman_unconfined_script_t type for conman script stored in /use/share/conman/exec/
Resolves: rhbz#1397117
- Allow consolekit_t domain to manage consolekit_log_t dirs
Resolves: rhbz#1397802</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-306" date="1481025600">- Allow hostname_t domain to manage cluster_tmp_t files
Resolves: rhbz#1400234
- Allow ipsec_mgmt_t domain use nsswitch
Resolves:rhbz#1401611
- Allow conman_t domain to list conman_uconfined_script_exec_t dirs.
Resolves:rhbz#1397117</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307" date="1481716800">- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
Resolves: rhbz#1404152
- Label /usr/bin/puppet* binaries as puppet_exec_t
Resolves: rhbz#1386181</changelog>
</package>
<package pkgid="95423e3b58cc925b5a358890bedd91f31454e27b968fabca5fd8f091373254e2" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.7.19" rel="307.el6_9.3"/>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.1" date="1498132800">- Allow smbd_t domain generate debugging files under /var/run/gluster. These files are created through the libgfapi.so library that provides integration of a GlusterFS client in the Samba (vfs_glusterfs) process.
Resolves: rhbz#1462824
- Disable mysqld_safe_t secure mode environment cleansing.
Resolves: rhbz#1464145</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.2" date="1498737600">- Label /usr/bin/mysqld_safe_helper as mysqld_exec_t instead of bin_t.
Resolves: rhbz#1466327</changelog>
  <changelog author="Lukas Vrabec  &lt;lvrabec@redhat.com&gt; 3.7.19-307.3" date="1512561600">- Allow sysadm_t to run puppet_exec_t binaries as puppet_t
Resolves: rhbz#1522765</changelog>
</package>
<package pkgid="72543f470f0e0e4c95a8e123050b8868fe12b72db03ba2569148496e61b82c37" name="setroubleshoot" arch="i686">
  <version epoch="0" ver="3.0.47" rel="12.el6_8"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.0.47-10" date="1453982400">- sealert: Initialize translation domain in Gtk.Builder
Resolves: rhbz#814601</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.0.47-11" date="1457524800">- Update translations
Resolves: rhbz#814601</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 3.0.47-12" date="1464264000">- Don't use command.get*output()
Resolves: CVE-2016-4445</changelog>
</package>
<package pkgid="a3319080088b71d7b8ff1f71605ce65dffc8d8a0d7fc3e55a4472bc59179e0bb" name="setroubleshoot-doc" arch="i686">
  <version epoch="0" ver="3.0.47" rel="12.el6_8"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.0.47-10" date="1453982400">- sealert: Initialize translation domain in Gtk.Builder
Resolves: rhbz#814601</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.0.47-11" date="1457524800">- Update translations
Resolves: rhbz#814601</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 3.0.47-12" date="1464264000">- Don't use command.get*output()
Resolves: CVE-2016-4445</changelog>
</package>
<package pkgid="cbdbcc5b7288b27f9d0f5af1c02147c80bf024bf94e5633996be4d3f1162b5e6" name="setroubleshoot-plugins" arch="noarch">
  <version epoch="0" ver="3.0.40" rel="3.1.el6_8"/>
  <changelog author="&lt;dwalsh@redhat.com&gt; - 3.0.40-1" date="1336824000">- Update-translations
Resolves: #575686</changelog>
  <changelog author="&lt;mgrepl@redhat.com&gt; - 3.0.40-2" date="1350129600">- Fix catchall_booleans report the correct man page if it exists
Resolves:#842445</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 3.0.40-3.1" date="1464264000">- Don't use commands.get*output()
Resolves: CVE-2016-4444, CVE-2016-4446</changelog>
</package>
<package pkgid="52904654f273231db0ad996bd6ad1998287dd2caf1b5346c3a78d1d7726e835a" name="setroubleshoot-server" arch="i686">
  <version epoch="0" ver="3.0.47" rel="12.el6_8"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.0.47-10" date="1453982400">- sealert: Initialize translation domain in Gtk.Builder
Resolves: rhbz#814601</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 3.0.47-11" date="1457524800">- Update translations
Resolves: rhbz#814601</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 3.0.47-12" date="1464264000">- Don't use command.get*output()
Resolves: CVE-2016-4445</changelog>
</package>
<package pkgid="0f82668f4f3c98b676cee0160a8cc705afac62e804119a22f492639b351ae5e3" name="sl-indexhtml" arch="noarch">
  <version epoch="0" ver="6" rel="10.sl6"/>
  <changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 6-6.5.sl6.1" date="1391428800">- need x86_64 and i686 lib dirs</changelog>
  <changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 6-6.6.sl6" date="1431950400">- Updated for Firefox38 branding changes</changelog>
  <changelog author="Pat Riehecky &lt;riehecky@fnal.gov&gt; 6.10.sl6" date="1530878400">- Updated for Firefox60 branding changes
-- Thanks Aleksander Baranowski</changelog>
</package>
<package pkgid="6ceb01e839e4c8c50eded153e9dc9b3f780bc034aa0a8220d9b880ff11bb5518" name="sos" arch="noarch">
  <version epoch="0" ver="3.2" rel="28.el6_7.2"/>
  <changelog author="Shane Bradley &lt;sbradley@redhat.com&gt; = 3.2-28.el6_7" date="1451995200">- [sosreport] Prepare report in a private subdirectory
  Resolves: bz1290953</changelog>
  <changelog author="Shane Bradley &lt;sbradley@redhat.com&gt; = 3.2-28.el6_7.1" date="1452513600">- [hpasm] Add timeout.
  Resolves: bz1291828</changelog>
  <changelog author="Shane Bradley &lt;sbradley@redhat.com&gt; = 3.2-28.el6_7.2" date="1452686400">- [sosreport] Report correct final path with --build
  Related: bz1290953</changelog>
</package>
<package pkgid="11d26abf0cf2fb5589e1ee5a6a30d906ddfb559245e27792ac88a0f2852f7b7c" name="spice-glib" arch="i686">
  <version epoch="0" ver="0.26" rel="8.el6_10.1"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; 0.26-7" date="1450440000">- Bump usbredir dep to 0.5.1-3
  Resolves: rhbz#1291159
  Related: rhbz#1276707</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; 0.26-8" date="1473163200">- Make grab session related
  Resolves: rhbz#1330652
- Improve messages in usb redirection dialog
  Resolves: rhbz#1298772
- Use proxy only when needed
  Resolves: rhbz#1306311</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.1" date="1533902400">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
</package>
<package pkgid="abdb8e54d36de48d4c70945da85a0e5e7c78eb37962b9429c8c73dca13b7a5d4" name="spice-glib" arch="i686">
  <version epoch="0" ver="0.26" rel="8.el6_10.2"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; 0.26-8" date="1473163200">- Make grab session related
  Resolves: rhbz#1330652
- Improve messages in usb redirection dialog
  Resolves: rhbz#1298772
- Use proxy only when needed
  Resolves: rhbz#1306311</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.1" date="1533902400">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.2" date="1539172800">- Fix insufficient encoding checks for LZ
  Resolves: rhbz#1598651</changelog>
</package>
<package pkgid="d4c82853d9281db4f2e00e222c7ca23abe1d6f6ddee41ebc8b7280fa40ec3f10" name="spice-glib-devel" arch="i686">
  <version epoch="0" ver="0.26" rel="8.el6_10.1"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; 0.26-7" date="1450440000">- Bump usbredir dep to 0.5.1-3
  Resolves: rhbz#1291159
  Related: rhbz#1276707</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; 0.26-8" date="1473163200">- Make grab session related
  Resolves: rhbz#1330652
- Improve messages in usb redirection dialog
  Resolves: rhbz#1298772
- Use proxy only when needed
  Resolves: rhbz#1306311</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.1" date="1533902400">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
</package>
<package pkgid="be2af02ed6b1bd65b96666c9ff2e356e655ecb3be7f1a89837013186a370d7ff" name="spice-glib-devel" arch="i686">
  <version epoch="0" ver="0.26" rel="8.el6_10.2"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; 0.26-8" date="1473163200">- Make grab session related
  Resolves: rhbz#1330652
- Improve messages in usb redirection dialog
  Resolves: rhbz#1298772
- Use proxy only when needed
  Resolves: rhbz#1306311</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.1" date="1533902400">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.2" date="1539172800">- Fix insufficient encoding checks for LZ
  Resolves: rhbz#1598651</changelog>
</package>
<package pkgid="f498ddff72f578e1f08d7f17a2920c61e628788b155890025e873091d083dbc4" name="spice-gtk" arch="i686">
  <version epoch="0" ver="0.26" rel="8.el6_10.1"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; 0.26-7" date="1450440000">- Bump usbredir dep to 0.5.1-3
  Resolves: rhbz#1291159
  Related: rhbz#1276707</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; 0.26-8" date="1473163200">- Make grab session related
  Resolves: rhbz#1330652
- Improve messages in usb redirection dialog
  Resolves: rhbz#1298772
- Use proxy only when needed
  Resolves: rhbz#1306311</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.1" date="1533902400">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
</package>
<package pkgid="150c7a4f9da15facdab9c1cec879d56d74c010d9cb4713d7384dd80ce67cae68" name="spice-gtk" arch="i686">
  <version epoch="0" ver="0.26" rel="8.el6_10.2"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; 0.26-8" date="1473163200">- Make grab session related
  Resolves: rhbz#1330652
- Improve messages in usb redirection dialog
  Resolves: rhbz#1298772
- Use proxy only when needed
  Resolves: rhbz#1306311</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.1" date="1533902400">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.2" date="1539172800">- Fix insufficient encoding checks for LZ
  Resolves: rhbz#1598651</changelog>
</package>
<package pkgid="25694d9d13130b79f690f404deb9fdcedf976d0fea0735640398901b93ad8055" name="spice-gtk-devel" arch="i686">
  <version epoch="0" ver="0.26" rel="8.el6_10.1"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; 0.26-7" date="1450440000">- Bump usbredir dep to 0.5.1-3
  Resolves: rhbz#1291159
  Related: rhbz#1276707</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; 0.26-8" date="1473163200">- Make grab session related
  Resolves: rhbz#1330652
- Improve messages in usb redirection dialog
  Resolves: rhbz#1298772
- Use proxy only when needed
  Resolves: rhbz#1306311</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.1" date="1533902400">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
</package>
<package pkgid="2ff61cf3350e2df213116e84bb0e2027a0d5547e37a29ef3f72deb1f28cb5965" name="spice-gtk-devel" arch="i686">
  <version epoch="0" ver="0.26" rel="8.el6_10.2"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; 0.26-8" date="1473163200">- Make grab session related
  Resolves: rhbz#1330652
- Improve messages in usb redirection dialog
  Resolves: rhbz#1298772
- Use proxy only when needed
  Resolves: rhbz#1306311</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.1" date="1533902400">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.2" date="1539172800">- Fix insufficient encoding checks for LZ
  Resolves: rhbz#1598651</changelog>
</package>
<package pkgid="fb9458c880bb1ff5049d72dfc26ab3e9f939ffa6d9eac264272a11e6ccc57f87" name="spice-gtk-python" arch="i686">
  <version epoch="0" ver="0.26" rel="8.el6_10.1"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; 0.26-7" date="1450440000">- Bump usbredir dep to 0.5.1-3
  Resolves: rhbz#1291159
  Related: rhbz#1276707</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; 0.26-8" date="1473163200">- Make grab session related
  Resolves: rhbz#1330652
- Improve messages in usb redirection dialog
  Resolves: rhbz#1298772
- Use proxy only when needed
  Resolves: rhbz#1306311</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.1" date="1533902400">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
</package>
<package pkgid="41995586fdd7f09661104a460cd80deafa480d335401d47b24530a2e27daebd4" name="spice-gtk-python" arch="i686">
  <version epoch="0" ver="0.26" rel="8.el6_10.2"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; 0.26-8" date="1473163200">- Make grab session related
  Resolves: rhbz#1330652
- Improve messages in usb redirection dialog
  Resolves: rhbz#1298772
- Use proxy only when needed
  Resolves: rhbz#1306311</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.1" date="1533902400">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.2" date="1539172800">- Fix insufficient encoding checks for LZ
  Resolves: rhbz#1598651</changelog>
</package>
<package pkgid="7cd694edfa1e25ee8adfead3b9b27d0a46db74d379c7e045a27219c2fb76d1ef" name="spice-gtk-tools" arch="i686">
  <version epoch="0" ver="0.26" rel="8.el6_10.1"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; 0.26-7" date="1450440000">- Bump usbredir dep to 0.5.1-3
  Resolves: rhbz#1291159
  Related: rhbz#1276707</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; 0.26-8" date="1473163200">- Make grab session related
  Resolves: rhbz#1330652
- Improve messages in usb redirection dialog
  Resolves: rhbz#1298772
- Use proxy only when needed
  Resolves: rhbz#1306311</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.1" date="1533902400">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
</package>
<package pkgid="3aeb03bafdd3b566bdd3c29532488329a0541798d84256fad1fdff18324d7497" name="spice-gtk-tools" arch="i686">
  <version epoch="0" ver="0.26" rel="8.el6_10.2"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; 0.26-8" date="1473163200">- Make grab session related
  Resolves: rhbz#1330652
- Improve messages in usb redirection dialog
  Resolves: rhbz#1298772
- Use proxy only when needed
  Resolves: rhbz#1306311</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.1" date="1533902400">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.26-8.2" date="1539172800">- Fix insufficient encoding checks for LZ
  Resolves: rhbz#1598651</changelog>
</package>
<package pkgid="c1907296bab148b6cba00eadd989559db50cf7454f6704292d6ed4538007fc56" name="spice-vdagent" arch="i686">
  <version epoch="0" ver="0.14.0" rel="13.el6_10.1"/>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; 0.14.0-12" date="1473163200">- Do not allow file-transfer on locked session
  Resolves: rhbz#1323630
- Do not allow file-transfer on login screen
  Resolves: rhbz#1323640</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; 0.14.0-13" date="1484568000">- Check properly for locked session
  Resolves: rhbz#1412673</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; 0.14.0-13.1" date="1552996800">- Fix leak of unix sockets
  Resolves: rhbz#1687628</changelog>
</package>
<package pkgid="b7ef1c45963f5fe8845e58cec3b3510e56524f056e7e39e43a6d949106839b2d" name="sqlite" arch="i686">
  <version epoch="0" ver="3.6.20" rel="1.el6_7.2"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 3.6.20-1" date="1258459200">- update to 3.6.20 (http://www.sqlite.org/releaselog/3_6_20.html)</changelog>
  <changelog author="Viktor Jancik &lt;vjancik@redhat.com&gt; - 3.6.20-1.el6_7.1" date="1437566400">- fix for CVE-2015-3416
  Resolves: #1244727</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.6.20-1.2" date="1438171200">- Add patch for compiler warnings highlighted by rpmdiff.
  Related: rhbz#1244727</changelog>
</package>
<package pkgid="8379d4e61eaf37c06505ece543cb7ef01ddebd386f3d93ecb9ac27b0ff0bfbed" name="sqlite-devel" arch="i686">
  <version epoch="0" ver="3.6.20" rel="1.el6_7.2"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 3.6.20-1" date="1258459200">- update to 3.6.20 (http://www.sqlite.org/releaselog/3_6_20.html)</changelog>
  <changelog author="Viktor Jancik &lt;vjancik@redhat.com&gt; - 3.6.20-1.el6_7.1" date="1437566400">- fix for CVE-2015-3416
  Resolves: #1244727</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.6.20-1.2" date="1438171200">- Add patch for compiler warnings highlighted by rpmdiff.
  Related: rhbz#1244727</changelog>
</package>
<package pkgid="fcd2b06f46a0f9676d3fae2aa07805d42d97276bda9483ed023436ff7ac11cb4" name="sqlite-doc" arch="i686">
  <version epoch="0" ver="3.6.20" rel="1.el6_7.2"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 3.6.20-1" date="1258459200">- update to 3.6.20 (http://www.sqlite.org/releaselog/3_6_20.html)</changelog>
  <changelog author="Viktor Jancik &lt;vjancik@redhat.com&gt; - 3.6.20-1.el6_7.1" date="1437566400">- fix for CVE-2015-3416
  Resolves: #1244727</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.6.20-1.2" date="1438171200">- Add patch for compiler warnings highlighted by rpmdiff.
  Related: rhbz#1244727</changelog>
</package>
<package pkgid="1254fa0012dd0b4ed13dffcda8f2b6b6ff8dd910280915d64ac14d404b9605d4" name="sqlite-tcl" arch="i686">
  <version epoch="0" ver="3.6.20" rel="1.el6_7.2"/>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 3.6.20-1" date="1258459200">- update to 3.6.20 (http://www.sqlite.org/releaselog/3_6_20.html)</changelog>
  <changelog author="Viktor Jancik &lt;vjancik@redhat.com&gt; - 3.6.20-1.el6_7.1" date="1437566400">- fix for CVE-2015-3416
  Resolves: #1244727</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 3.6.20-1.2" date="1438171200">- Add patch for compiler warnings highlighted by rpmdiff.
  Related: rhbz#1244727</changelog>
</package>
<package pkgid="ae4cab9449bfb1f60ac2c85444b6431cf81807a3c341359aa6269814ea750448" name="squid" arch="i686">
  <version epoch="7" ver="3.1.23" rel="16.el6_8.4"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.1.23-16.2" date="1461844800">- Related: #1330572 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
  squid: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.1.23-16.3" date="1462881600">- Resolved: #1334489 - CVE-2016-4554 CVE-2016-4556 squid: various flaws
- Related: #1330572 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
  squid: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.1.23-16.4" date="1463054400">- Related: #1334489 - CVE-2016-4554 CVE-2016-4556 squid: various flaws</changelog>
</package>
<package pkgid="3d1a09d6d316bcfbc99be3ac76c58cd3aa7de6b4eadaf2ff143cf61748720a7c" name="squid" arch="i686">
  <version epoch="7" ver="3.1.23" rel="16.el6_8.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.1.23-16.4" date="1463054400">- Related: #1334489 - CVE-2016-4554 CVE-2016-4556 squid: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.1.23-16.5" date="1467201600">- Resolves: #1351313 - squid aborts with MemBuf.cc:280: "size &lt; capacity" messages</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.1.23-16.6" date="1469448000">- Resolves: #1359204 - CVE-2016-5408 squid: Buffer overflow vulnerability
  in cachemgr.cgi tool</changelog>
</package>
<package pkgid="b2a5bfa7ab5b262452b57ecbbe20e710a55827dc858f49c4c4091781a0fea7b6" name="squid34" arch="i686">
  <version epoch="7" ver="3.4.14" rel="9.el6_8.3"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.4.14-9.1" date="1461931200">- Resolves: #1330574 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
  squid34: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.4.14-9.2" date="1461931201">- Related: #1330574 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
  squid34: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.4.14-9.3" date="1462795200">- Resolves: #1334499 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556
  squid34: various flaws
- Resolves: #1334506 - CVE-2016-4553 squid34: squid: Cache poisoning
  issue in HTTP Request handling</changelog>
</package>
<package pkgid="7e52b9bf9f4148697697dc047a6cece38ece8c0a20ba2bce2b734204b2199030" name="squid34" arch="i686">
  <version epoch="7" ver="3.4.14" rel="9.el6_8.4"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.4.14-9.2" date="1461931200">- Related: #1330574 - CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054
  squid34: various flaws</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.4.14-9.3" date="1462795200">- Resolves: #1334499 - CVE-2016-4554 CVE-2016-4555 CVE-2016-4556
  squid34: various flaws
- Resolves: #1334506 - CVE-2016-4553 squid34: squid: Cache poisoning
  issue in HTTP Request handling</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.4.14-9.4" date="1484308800">- Resolves: #1412733 - CVE-2016-10002 squid34: squid: Information disclosure
  in HTTP request processing</changelog>
</package>
<package pkgid="f1a98ec213c02eef16a2ce7be99faa462b542ff66591a75e5206c3d52eda7a0b" name="sssd" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="413006d68816da9dec1990641ab0d894273dc771b4a0af755aa6742cf4d9fa7b" name="sssd" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="909b9e5bd69c88513b92040991d5b5f622f927d6a140ced1dc357f576682ccad" name="sssd-ad" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="4c0a2f6973b35b8560edcc10acc7967ec8dcbe1ac1975ae7e35a5ababed8e96f" name="sssd-ad" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="3a18cc1a1d0077e6451eeede31d840c6735796a92ea6c68ea06835d61b08ae0e" name="sssd-client" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="eff75ce817bc89f6867bc1a1f74e401a15b3bc9702b72e890ce9544d116df78f" name="sssd-client" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="ef1b48eee5a780e7b0f659a3fac6f9136c44e66a2576c04f97f31a7f803bc2c5" name="sssd-common" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="b8eb00d6d2943e6fca6c9d1c5c280c2e2f187d877e602329e0aabdea3e7c4228" name="sssd-common" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="e13da109862f4399879f0b34bc99b5fa102304b76fc736fec915667bd6a326ee" name="sssd-common-pac" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="62e09549f3f58c830438f37d41676c1072c969763262eaf6073608262b45925c" name="sssd-common-pac" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="bba4c3f327972c5df34d175c156c814bdaadd22d25ec54aa421ea8359863367a" name="sssd-dbus" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="2c072dc328c85264ff4222a22fcf427fb636314fd0f4c706590ce36904285d8d" name="sssd-dbus" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="5c34325316a1ac3b0692926fe1ec351c8f8a82676ac6892264aa86982ea7edd6" name="sssd-ipa" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="cdb9b24677bf4b9a0dd73e30750c0f356ee30d758e2b83339ece2d55d9bb148a" name="sssd-ipa" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="5a9394f3de783bab38dda44eb98dc09a766fc3c3df7002b7154554b29bbe5398" name="sssd-krb5" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="fee2a9479045f2b8d89d298330ec6f0881b4b0a6787cf91fd03761ab097799e1" name="sssd-krb5" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="d30e485f09318500988922c6c931f684509eafe4c161c1bfe320673d376ac485" name="sssd-krb5-common" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="8eef220e5f768ca5959d10f17b0c5ab362f38210b0366883d1b17fca0be8d26f" name="sssd-krb5-common" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="b44b88c36947cb48d89d2a21c784627bcadf0882b957bb6d35ec7ad6ef0f40c6" name="sssd-ldap" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="be5c001594692b64d23750ef8b8a3d93bc8ffa4b8d8c3e1ed76746203b482600" name="sssd-ldap" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="290791abe4b02f2d80dd4c32630d412df25f714792012fa5b0e9bb7bbd14ec62" name="sssd-proxy" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="e0d1c18f6f1e11eb1fa32dcf6469c8a531766a1379a1028fa8d533bf7198c187" name="sssd-proxy" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="4353f65c6ee20c84570a7432a3ff7b0534a2e9983c6bcc06a4bb18f75aad7e46" name="sssd-tools" arch="i686">
  <version epoch="0" ver="1.12.4" rel="47.el6_7.4"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.2" date="1443096000">- Resolves: rhbz#1264098 - cleanup_groups should sanitize dn of groups</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.3" date="1444046400">- Resolves: rhbz#1268784 - SSSD POSIX attribute check is too strict</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.12.4-47.4" date="1444046401">- Resolves: rhbz#1268783 - Memory leak / possible DoS with krb auth.</changelog>
</package>
<package pkgid="1bcd8cb7160a7350542687548fec6b3028121feb39596a2a3a6ef0fd94efe35f" name="sssd-tools" arch="i686">
  <version epoch="0" ver="1.13.3" rel="60.el6"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-58" date="1513252800">- Resolves: rhbz#1421057 - pam_sss crashes in do_pam_conversation if no conversation
                           function is provided by the client app
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results ini
                           failed user logins
- Resolves: rhbz#1487944 - ABRT crash - /usr/libexec/sssd/sssd_nss
- Resolves: rhbz#1489485 - sssd is not pulling groups in a trusted domain, with the
                           Global scope</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-59" date="1519732800">- Resolves: rhbz#1326007 - Memory cache corruption when rsync and/or tar to copy owner and group info from LDAP
- Resolves: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Resolves: rhbz#1507435 - CVE-2017-12173 sssd: unsanitized input when searching in local cache database [rhel-6.10]
- Resolves: rhbz#1487040 - sssd does not evaluate AD UPN suffixes which results in failed user logins</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.13.3-60" date="1519732801">- Related: rhbz#1442703 - Smart Cards: Certificate in the ID View
- Related: rhbz# 1401546 - Please back-port fast failover from sssd 1.14 on RHEL 7 into sssd 1.13 on RHEL 6</changelog>
</package>
<package pkgid="87f921dc8e59c49b08498b9cd24a3b3b9a277cee332833ce04b72b1f57c895fa" name="subscription-manager" arch="i686">
  <version epoch="0" ver="1.18.10" rel="1.el6"/>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.8-1" date="1484913600">- 1391681: Zanata translations for subscription-manager 1.18
  (adarshvritant@gmail.com)
- Drop unsupported languages from zanata.xml (adarshvritant@gmail.com)
- 1402009: Unset TERM inside subscription-manager (khowell@redhat.com)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.9-1" date="1485950400">- 1417746, 1417740, 1417736, 1417731: Fixed Translations for 6.9 post testing
  (adarshvritant@gmail.com)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.10-1" date="1486728000">- 1417746: more translations after Redhat associate contributions
  (adarshvritant@gmail.com)</changelog>
</package>
<package pkgid="648cb810e8d275d5ded2171a2c88e300d928d9efef75246b311a1c9512e79a5d" name="subscription-manager-gui" arch="i686">
  <version epoch="0" ver="1.18.10" rel="1.el6"/>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.8-1" date="1484913600">- 1391681: Zanata translations for subscription-manager 1.18
  (adarshvritant@gmail.com)
- Drop unsupported languages from zanata.xml (adarshvritant@gmail.com)
- 1402009: Unset TERM inside subscription-manager (khowell@redhat.com)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.9-1" date="1485950400">- 1417746, 1417740, 1417736, 1417731: Fixed Translations for 6.9 post testing
  (adarshvritant@gmail.com)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.10-1" date="1486728000">- 1417746: more translations after Redhat associate contributions
  (adarshvritant@gmail.com)</changelog>
</package>
<package pkgid="2933ef7a8a9c4d67e711f74c697f610fde44bf2ffb6f204a32bc188148ee1704" name="subscription-manager-plugin-container" arch="i686">
  <version epoch="0" ver="1.18.10" rel="1.el6"/>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.8-1" date="1484913600">- 1391681: Zanata translations for subscription-manager 1.18
  (adarshvritant@gmail.com)
- Drop unsupported languages from zanata.xml (adarshvritant@gmail.com)
- 1402009: Unset TERM inside subscription-manager (khowell@redhat.com)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.9-1" date="1485950400">- 1417746, 1417740, 1417736, 1417731: Fixed Translations for 6.9 post testing
  (adarshvritant@gmail.com)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.10-1" date="1486728000">- 1417746: more translations after Redhat associate contributions
  (adarshvritant@gmail.com)</changelog>
</package>
<package pkgid="4eabf58461a19f464e6b546535a882b40ba42585e04fa88f67a964032e2d7f2c" name="subversion" arch="i686">
  <version epoch="0" ver="1.6.11" rel="15.el6_7"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-13" date="1425297600">- retain file properties on foreign repo merge (#922718)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-14" date="1425470400">- fix excessive socket use for fsfs memcache caching (#1039085)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-15" date="1438689600">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3187</changelog>
</package>
<package pkgid="94e2fa44fe5d531a9d4a94069202fdf65bb5433fd34b6df065332ad88f031e84" name="subversion-devel" arch="i686">
  <version epoch="0" ver="1.6.11" rel="15.el6_7"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-13" date="1425297600">- retain file properties on foreign repo merge (#922718)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-14" date="1425470400">- fix excessive socket use for fsfs memcache caching (#1039085)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-15" date="1438689600">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3187</changelog>
</package>
<package pkgid="faadcaa10a13ce7b8a4fc38c43f1c7ff8dbe3f0ff21b6185447ed0d3faf2efaa" name="subversion-gnome" arch="i686">
  <version epoch="0" ver="1.6.11" rel="15.el6_7"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-13" date="1425297600">- retain file properties on foreign repo merge (#922718)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-14" date="1425470400">- fix excessive socket use for fsfs memcache caching (#1039085)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-15" date="1438689600">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3187</changelog>
</package>
<package pkgid="94c5d919dd8ff6a62a733b98e2ce9c047b167c07d92882a80906c0fede604fc1" name="subversion-javahl" arch="i686">
  <version epoch="0" ver="1.6.11" rel="15.el6_7"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-13" date="1425297600">- retain file properties on foreign repo merge (#922718)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-14" date="1425470400">- fix excessive socket use for fsfs memcache caching (#1039085)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-15" date="1438689600">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3187</changelog>
</package>
<package pkgid="05081f17470327038d5a8be20af6455c743ccb344e4daf6045db24c0db6549e4" name="subversion-kde" arch="i686">
  <version epoch="0" ver="1.6.11" rel="15.el6_7"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-13" date="1425297600">- retain file properties on foreign repo merge (#922718)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-14" date="1425470400">- fix excessive socket use for fsfs memcache caching (#1039085)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-15" date="1438689600">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3187</changelog>
</package>
<package pkgid="131ae904d82887363912a7e1b6328eac85db8126acf7e5536a453d4eb019412c" name="subversion-perl" arch="i686">
  <version epoch="0" ver="1.6.11" rel="15.el6_7"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-13" date="1425297600">- retain file properties on foreign repo merge (#922718)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-14" date="1425470400">- fix excessive socket use for fsfs memcache caching (#1039085)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-15" date="1438689600">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3187</changelog>
</package>
<package pkgid="f68693cfdd7bf241b8e4c468ff65a5837fcf1bbeeb43879b1b4145140e60076d" name="subversion-ruby" arch="i686">
  <version epoch="0" ver="1.6.11" rel="15.el6_7"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-13" date="1425297600">- retain file properties on foreign repo merge (#922718)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-14" date="1425470400">- fix excessive socket use for fsfs memcache caching (#1039085)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-15" date="1438689600">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3187</changelog>
</package>
<package pkgid="bf6c67ea20a40fed4d4cc42e3c9425b988094887041d04d182af8520b673e4ec" name="subversion-svn2cl" arch="noarch">
  <version epoch="0" ver="1.6.11" rel="15.el6_7"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-13" date="1425297600">- retain file properties on foreign repo merge (#922718)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-14" date="1425470400">- fix excessive socket use for fsfs memcache caching (#1039085)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.6.11-15" date="1438689600">- add security fixes for CVE-2015-0248, CVE-2015-0251, CVE-2015-3187</changelog>
</package>
<package pkgid="74d8823f93294a15a8f027fbd523ffb98178759e0de63c51ef275e13d5306d17" name="sudo" arch="i686">
  <version epoch="0" ver="1.8.6p3" rel="25.el6_8"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-23" date="1456401600">- RHEL-6.8 erratum
  - fixed handling of closefrom_override defaults option
  Resolves: rhbz#1309976</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-24" date="1456833600">- RHEL-6.8 erratum
  - fixed a bug causing that non-root users can list privileges of
    other users
  Resolves: rhbz#1312481</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-25" date="1479988800">- Update noexec syscall blacklist
- Fixes CVE-2016-7032 and CVE-2016-7076
  Resolves: rhbz#1391937</changelog>
</package>
<package pkgid="63fd474919aec0ebe90d6fe3a7614ab4d4ee72b1a098334faeb657b7811155a6" name="sudo" arch="i686">
  <version epoch="0" ver="1.8.6p3" rel="28.el6_9"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.6p3-26" date="1476792000">- RHEL-6.9 erratum
  - Fix race condition when creating /var/log/sudo-io direcotry
  Resolves: rhbz#1365156</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-27" date="1479988800">- Update noexec syscall blacklist
- Fixes CVE-2016-7032 and CVE-2016-7076
  Resolves: rhbz#1391938</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-28" date="1496059200">- Fixes CVE-2017-1000367
  Resolves: rhbz#1455399</changelog>
</package>
<package pkgid="03d0ead992d7d3888f84954eedc486818b58ecbb3e17cd1a466a6b776c8c78fa" name="sudo" arch="i686">
  <version epoch="0" ver="1.8.6p3" rel="29.el6_10.2"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-28" date="1496059200">- Fixes CVE-2017-1000367
  Resolves: rhbz#1455400</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-29" date="1496836800">- Fixes CVE-2017-1000368
  Resolves: rhbz#1459409</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-29.2" date="1571659200">- RHEL-6.10.z ERRATUM
- fixed CVE-2019-14287
  Resolves: rhbz#1760684</changelog>
</package>
<package pkgid="d9b8368cc70fb32e27bd4d83f623991b0e3b2ef9be414623845491eee7ef7c9b" name="sudo" arch="i686">
  <version epoch="0" ver="1.8.6p3" rel="29.el6_10.3"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-29" date="1496836800">- Fixes CVE-2017-1000368
  Resolves: rhbz#1459409</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-29.2" date="1571659200">- RHEL-6.10.z ERRATUM
- fixed CVE-2019-14287
  Resolves: rhbz#1760684</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-29.3" date="1581595200">- RHEL-6.10.z ERRATUM
- fixed CVE-2019-18634
  Resolves: rhbz#1799018</changelog>
</package>
<package pkgid="da1448c6fbc12662216dcef1fe10419a28f4d6efa05b6fe27702ab8160659763" name="sudo" arch="i686">
  <version epoch="0" ver="1.8.6p3" rel="29.el6_9"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-27" date="1479988800">- Update noexec syscall blacklist
- Fixes CVE-2016-7032 and CVE-2016-7076
  Resolves: rhbz#1391938</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-28" date="1496059200">- Fixes CVE-2017-1000367
  Resolves: rhbz#1455399</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-29" date="1496836800">- Fixes CVE-2017-1000368
  Resolves: rhbz#1459408</changelog>
</package>
<package pkgid="ae50a8f2eca5f15dfc46c08a656d8fc35e28d83e19170844bd05bcf9c86eb35b" name="sudo-devel" arch="i686">
  <version epoch="0" ver="1.8.6p3" rel="25.el6_8"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-23" date="1456401600">- RHEL-6.8 erratum
  - fixed handling of closefrom_override defaults option
  Resolves: rhbz#1309976</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-24" date="1456833600">- RHEL-6.8 erratum
  - fixed a bug causing that non-root users can list privileges of
    other users
  Resolves: rhbz#1312481</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-25" date="1479988800">- Update noexec syscall blacklist
- Fixes CVE-2016-7032 and CVE-2016-7076
  Resolves: rhbz#1391937</changelog>
</package>
<package pkgid="d2c6c906d65f024de1d046ca8d7b74bc53dc6db16dd1975bf30eaeb67c08df46" name="sudo-devel" arch="i686">
  <version epoch="0" ver="1.8.6p3" rel="28.el6_9"/>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.6p3-26" date="1476792000">- RHEL-6.9 erratum
  - Fix race condition when creating /var/log/sudo-io direcotry
  Resolves: rhbz#1365156</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-27" date="1479988800">- Update noexec syscall blacklist
- Fixes CVE-2016-7032 and CVE-2016-7076
  Resolves: rhbz#1391938</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-28" date="1496059200">- Fixes CVE-2017-1000367
  Resolves: rhbz#1455399</changelog>
</package>
<package pkgid="62da827b90ab1c0cc3b28c1fa1eec0bd36c01c9491ee871e3d95a5317995e18a" name="sudo-devel" arch="i686">
  <version epoch="0" ver="1.8.6p3" rel="29.el6_10.2"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-28" date="1496059200">- Fixes CVE-2017-1000367
  Resolves: rhbz#1455400</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-29" date="1496836800">- Fixes CVE-2017-1000368
  Resolves: rhbz#1459409</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-29.2" date="1571659200">- RHEL-6.10.z ERRATUM
- fixed CVE-2019-14287
  Resolves: rhbz#1760684</changelog>
</package>
<package pkgid="37a0c40da8624c01ccbcc4844414f61276b85999256950bce83258c049606f2c" name="sudo-devel" arch="i686">
  <version epoch="0" ver="1.8.6p3" rel="29.el6_10.3"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-29" date="1496836800">- Fixes CVE-2017-1000368
  Resolves: rhbz#1459409</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-29.2" date="1571659200">- RHEL-6.10.z ERRATUM
- fixed CVE-2019-14287
  Resolves: rhbz#1760684</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-29.3" date="1581595200">- RHEL-6.10.z ERRATUM
- fixed CVE-2019-18634
  Resolves: rhbz#1799018</changelog>
</package>
<package pkgid="efe6b03ba8feb43d659f2d2941094ee653b38a0014e0342c0e23f95a26c55594" name="sudo-devel" arch="i686">
  <version epoch="0" ver="1.8.6p3" rel="29.el6_9"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-27" date="1479988800">- Update noexec syscall blacklist
- Fixes CVE-2016-7032 and CVE-2016-7076
  Resolves: rhbz#1391938</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-28" date="1496059200">- Fixes CVE-2017-1000367
  Resolves: rhbz#1455399</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-29" date="1496836800">- Fixes CVE-2017-1000368
  Resolves: rhbz#1459408</changelog>
</package>
<package pkgid="67a5adf359ec4c7df3479ab862ef6dd6d9076da4530ccf8c232389af50ac71ff" name="systemtap" arch="i686">
  <version epoch="0" ver="2.9" rel="7.el6"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-5" date="1477483200">- BZ1320691 (init-time probing /sbin/new-kernel-pkg path fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-6" date="1479988800">- BZ1320691 (init-time probing redux)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-7" date="1481025600">- BZ1401834 (init-time probing redux redux)</changelog>
</package>
<package pkgid="15c1f00725f7ecb4b41f9fcf2ee5740e0a36561695be5fcfdd19dfad816ebcbe" name="systemtap-client" arch="i686">
  <version epoch="0" ver="2.9" rel="7.el6"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-5" date="1477483200">- BZ1320691 (init-time probing /sbin/new-kernel-pkg path fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-6" date="1479988800">- BZ1320691 (init-time probing redux)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-7" date="1481025600">- BZ1401834 (init-time probing redux redux)</changelog>
</package>
<package pkgid="61f2feaf01c016c52aade6249ee053a4b1bd6f3704c4f33236d643fd3208bbb6" name="systemtap-devel" arch="i686">
  <version epoch="0" ver="2.9" rel="7.el6"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-5" date="1477483200">- BZ1320691 (init-time probing /sbin/new-kernel-pkg path fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-6" date="1479988800">- BZ1320691 (init-time probing redux)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-7" date="1481025600">- BZ1401834 (init-time probing redux redux)</changelog>
</package>
<package pkgid="8463bdee663dc63bc4914eab90b0d2918e075fda08dce7bb040199bd17d85123" name="systemtap-initscript" arch="i686">
  <version epoch="0" ver="2.9" rel="7.el6"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-5" date="1477483200">- BZ1320691 (init-time probing /sbin/new-kernel-pkg path fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-6" date="1479988800">- BZ1320691 (init-time probing redux)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-7" date="1481025600">- BZ1401834 (init-time probing redux redux)</changelog>
</package>
<package pkgid="858d0b7eafbcdd648f7942c6f8b83c1775aa2d2e78b1843c864d5a9316794c5a" name="systemtap-runtime" arch="i686">
  <version epoch="0" ver="2.9" rel="7.el6"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-5" date="1477483200">- BZ1320691 (init-time probing /sbin/new-kernel-pkg path fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-6" date="1479988800">- BZ1320691 (init-time probing redux)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-7" date="1481025600">- BZ1401834 (init-time probing redux redux)</changelog>
</package>
<package pkgid="e616a86028e92759cc473262ab1ebf5e1fe9990f0d5d6aa655f0640bd4f29a6c" name="systemtap-runtime-virtguest" arch="i686">
  <version epoch="0" ver="2.9" rel="7.el6"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-5" date="1477483200">- BZ1320691 (init-time probing /sbin/new-kernel-pkg path fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-6" date="1479988800">- BZ1320691 (init-time probing redux)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-7" date="1481025600">- BZ1401834 (init-time probing redux redux)</changelog>
</package>
<package pkgid="bc726c5936be4bf267d3de5b2ef431a2a059e0a5b6c8b922f9f250b599df0190" name="systemtap-sdt-devel" arch="i686">
  <version epoch="0" ver="2.9" rel="7.el6"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-5" date="1477483200">- BZ1320691 (init-time probing /sbin/new-kernel-pkg path fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-6" date="1479988800">- BZ1320691 (init-time probing redux)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-7" date="1481025600">- BZ1401834 (init-time probing redux redux)</changelog>
</package>
<package pkgid="786dda639358f775fd841884bd7631f5d9ee146a67ad3b03a23533e83d6f9f30" name="systemtap-server" arch="i686">
  <version epoch="0" ver="2.9" rel="7.el6"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-5" date="1477483200">- BZ1320691 (init-time probing /sbin/new-kernel-pkg path fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-6" date="1479988800">- BZ1320691 (init-time probing redux)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-7" date="1481025600">- BZ1401834 (init-time probing redux redux)</changelog>
</package>
<package pkgid="482c390ae0f41bfe49009636df72c7e50729ed4daf6330c1edb117d8223b7998" name="systemtap-testsuite" arch="i686">
  <version epoch="0" ver="2.9" rel="7.el6"/>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-5" date="1477483200">- BZ1320691 (init-time probing /sbin/new-kernel-pkg path fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-6" date="1479988800">- BZ1320691 (init-time probing redux)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 2.9-7" date="1481025600">- BZ1401834 (init-time probing redux redux)</changelog>
</package>
<package pkgid="ccf137656fc98ca7bec0b5cd9bab9aac3ade520ffc7989a8d7d7c89f7d92d18c" name="tdb-tools" arch="i686">
  <version epoch="0" ver="1.3.8" rel="1.el6_7"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.2.1-3" date="1302004800">- Resolves: rhbz#692251 - tdb_extend() can cause a memory-usage explosion if
-                         the size of its entries are very large</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.10-1" date="1343908800">- Resolves: rhbz#766334 - Rebase libtdb to match the version required
                          by Samba4
- Enable the Python bindings to satisfy samba4 BuildRequirements
- Obsoletes tdb-1.2.9-limit-tdb_expand.patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.8-1" date="1459512000">- Rebase libtdb to 1.3.8
- related: #1322688</changelog>
</package>
<package pkgid="bbd2194e19354b9a029e5ddd1fb360555ee95a050eb9aa981ebcd1a246765e55" name="telnet" arch="i686">
  <version epoch="1" ver="0.17" rel="49.el6_10"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1:0.17-47" date="1309262400">- telnetd: store "from" address in sockaddr_storage (#678324)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; 1:0.17-48" date="1399291200">- reuse utmp entries correctly
- break out from infinite loop if we tried to bind to non-existing address (#772912)
- mitigate possibility of self-deadlock while updating utmp or wtmp (#832059)</changelog>
  <changelog author="Michal Ruprich &lt;michalruprich@gmail.com&gt; - 1:0.17-49" date="1585224000">- Resolves: #1814775 - Arbitrary remote code execution in utility.c via short writes or urgent data</changelog>
</package>
<package pkgid="d9cf7ab6b1b894a04bf4373cbb36aabf9df1884a5f4ad43940e15ce050ae43c7" name="telnet-server" arch="i686">
  <version epoch="1" ver="0.17" rel="49.el6_10"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1:0.17-47" date="1309262400">- telnetd: store "from" address in sockaddr_storage (#678324)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; 1:0.17-48" date="1399291200">- reuse utmp entries correctly
- break out from infinite loop if we tried to bind to non-existing address (#772912)
- mitigate possibility of self-deadlock while updating utmp or wtmp (#832059)</changelog>
  <changelog author="Michal Ruprich &lt;michalruprich@gmail.com&gt; - 1:0.17-49" date="1585224000">- Resolves: #1814775 - Arbitrary remote code execution in utility.c via short writes or urgent data</changelog>
</package>
<package pkgid="3ba8607f911a1842cec09434be578375acf33592077569a2abd525d4ea02859e" name="thunderbird" arch="i686">
  <version epoch="0" ver="38.2.0" rel="4.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 31.7.0-1" date="1431259200">- Update to 31.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.0-4" date="1437048000">- Update to 38.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.2.0-4" date="1439553600">- Update to 38.2.0</changelog>
</package>
<package pkgid="34afe582de57ced978cd27fefc038d8854a433b6bc58c1e4eb3f9269aaac2852" name="thunderbird" arch="i686">
  <version epoch="0" ver="38.3.0" rel="1.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.1.0-4" date="1437048000">- Update to 38.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.2.0-4" date="1439553600">- Update to 38.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.3.0-1" date="1443528000">- Update to 38.3.0</changelog>
</package>
<package pkgid="ad6e85bb2c54cfa24ad295cf04a9f223c494d70157b8d191fa4325dd849d8687" name="thunderbird" arch="i686">
  <version epoch="0" ver="38.4.0" rel="1.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.2.0-4" date="1439553600">- Update to 38.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.3.0-1" date="1443528000">- Update to 38.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.4.0-1" date="1448193600">- Update to 38.4.0</changelog>
</package>
<package pkgid="1d82db1a4a23c7c3579e89c922829ceeda979cac0a9408677b5f01a6252b5353" name="thunderbird" arch="i686">
  <version epoch="0" ver="38.5.0" rel="1.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.3.0-1" date="1443528000">- Update to 38.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.4.0-1" date="1448193600">- Update to 38.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.5.0-1" date="1450785600">- Update to 38.5.0</changelog>
</package>
<package pkgid="3ea748ec596f94da1531f88a6ef702df075bac79a07ce02188c7c563328c56b3" name="thunderbird" arch="i686">
  <version epoch="0" ver="38.6.0" rel="1.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.4.0-1" date="1448193600">- Update to 38.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.5.0-1" date="1450785600">- Update to 38.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.6.0-1" date="1455537600">- Update to 38.6.0</changelog>
</package>
<package pkgid="32f22d538315c6b0f43280739971374c8f492e32e57a45b0872397c519567de5" name="thunderbird" arch="i686">
  <version epoch="0" ver="38.7.0" rel="1.el6_7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.5.0-1" date="1450785600">- Update to 38.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.6.0-1" date="1455537600">- Update to 38.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.7.0-1" date="1457697600">- Update to 38.7.0</changelog>
</package>
<package pkgid="00398d48bad9cfe812e2beb9c215045f4a4674acd9c951f4c15692798beb5476" name="thunderbird" arch="i686">
  <version epoch="0" ver="38.8.0" rel="2.el6_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.6.0-1" date="1455537600">- Update to 38.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.7.0-1" date="1457697600">- Update to 38.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 38.8.0-2" date="1462536000">- Update to 38.8.0</changelog>
</package>
<package pkgid="68b4e906ab97dc36a8cde567d3cdac8f509f53793f3cb342f03c415b5d13c430" name="thunderbird" arch="i686">
  <version epoch="0" ver="45.2" rel="1.el6_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.1.0-5" date="1465214400">- Do not add symlinks to some langpacks</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.1.1-1" date="1465214401">- Update to 45.1.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.2-1" date="1467201600">- Update to 45.2</changelog>
</package>
<package pkgid="617772df8aa11ba7c37f41d9e4d22ce02879cbe070135c9a706037a80d4fd2b4" name="thunderbird" arch="i686">
  <version epoch="0" ver="45.3.0" rel="1.el6_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.1.1-1" date="1465214400">- Update to 45.1.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.2-1" date="1467201600">- Update to 45.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.3.0-1" date="1472212800">- Update to 45.3.0</changelog>
</package>
<package pkgid="20bc30789daae8d02c1b3ba3e383fd9eba4f51911909f5a6306cb8dfbdee46aa" name="thunderbird" arch="i686">
  <version epoch="0" ver="45.4.0" rel="1.el6_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.2-1" date="1467201600">- Update to 45.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.3.0-1" date="1472212800">- Update to 45.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-1" date="1475150400">- Update to 45.4.0</changelog>
</package>
<package pkgid="d6ccfda2db8c994d851962517b8a6611f73e09e709997e543cf0d995399c9070" name="thunderbird" arch="i686">
  <version epoch="0" ver="45.5.0" rel="1.el6_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.3.0-1" date="1472212800">- Update to 45.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-1" date="1475150400">- Update to 45.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1479470400">- Update to 45.5.0</changelog>
</package>
<package pkgid="acaf4c7a1400c06229a53d269561448ea6d2dfb83aee0e69598f02ec39e7145c" name="thunderbird" arch="i686">
  <version epoch="0" ver="45.5.1" rel="1.el6_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-1" date="1475150400">- Update to 45.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1479470400">- Update to 45.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
</package>
<package pkgid="49849319bb028ed2e3f3500a25d3ce7ff3e8ef87ebee3874a46d41c685f1bcaa" name="thunderbird" arch="i686">
  <version epoch="0" ver="45.6.0" rel="1.el6_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1479470400">- Update to 45.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
</package>
<package pkgid="c69958889fdfc5037c41cb529ba5ca356491983df949879a69a35e13220998e2" name="thunderbird" arch="i686">
  <version epoch="0" ver="45.7.0" rel="1.el6_8"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
</package>
<package pkgid="1c4351115d082070ee00c424184a587295db88e0ae3e5fca73b10dcecb097830" name="thunderbird" arch="i686">
  <version epoch="0" ver="45.8.0" rel="1.el6_8"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
</package>
<package pkgid="e51f525dca181e2d55be185e6dcdc04edb25571c48729d735176f1ebd62ed223" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.1.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
</package>
<package pkgid="bf32d2955720ddebbfaafac0afd13950376a6cef28f3ca73d9656ab59c375beb" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.2.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
</package>
<package pkgid="1230539aba7166f60387175a58074520b8cbc4c2ec1a73d7b2af819fb606c66e" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.3.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
</package>
<package pkgid="d10b549dad59571673d0e59e7afe68090e7f986636268ba78977470a8ac09f92" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.4.0" rel="2.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
</package>
<package pkgid="09984b81911042bbd30b68be77fd4027bbea11f63de42f818939607eabfbbc93" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.5.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
</package>
<package pkgid="81a1683292f9130eccb61da1b850d152f4721307a59264b91bba0bae3fc0ef4b" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.5.2" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
</package>
<package pkgid="f9e9aae80c7fb6cd47b748f41ab7abb977a7d9769af227175b99dd821716afd4" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.6.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
</package>
<package pkgid="8b76948facdf4acf79815fe8e793b02f3b0f4a50d8b3d87393934a29006de5d4" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.7.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
</package>
<package pkgid="6735b2df606f06dcc95f199bd597208328567fb8c705ff257fee89b09a16a5c0" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.8.0" rel="2.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-2" date="1526558400">- Update to 52.8.0</changelog>
</package>
<package pkgid="9ff70a180e4178d9348d8abb9970e953c9cf4ff53773fcc4a7215c455765e8d5" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.9.1" rel="1.el6"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-2" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.9.1-1" date="1531224000">- Update to 52.9.1</changelog>
</package>
<package pkgid="8aec597938c0b09a15aefb9276d545ad78529d53e14491607d4d3ca2f548da4a" name="thunderbird" arch="i686">
  <version epoch="0" ver="60.2.1" rel="5.el6"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.1-2" date="1538568000">- Update to 60.2.1
- Added fix for rhbz#1546988</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.1-3" date="1539172800">- Reverting deleting of key3db</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.1-5" date="1539691200">- Fixing minor issues</changelog>
</package>
<package pkgid="2af08ab2baf1d50c7b58c959a2707d6b5b065095221f6d14e82dc29b77e54a6e" name="thunderbird" arch="i686">
  <version epoch="0" ver="60.3.0" rel="1.el6"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.1-5" date="1539691200">- Fixing minor issues</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.1-6" date="1540987200">- Fixed missing calendar langpacks</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.3.0-1" date="1540987201">- Update to 60.3.0</changelog>
</package>
<package pkgid="b7ad2f390828354c97a2d2d17fcb4cc5043ebf4639f48bd6764a5783502b9a43" name="thunderbird" arch="i686">
  <version epoch="0" ver="60.4.0" rel="1.el6"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.2.1-6" date="1540987200">- Fixed missing calendar langpacks</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.3.0-1" date="1540987201">- Update to 60.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.4.0-1" date="1546516800">- Update to 60.4.0</changelog>
</package>
<package pkgid="7d9fc59db28172c2a1a0d7ca5349ab4889280b7ff13af392a17da772ad6e24f4" name="thunderbird" arch="i686">
  <version epoch="0" ver="60.5.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.3.0-1" date="1540987200">- Update to 60.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.4.0-1" date="1546516800">- Update to 60.4.0</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.5.0-1" date="1548763200">- Update to 60.5.0</changelog>
</package>
<package pkgid="953972d870394e5149ca8a39e4d09b097f62a3b32c3f79eb196320061e925d23" name="thunderbird" arch="i686">
  <version epoch="0" ver="60.6.1" rel="1.el6_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.5.0-1" date="1548763200">- Update to 60.5.0</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.6.0-1" date="1552996800">- Update to 60.6.0</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.6.1-1" date="1553515200">- Update to 60.6.1</changelog>
</package>
<package pkgid="9cb51ee1aa6e8d33d5673030813a1a2c0121cfef9f46a58b3f52da36d38991ed" name="thunderbird" arch="i686">
  <version epoch="0" ver="60.7.0" rel="1.el6_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.6.0-1" date="1552996800">- Update to 60.6.0</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.6.1-1" date="1553515200">- Update to 60.6.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.7.0-1" date="1558958400">- Update to 60.7.0</changelog>
</package>
<package pkgid="ac3af04e22e919de7d6e00c1d98b762aaa1172b051bad624465fb574976e1ad5" name="thunderbird" arch="i686">
  <version epoch="0" ver="60.7.2" rel="2.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.7.1-1" date="1560859200">- Update to 60.7.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.7.2-1" date="1561032000">- Update to 60.7.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.7.2-2" date="1561118400">- Update to 60.7.2 build2</changelog>
</package>
<package pkgid="39b18d2d214ff6523c311647a0bb19f6b561397a76594229b991bc3e7f0e3f9c" name="thunderbird" arch="i686">
  <version epoch="0" ver="60.8.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.7.2-2" date="1561118400">- Update to 60.7.2 build2</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.7.2-3" date="1562155200">- Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate
  with gmail with ssl/tls and OAuth2.</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.8.0-1" date="1562241600">- Updated to 60.8.0</changelog>
</package>
<package pkgid="bb2288bb57d83f968dc3fb13a99801f177fb32e97960b0b139b8d1cf1684afd6" name="thunderbird" arch="i686">
  <version epoch="0" ver="60.9.0" rel="1.el6_10"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.7.2-3" date="1562155200">- Rebuild to fix rhbz#1725919 - Thunderbird fails to authenticate
  with gmail with ssl/tls and OAuth2.</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.8.0-1" date="1562241600">- Updated to 60.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.9.0-1" date="1567598400">- Update to 60.9.0</changelog>
</package>
<package pkgid="bced70b3e467495f91a0f3d97128ced58d3af61b150ed08cd787a8112aadba81" name="thunderbird" arch="i686">
  <version epoch="0" ver="68.10.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.8.0-1" date="1588680000">- Update to 68.8.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.9.0-1" date="1591358400">- Update to 68.9.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.10.0-1" date="1594209600">- Update to 68.10.0 build1</changelog>
</package>
<package pkgid="3ab0f800b68a46147163fa9338f92b1b6d143eb92ec672778cc34a29cc1de347" name="thunderbird" arch="i686">
  <version epoch="0" ver="68.11.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.9.0-1" date="1591358400">- Update to 68.9.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.10.0-1" date="1594209600">- Update to 68.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.11.0-1" date="1596542400">- Update to 68.11.0 build1</changelog>
</package>
<package pkgid="fc8c1299420df9d20c220963de6dccba892777a75547c809f314a26993108e0f" name="thunderbird" arch="i686">
  <version epoch="0" ver="68.12.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.10.0-1" date="1594209600">- Update to 68.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.11.0-1" date="1596542400">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.12.0-1" date="1599048000">- Update to 68.12.0 build1</changelog>
</package>
<package pkgid="0126ff4bb78e62e5eb5abc89cd8ec1104e94d6f5fc113cd47a3196e21b0f2f2b" name="thunderbird" arch="i686">
  <version epoch="0" ver="68.2.0" rel="2.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.1.1-2" date="1570104000">- Update to 68.1.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.2.0-1" date="1571745600">- Update to 68.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.2.0-2" date="1572004800">- Added patch for TLS 1.3 support.</changelog>
</package>
<package pkgid="30bc8e5a09522ea8c29e705689241a95b497f4923aa03ba06d7dc5e443bad8cf" name="thunderbird" arch="i686">
  <version epoch="0" ver="68.3.0" rel="3.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.2.0-1" date="1571745600">- Update to 68.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.2.0-2" date="1572004800">- Added patch for TLS 1.3 support.</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.3.0-3" date="1575288000">- Update to 68.3.0 build2</changelog>
</package>
<package pkgid="d753f03d812a2ecad2a1581e886186b9ae14fe92451e50f5a9c442b4688941ee" name="thunderbird" arch="i686">
  <version epoch="0" ver="68.4.1" rel="2.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.2.0-2" date="1572004800">- Added patch for TLS 1.3 support.</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.3.0-2" date="1575288000">- Update to 68.3.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.4.1-2" date="1578916800">- Update to 68.4.1 build1</changelog>
</package>
<package pkgid="c0926310db6c871dada50f39e93fdb3fdc6ba4fdd76b43f00ae8a021004c505a" name="thunderbird" arch="i686">
  <version epoch="0" ver="68.5.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.3.0-2" date="1575288000">- Update to 68.3.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.4.1-2" date="1578916800">- Update to 68.4.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.5.0-1" date="1581595200">- Update to 68.5.0 build1</changelog>
</package>
<package pkgid="5dc51156f7cfde9e7b4011ad5ac0b886f4bdff0babd05ad96c87e034146aafaf" name="thunderbird" arch="i686">
  <version epoch="0" ver="68.6.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.4.1-2" date="1578916800">- Update to 68.4.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.5.0-1" date="1581595200">- Update to 68.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.6.0-1" date="1584100800">- Update to 68.6.0 build2</changelog>
</package>
<package pkgid="983056da56ace25744770efbca29f16a2969af82b7ea88a13288c835d054f965" name="thunderbird" arch="i686">
  <version epoch="0" ver="68.7.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.5.0-1" date="1581595200">- Update to 68.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.6.0-1" date="1584100800">- Update to 68.6.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.7.0-1" date="1586865600">- Update to 68.7.0 build1</changelog>
</package>
<package pkgid="276f363d8ddc3552bf135342ffb2a4acd400cbc1e452e3b7edeffc0fd6a115f5" name="thunderbird" arch="i686">
  <version epoch="0" ver="68.8.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.6.0-1" date="1584100800">- Update to 68.6.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.7.0-1" date="1586865600">- Update to 68.7.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.8.0-1" date="1588680000">- Update to 68.8.0 build2</changelog>
</package>
<package pkgid="2c9535e4c563fe491472ccb4ba4be8e3ab7ce8363295b2d31a98855b1efb6072" name="thunderbird" arch="i686">
  <version epoch="0" ver="68.9.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.7.0-1" date="1586865600">- Update to 68.7.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.8.0-1" date="1588680000">- Update to 68.8.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.9.0-1" date="1591358400">- Update to 68.9.0 build1</changelog>
</package>
<package pkgid="253b05f073eee8471a5935e4cf64b850d9e8bcbf32c6435d75b9c3135a513f9a" name="thunderbird" arch="i686">
  <version epoch="0" ver="78.3.1" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.1-1" date="1599566400">- Update to 78.2.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.0-3" date="1600516800">- Update to 78.3.0 build1
- Remove librdp.so as long as we cannot ship it in RHEL</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.1-1" date="1601380800">- Update to 78.3.1 build1</changelog>
</package>
<package pkgid="b3bcfcbfbae87c3e35b9a3cb52cbf6886d567dc2168c3da16a6a730bfcd09be4" name="thunderbird" arch="i686">
  <version epoch="0" ver="78.4.0" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.0-3" date="1600516800">- Update to 78.3.0 build1
- Remove librdp.so as long as we cannot ship it in RHEL</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.1-1" date="1601380800">- Update to 78.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.0-1" date="1603281600">- Update to 78.4.0 build1
- Disabled telemetry</changelog>
</package>
<package pkgid="b4e05ca3c0a93aa6a41ca5b53619289362f9bf4a3d840b061867f5c803397a3a" name="thunderbird" arch="i686">
  <version epoch="0" ver="78.4.3" rel="1.el6_10"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.1-1" date="1601380800">- Update to 78.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.0-1" date="1603281600">- Update to 78.4.0 build1
- Disabled telemetry</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.3-1" date="1605182400">- Update to 78.4.3</changelog>
</package>
<package pkgid="06e84507399c79309a7cd092f4a6883075dae537a3764e1de1de3fc81a0c0950" name="thunderbird" arch="i686">
  <version epoch="0" ver="78.5.0" rel="1.el6_10"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.0-1" date="1603281600">- Update to 78.4.0 build1
- Disabled telemetry</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.3-1" date="1605182400">- Update to 78.4.3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build3</changelog>
</package>
<package pkgid="867ca7ad23a528532129ba49f07d0c063f2d9ffb255e73b34f5096208294de55" name="tigervnc" arch="i686">
  <version epoch="0" ver="1.1.0" rel="24.el6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; 1.1.0-22" date="1485345600">- Fix buffer overflow in FullFramePixelBuffer::fillRect
  Resolves: bz#1416289</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; 1.1.0-23" date="1485518400">- Fix buffer overflow in FullFramePixelBuffer::fillRect
  Resolves: bz#1416289</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; 1.1.0-24" date="1486123200">- Proper global init/deinit of GnuTLS
  Resolves: bz#1418946</changelog>
</package>
<package pkgid="4c632dbbb7ad58affa07b5472ef46160406c724d4c5c3e3e7b4707b1a14c2f88" name="tigervnc-server" arch="i686">
  <version epoch="0" ver="1.1.0" rel="24.el6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; 1.1.0-22" date="1485345600">- Fix buffer overflow in FullFramePixelBuffer::fillRect
  Resolves: bz#1416289</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; 1.1.0-23" date="1485518400">- Fix buffer overflow in FullFramePixelBuffer::fillRect
  Resolves: bz#1416289</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; 1.1.0-24" date="1486123200">- Proper global init/deinit of GnuTLS
  Resolves: bz#1418946</changelog>
</package>
<package pkgid="c205bf42bb39388fde4e9bd15f777a9b805804c84da095fe21d437ec9227f8b8" name="tigervnc-server-applet" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="24.el6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; 1.1.0-22" date="1485345600">- Fix buffer overflow in FullFramePixelBuffer::fillRect
  Resolves: bz#1416289</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; 1.1.0-23" date="1485518400">- Fix buffer overflow in FullFramePixelBuffer::fillRect
  Resolves: bz#1416289</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; 1.1.0-24" date="1486123200">- Proper global init/deinit of GnuTLS
  Resolves: bz#1418946</changelog>
</package>
<package pkgid="f3200eb0df734248354d309960c0cc9def18353bedbdcc6724669daf94dcf13a" name="tigervnc-server-module" arch="i686">
  <version epoch="0" ver="1.1.0" rel="24.el6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; 1.1.0-22" date="1485345600">- Fix buffer overflow in FullFramePixelBuffer::fillRect
  Resolves: bz#1416289</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; 1.1.0-23" date="1485518400">- Fix buffer overflow in FullFramePixelBuffer::fillRect
  Resolves: bz#1416289</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; 1.1.0-24" date="1486123200">- Proper global init/deinit of GnuTLS
  Resolves: bz#1418946</changelog>
</package>
<package pkgid="b771f9ad57037460edb6a26b014b32f99837e48defb64aa464b1d0ed974ad3cb" name="tkinter" arch="i686">
  <version epoch="0" ver="2.6.6" rel="66.el6_8"/>
  <changelog author="Matej Stuchlik &lt;mstuchli@redhat.com&gt; - 2.6.6-64" date="1432296000">- Enable use of deepcopy() with instance methods
Resolves: rhbz#1223037</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.6.6-65" date="1466510400">- Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
  Raise an error when STARTTLS fails (upstream patch)
- Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
  Disabled HTTP header injections in httplib (upstream patch)
Resolves: rhbz#1346354</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-66" date="1470744000">- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359161</changelog>
</package>
<package pkgid="719ce1438f433b68579f87f10c6915cf939f7108d6d627daa9a6192c1681ab7f" name="tkinter" arch="i686">
  <version epoch="0" ver="2.6.6" rel="68.el6_10"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-66" date="1470744000">- Fix for CVE-2016-1000110 HTTPoxy attack
Resolves: rhbz#1359162</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-67" date="1559736000">- Security fix for CVE-2019-9636
Resolves: rhbz#1716744</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.6.6-68" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1716744</changelog>
</package>
<package pkgid="a1e705a5ee7246db14182cbceeefea237e7d09d626ff7fb9ce5709eeeafe7440" name="tomcat6" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="105.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-102" date="1485259200">- Resolves: rhbz#1413589 CVE-2016-8745 tomcat6: tomcat: information disclosure due to incorrect Processor sharing
- Resolves: rhbz#1402664 CVE-2016-6816 tomcat6: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-104" date="1485432000">- Related: rhbz#1402664 build. reverting ExcludeArch to fix composes</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-105" date="1487592000">- Related: rhbz#1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un-encoded characters
- Related: rhbz#1402664 CVE-2016-6816 Resolving a security regression (2017-6056) caused by CVE-2016-6816</changelog>
</package>
<package pkgid="c26fdc8896543d7817670148450f37c6cfc3c25908a29dd8a794a38b423f7ae2" name="tomcat6" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="111.el6_9"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-109" date="1497528000">- Resolves: rhbz#1461851 The tomcat6 build is incompatible with the ECJ update</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-110" date="1498564800">- Resolves: rhbz#1461292 CVE-2017-5664 tomcat6: tomcat: Security constrained bypass in error page mechanism</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-111" date="1507809600">- Resolves: rhbz#1498345 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws</changelog>
</package>
<package pkgid="e67c6d4b8ff53161a4042eaf73db125e581793fef161651e13cb59988f1fc6dc" name="tomcat6" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="114.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-112" date="1583496000">- Resolves: rhbz#1806803 CVE-2020-1938 tomcat6: tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
</package>
<package pkgid="f1b3b894b412ff6b21743ec297617202a22eef5f2b1ef6e897d14e2d17e73306" name="tomcat6" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="115.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-115" date="1590667200">- Resolves: CVE-2020-9484 tomcat6: tomcat: Apache Tomcat Remote Code Execution via session persistence</changelog>
</package>
<package pkgid="fe7ad699b928137b1f28ed810114e3a3e87c70ac2ba81a8c493633cc2a3e8b47" name="tomcat6" arch="i686">
  <version epoch="0" ver="6.0.24" rel="94.el6_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-90" date="1431691200">- Related: rhbz#1042811 left over test value in the conf</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-93" date="1450094400">- Resolves: rhbz#1301646 Resolving NIO connector memory leak</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-94" date="1453982400">- Resolves: rhbz#1293289 CVE-2014-7810 tomcat6 security manager bypass via EL expressions</changelog>
</package>
<package pkgid="688d83a1790d5dd61551d505365acd8bd212c7203f691916a0bbecce9418bec2" name="tomcat6" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="98.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-96" date="1468929600">- Resolves: rhbz#1357123 rpm -V tomcat6 fails due on /var/log/tomcat6/catalina.out</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-97" date="1471262400">- Resolves: rhbz#1367051 CVE-2015-5174 URL Normalization issue
- Resolves: rhbz#1367054 CVE-2016-0706 Security Manager bypass via StatusManagerServlet
- Resolves: rhbz#1367058 CVE-2016-0714 Security Manager bypass via persistence mechanisms
- Resolves: rhbz#1367054 CVE-2015-5345 Directory disclosure</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-98" date="1471953600">- Resolves: rhbz#1362210 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368119</changelog>
</package>
<package pkgid="5b1e9173f10acc133e4b2423a69dae930825e7ce85fdae97d86dcc9e1820fa26" name="tomcat6-admin-webapps" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="105.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-102" date="1485259200">- Resolves: rhbz#1413589 CVE-2016-8745 tomcat6: tomcat: information disclosure due to incorrect Processor sharing
- Resolves: rhbz#1402664 CVE-2016-6816 tomcat6: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-104" date="1485432000">- Related: rhbz#1402664 build. reverting ExcludeArch to fix composes</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-105" date="1487592000">- Related: rhbz#1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un-encoded characters
- Related: rhbz#1402664 CVE-2016-6816 Resolving a security regression (2017-6056) caused by CVE-2016-6816</changelog>
</package>
<package pkgid="8708517cbfe8ee1077fb7ac81870a410274b8d6e94b4369a230186ec5255fcd2" name="tomcat6-admin-webapps" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="111.el6_9"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-109" date="1497528000">- Resolves: rhbz#1461851 The tomcat6 build is incompatible with the ECJ update</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-110" date="1498564800">- Resolves: rhbz#1461292 CVE-2017-5664 tomcat6: tomcat: Security constrained bypass in error page mechanism</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-111" date="1507809600">- Resolves: rhbz#1498345 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws</changelog>
</package>
<package pkgid="a05f1b783d85bc1f7f64e7bb59d7b43698f9bb368d31e16d36a3ee271d83fdae" name="tomcat6-admin-webapps" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="114.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-112" date="1583496000">- Resolves: rhbz#1806803 CVE-2020-1938 tomcat6: tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
</package>
<package pkgid="ab7257bf316de7c76f7c6f94963b25b7249b67eab8917d60658271ad54656af8" name="tomcat6-admin-webapps" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="115.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-115" date="1590667200">- Resolves: CVE-2020-9484 tomcat6: tomcat: Apache Tomcat Remote Code Execution via session persistence</changelog>
</package>
<package pkgid="27c45868f4388f2376dec499e1140f81cebc4770eacf1e0ee4ff526f645e7838" name="tomcat6-admin-webapps" arch="i686">
  <version epoch="0" ver="6.0.24" rel="94.el6_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-90" date="1431691200">- Related: rhbz#1042811 left over test value in the conf</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-93" date="1450094400">- Resolves: rhbz#1301646 Resolving NIO connector memory leak</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-94" date="1453982400">- Resolves: rhbz#1293289 CVE-2014-7810 tomcat6 security manager bypass via EL expressions</changelog>
</package>
<package pkgid="8f6175283b9801d4ff2a5fa9024f8ff9f5867a1362dd0ffcbc64b1147e97ffca" name="tomcat6-admin-webapps" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="98.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-96" date="1468929600">- Resolves: rhbz#1357123 rpm -V tomcat6 fails due on /var/log/tomcat6/catalina.out</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-97" date="1471262400">- Resolves: rhbz#1367051 CVE-2015-5174 URL Normalization issue
- Resolves: rhbz#1367054 CVE-2016-0706 Security Manager bypass via StatusManagerServlet
- Resolves: rhbz#1367058 CVE-2016-0714 Security Manager bypass via persistence mechanisms
- Resolves: rhbz#1367054 CVE-2015-5345 Directory disclosure</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-98" date="1471953600">- Resolves: rhbz#1362210 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368119</changelog>
</package>
<package pkgid="83bf6794daa975bd0300c84411c602d6ede6046cb50bd74ca913934c81c0c3a4" name="tomcat6-docs-webapp" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="105.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-102" date="1485259200">- Resolves: rhbz#1413589 CVE-2016-8745 tomcat6: tomcat: information disclosure due to incorrect Processor sharing
- Resolves: rhbz#1402664 CVE-2016-6816 tomcat6: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-104" date="1485432000">- Related: rhbz#1402664 build. reverting ExcludeArch to fix composes</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-105" date="1487592000">- Related: rhbz#1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un-encoded characters
- Related: rhbz#1402664 CVE-2016-6816 Resolving a security regression (2017-6056) caused by CVE-2016-6816</changelog>
</package>
<package pkgid="4801abedcb8a8aead259080473f95ce08a49dda6b960c1a66deeb17b7ad1c243" name="tomcat6-docs-webapp" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="111.el6_9"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-109" date="1497528000">- Resolves: rhbz#1461851 The tomcat6 build is incompatible with the ECJ update</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-110" date="1498564800">- Resolves: rhbz#1461292 CVE-2017-5664 tomcat6: tomcat: Security constrained bypass in error page mechanism</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-111" date="1507809600">- Resolves: rhbz#1498345 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws</changelog>
</package>
<package pkgid="7bc43c2a6010849c4a713e025c2ffe605601df8cd3f5af5027c978b8da6c7c6f" name="tomcat6-docs-webapp" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="114.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-112" date="1583496000">- Resolves: rhbz#1806803 CVE-2020-1938 tomcat6: tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
</package>
<package pkgid="1266db8f8dc17028c4ecf3a1e1ca909316d16467f2707a4d011c3a593f8ec9dd" name="tomcat6-docs-webapp" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="115.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-115" date="1590667200">- Resolves: CVE-2020-9484 tomcat6: tomcat: Apache Tomcat Remote Code Execution via session persistence</changelog>
</package>
<package pkgid="b19b2f9a61dd4307b3c3f78bfcaa920cd23d9110c398c72027239626757c959b" name="tomcat6-docs-webapp" arch="i686">
  <version epoch="0" ver="6.0.24" rel="94.el6_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-90" date="1431691200">- Related: rhbz#1042811 left over test value in the conf</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-93" date="1450094400">- Resolves: rhbz#1301646 Resolving NIO connector memory leak</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-94" date="1453982400">- Resolves: rhbz#1293289 CVE-2014-7810 tomcat6 security manager bypass via EL expressions</changelog>
</package>
<package pkgid="b8965f0d81de61aaa637505eb75d6f8c506adbb422519ccb097e460172147364" name="tomcat6-docs-webapp" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="98.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-96" date="1468929600">- Resolves: rhbz#1357123 rpm -V tomcat6 fails due on /var/log/tomcat6/catalina.out</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-97" date="1471262400">- Resolves: rhbz#1367051 CVE-2015-5174 URL Normalization issue
- Resolves: rhbz#1367054 CVE-2016-0706 Security Manager bypass via StatusManagerServlet
- Resolves: rhbz#1367058 CVE-2016-0714 Security Manager bypass via persistence mechanisms
- Resolves: rhbz#1367054 CVE-2015-5345 Directory disclosure</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-98" date="1471953600">- Resolves: rhbz#1362210 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368119</changelog>
</package>
<package pkgid="8e35a1f4b7cd8ca05549622fe14522ebdd0be5ced4405d39f2d44d0bcd3af74b" name="tomcat6-el-2.1-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="105.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-102" date="1485259200">- Resolves: rhbz#1413589 CVE-2016-8745 tomcat6: tomcat: information disclosure due to incorrect Processor sharing
- Resolves: rhbz#1402664 CVE-2016-6816 tomcat6: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-104" date="1485432000">- Related: rhbz#1402664 build. reverting ExcludeArch to fix composes</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-105" date="1487592000">- Related: rhbz#1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un-encoded characters
- Related: rhbz#1402664 CVE-2016-6816 Resolving a security regression (2017-6056) caused by CVE-2016-6816</changelog>
</package>
<package pkgid="a242e04823176bb9a30a1932b0e9aa0f534faf13bdb9155fe66f2deebd27d227" name="tomcat6-el-2.1-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="111.el6_9"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-109" date="1497528000">- Resolves: rhbz#1461851 The tomcat6 build is incompatible with the ECJ update</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-110" date="1498564800">- Resolves: rhbz#1461292 CVE-2017-5664 tomcat6: tomcat: Security constrained bypass in error page mechanism</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-111" date="1507809600">- Resolves: rhbz#1498345 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws</changelog>
</package>
<package pkgid="400c301bcb75cf7b39b7016f5e023c30efe45e3d25aa61236c63533edb733aae" name="tomcat6-el-2.1-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="114.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-112" date="1583496000">- Resolves: rhbz#1806803 CVE-2020-1938 tomcat6: tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
</package>
<package pkgid="5ba010b035d1372221917d23a762d5138648fb2669b799bc0806d7f2102bbcf2" name="tomcat6-el-2.1-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="115.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-115" date="1590667200">- Resolves: CVE-2020-9484 tomcat6: tomcat: Apache Tomcat Remote Code Execution via session persistence</changelog>
</package>
<package pkgid="7cff0d6dcdd25e863000ad4aa75445da0d0d3861bef0d4cb0199543a0965eb35" name="tomcat6-el-2.1-api" arch="i686">
  <version epoch="0" ver="6.0.24" rel="94.el6_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-90" date="1431691200">- Related: rhbz#1042811 left over test value in the conf</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-93" date="1450094400">- Resolves: rhbz#1301646 Resolving NIO connector memory leak</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-94" date="1453982400">- Resolves: rhbz#1293289 CVE-2014-7810 tomcat6 security manager bypass via EL expressions</changelog>
</package>
<package pkgid="ca084b61bfb27573109c778cbe7c0d67ffa37681062bccde65e6b97cf0cbb089" name="tomcat6-el-2.1-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="98.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-96" date="1468929600">- Resolves: rhbz#1357123 rpm -V tomcat6 fails due on /var/log/tomcat6/catalina.out</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-97" date="1471262400">- Resolves: rhbz#1367051 CVE-2015-5174 URL Normalization issue
- Resolves: rhbz#1367054 CVE-2016-0706 Security Manager bypass via StatusManagerServlet
- Resolves: rhbz#1367058 CVE-2016-0714 Security Manager bypass via persistence mechanisms
- Resolves: rhbz#1367054 CVE-2015-5345 Directory disclosure</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-98" date="1471953600">- Resolves: rhbz#1362210 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368119</changelog>
</package>
<package pkgid="ea8016853a7d1a78e745768c32ec8750afa8ece6463756abe5c320ea25e72358" name="tomcat6-javadoc" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="105.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-102" date="1485259200">- Resolves: rhbz#1413589 CVE-2016-8745 tomcat6: tomcat: information disclosure due to incorrect Processor sharing
- Resolves: rhbz#1402664 CVE-2016-6816 tomcat6: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-104" date="1485432000">- Related: rhbz#1402664 build. reverting ExcludeArch to fix composes</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-105" date="1487592000">- Related: rhbz#1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un-encoded characters
- Related: rhbz#1402664 CVE-2016-6816 Resolving a security regression (2017-6056) caused by CVE-2016-6816</changelog>
</package>
<package pkgid="d92cd24c3791076fe5d4220d3db6eec296de2fb0501e9935c0b672fc535bf7fc" name="tomcat6-javadoc" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="111.el6_9"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-109" date="1497528000">- Resolves: rhbz#1461851 The tomcat6 build is incompatible with the ECJ update</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-110" date="1498564800">- Resolves: rhbz#1461292 CVE-2017-5664 tomcat6: tomcat: Security constrained bypass in error page mechanism</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-111" date="1507809600">- Resolves: rhbz#1498345 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws</changelog>
</package>
<package pkgid="5c1707db16c145ceb07eafe23966b012b420510d57599dd01709a2fb947c721b" name="tomcat6-javadoc" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="114.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-112" date="1583496000">- Resolves: rhbz#1806803 CVE-2020-1938 tomcat6: tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
</package>
<package pkgid="6125b1df82d8470a1194b539578bab6a5b579b82d48b292677120b3b04a791e6" name="tomcat6-javadoc" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="115.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-115" date="1590667200">- Resolves: CVE-2020-9484 tomcat6: tomcat: Apache Tomcat Remote Code Execution via session persistence</changelog>
</package>
<package pkgid="15d78d48704383a1d058a042bb5ad0e0f0ef41982a40f26ec178e73485e47efe" name="tomcat6-javadoc" arch="i686">
  <version epoch="0" ver="6.0.24" rel="94.el6_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-90" date="1431691200">- Related: rhbz#1042811 left over test value in the conf</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-93" date="1450094400">- Resolves: rhbz#1301646 Resolving NIO connector memory leak</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-94" date="1453982400">- Resolves: rhbz#1293289 CVE-2014-7810 tomcat6 security manager bypass via EL expressions</changelog>
</package>
<package pkgid="ebde1556a415a96f7913183c895633d0512fb84c48a57f625ea9240f9c6f000e" name="tomcat6-javadoc" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="98.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-96" date="1468929600">- Resolves: rhbz#1357123 rpm -V tomcat6 fails due on /var/log/tomcat6/catalina.out</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-97" date="1471262400">- Resolves: rhbz#1367051 CVE-2015-5174 URL Normalization issue
- Resolves: rhbz#1367054 CVE-2016-0706 Security Manager bypass via StatusManagerServlet
- Resolves: rhbz#1367058 CVE-2016-0714 Security Manager bypass via persistence mechanisms
- Resolves: rhbz#1367054 CVE-2015-5345 Directory disclosure</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-98" date="1471953600">- Resolves: rhbz#1362210 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368119</changelog>
</package>
<package pkgid="d9c68e6aa964d99eb100026f27c342d9773a1b1927aff08aee291d38cd0d2a06" name="tomcat6-jsp-2.1-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="105.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-102" date="1485259200">- Resolves: rhbz#1413589 CVE-2016-8745 tomcat6: tomcat: information disclosure due to incorrect Processor sharing
- Resolves: rhbz#1402664 CVE-2016-6816 tomcat6: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-104" date="1485432000">- Related: rhbz#1402664 build. reverting ExcludeArch to fix composes</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-105" date="1487592000">- Related: rhbz#1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un-encoded characters
- Related: rhbz#1402664 CVE-2016-6816 Resolving a security regression (2017-6056) caused by CVE-2016-6816</changelog>
</package>
<package pkgid="2cb699feacba802bd8b22e797994513874296ea630c508ce2efc3f3284641404" name="tomcat6-jsp-2.1-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="111.el6_9"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-109" date="1497528000">- Resolves: rhbz#1461851 The tomcat6 build is incompatible with the ECJ update</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-110" date="1498564800">- Resolves: rhbz#1461292 CVE-2017-5664 tomcat6: tomcat: Security constrained bypass in error page mechanism</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-111" date="1507809600">- Resolves: rhbz#1498345 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws</changelog>
</package>
<package pkgid="26ce9c8aac1c86685dab7592ae4c24959f039e902114d6de2378052e97eb31e2" name="tomcat6-jsp-2.1-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="114.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-112" date="1583496000">- Resolves: rhbz#1806803 CVE-2020-1938 tomcat6: tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
</package>
<package pkgid="befc720145865fd7c2c8212e17ff455424fa5deb7121938b6aaec3cdbc744dfc" name="tomcat6-jsp-2.1-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="115.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-115" date="1590667200">- Resolves: CVE-2020-9484 tomcat6: tomcat: Apache Tomcat Remote Code Execution via session persistence</changelog>
</package>
<package pkgid="b60cd7daf90020dd1a35ed433ec89059e3d216a5d346a6a708679bbcfb00cd1c" name="tomcat6-jsp-2.1-api" arch="i686">
  <version epoch="0" ver="6.0.24" rel="94.el6_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-90" date="1431691200">- Related: rhbz#1042811 left over test value in the conf</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-93" date="1450094400">- Resolves: rhbz#1301646 Resolving NIO connector memory leak</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-94" date="1453982400">- Resolves: rhbz#1293289 CVE-2014-7810 tomcat6 security manager bypass via EL expressions</changelog>
</package>
<package pkgid="b12e3c125c38385f2095c9fbbf121c4e2bbc25e1034da9d221d48526c2aef61f" name="tomcat6-jsp-2.1-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="98.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-96" date="1468929600">- Resolves: rhbz#1357123 rpm -V tomcat6 fails due on /var/log/tomcat6/catalina.out</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-97" date="1471262400">- Resolves: rhbz#1367051 CVE-2015-5174 URL Normalization issue
- Resolves: rhbz#1367054 CVE-2016-0706 Security Manager bypass via StatusManagerServlet
- Resolves: rhbz#1367058 CVE-2016-0714 Security Manager bypass via persistence mechanisms
- Resolves: rhbz#1367054 CVE-2015-5345 Directory disclosure</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-98" date="1471953600">- Resolves: rhbz#1362210 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368119</changelog>
</package>
<package pkgid="2280198b9fd68113650bcdf121632458836d8c63a4a95266322908b424efef88" name="tomcat6-lib" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="105.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-102" date="1485259200">- Resolves: rhbz#1413589 CVE-2016-8745 tomcat6: tomcat: information disclosure due to incorrect Processor sharing
- Resolves: rhbz#1402664 CVE-2016-6816 tomcat6: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-104" date="1485432000">- Related: rhbz#1402664 build. reverting ExcludeArch to fix composes</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-105" date="1487592000">- Related: rhbz#1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un-encoded characters
- Related: rhbz#1402664 CVE-2016-6816 Resolving a security regression (2017-6056) caused by CVE-2016-6816</changelog>
</package>
<package pkgid="70df8a6bfa699bce9f5d0c0c61a70e9e862ffdca4465ecdb0da239bc54c43fa7" name="tomcat6-lib" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="111.el6_9"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-109" date="1497528000">- Resolves: rhbz#1461851 The tomcat6 build is incompatible with the ECJ update</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-110" date="1498564800">- Resolves: rhbz#1461292 CVE-2017-5664 tomcat6: tomcat: Security constrained bypass in error page mechanism</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-111" date="1507809600">- Resolves: rhbz#1498345 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws</changelog>
</package>
<package pkgid="e5f8748e8b5e9f488f39dc02b6fdcec0a2aaa655942fbb70bf83e2cc128fbaf5" name="tomcat6-lib" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="114.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-112" date="1583496000">- Resolves: rhbz#1806803 CVE-2020-1938 tomcat6: tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
</package>
<package pkgid="d6c3b2b895ffbcb24ce3002b1f7ada3852ef24da299fc828750bc1eb1b930991" name="tomcat6-lib" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="115.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-115" date="1590667200">- Resolves: CVE-2020-9484 tomcat6: tomcat: Apache Tomcat Remote Code Execution via session persistence</changelog>
</package>
<package pkgid="95b0a118859bbfc12544ad6156211f9b5b1de6d8c3bb4e475b9930ccd65c07f9" name="tomcat6-lib" arch="i686">
  <version epoch="0" ver="6.0.24" rel="94.el6_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-90" date="1431691200">- Related: rhbz#1042811 left over test value in the conf</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-93" date="1450094400">- Resolves: rhbz#1301646 Resolving NIO connector memory leak</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-94" date="1453982400">- Resolves: rhbz#1293289 CVE-2014-7810 tomcat6 security manager bypass via EL expressions</changelog>
</package>
<package pkgid="480bb7f17c104c0eb270c574ab00dc29b74e42aa21143061ac1fc44ef114c74c" name="tomcat6-lib" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="98.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-96" date="1468929600">- Resolves: rhbz#1357123 rpm -V tomcat6 fails due on /var/log/tomcat6/catalina.out</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-97" date="1471262400">- Resolves: rhbz#1367051 CVE-2015-5174 URL Normalization issue
- Resolves: rhbz#1367054 CVE-2016-0706 Security Manager bypass via StatusManagerServlet
- Resolves: rhbz#1367058 CVE-2016-0714 Security Manager bypass via persistence mechanisms
- Resolves: rhbz#1367054 CVE-2015-5345 Directory disclosure</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-98" date="1471953600">- Resolves: rhbz#1362210 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368119</changelog>
</package>
<package pkgid="e377d5e4a3074598c9687e30471c4ef45312d40d5ed8b494a562c8b59e7e6c3d" name="tomcat6-servlet-2.5-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="105.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-102" date="1485259200">- Resolves: rhbz#1413589 CVE-2016-8745 tomcat6: tomcat: information disclosure due to incorrect Processor sharing
- Resolves: rhbz#1402664 CVE-2016-6816 tomcat6: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-104" date="1485432000">- Related: rhbz#1402664 build. reverting ExcludeArch to fix composes</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-105" date="1487592000">- Related: rhbz#1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un-encoded characters
- Related: rhbz#1402664 CVE-2016-6816 Resolving a security regression (2017-6056) caused by CVE-2016-6816</changelog>
</package>
<package pkgid="4a24723c75d4f6e6db258de8fd76ed277395ed575fe955f6145da0f295a03ddd" name="tomcat6-servlet-2.5-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="111.el6_9"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-109" date="1497528000">- Resolves: rhbz#1461851 The tomcat6 build is incompatible with the ECJ update</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-110" date="1498564800">- Resolves: rhbz#1461292 CVE-2017-5664 tomcat6: tomcat: Security constrained bypass in error page mechanism</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-111" date="1507809600">- Resolves: rhbz#1498345 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws</changelog>
</package>
<package pkgid="be3c60a3ba52795cf7a62ce5fb4a7ac8dc9f1dd2254b1af2dba4681bfd1fa6bb" name="tomcat6-servlet-2.5-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="114.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-112" date="1583496000">- Resolves: rhbz#1806803 CVE-2020-1938 tomcat6: tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
</package>
<package pkgid="d8c8a740ba3cc36e91a74d7bbae6901df18ebe696ea3bbbeab47b0b0b4571e7e" name="tomcat6-servlet-2.5-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="115.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-115" date="1590667200">- Resolves: CVE-2020-9484 tomcat6: tomcat: Apache Tomcat Remote Code Execution via session persistence</changelog>
</package>
<package pkgid="fdb384bb252b6148bfec7927fe256e33316799382918d8fc861b92ee53047d7b" name="tomcat6-servlet-2.5-api" arch="i686">
  <version epoch="0" ver="6.0.24" rel="94.el6_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-90" date="1431691200">- Related: rhbz#1042811 left over test value in the conf</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-93" date="1450094400">- Resolves: rhbz#1301646 Resolving NIO connector memory leak</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-94" date="1453982400">- Resolves: rhbz#1293289 CVE-2014-7810 tomcat6 security manager bypass via EL expressions</changelog>
</package>
<package pkgid="4f56c066c7ff970800d26305f6842d982d47ed8ba49d1533a00689ef2ba6e93b" name="tomcat6-servlet-2.5-api" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="98.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-96" date="1468929600">- Resolves: rhbz#1357123 rpm -V tomcat6 fails due on /var/log/tomcat6/catalina.out</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-97" date="1471262400">- Resolves: rhbz#1367051 CVE-2015-5174 URL Normalization issue
- Resolves: rhbz#1367054 CVE-2016-0706 Security Manager bypass via StatusManagerServlet
- Resolves: rhbz#1367058 CVE-2016-0714 Security Manager bypass via persistence mechanisms
- Resolves: rhbz#1367054 CVE-2015-5345 Directory disclosure</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-98" date="1471953600">- Resolves: rhbz#1362210 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368119</changelog>
</package>
<package pkgid="cc1ea43866eb7afe17d93428824316ab8093463ad18c185042dafc16ac1a9a00" name="tomcat6-webapps" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="105.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-102" date="1485259200">- Resolves: rhbz#1413589 CVE-2016-8745 tomcat6: tomcat: information disclosure due to incorrect Processor sharing
- Resolves: rhbz#1402664 CVE-2016-6816 tomcat6: tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-104" date="1485432000">- Related: rhbz#1402664 build. reverting ExcludeArch to fix composes</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-105" date="1487592000">- Related: rhbz#1402664 CVE-2016-6816 Adding system property from asfbz-60594 to allow use of some un-encoded characters
- Related: rhbz#1402664 CVE-2016-6816 Resolving a security regression (2017-6056) caused by CVE-2016-6816</changelog>
</package>
<package pkgid="9ebf33fcc9990522d5a4d32dbaa116cedbac8b40c04d01ff2922e9fd23e95750" name="tomcat6-webapps" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="111.el6_9"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-109" date="1497528000">- Resolves: rhbz#1461851 The tomcat6 build is incompatible with the ECJ update</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-110" date="1498564800">- Resolves: rhbz#1461292 CVE-2017-5664 tomcat6: tomcat: Security constrained bypass in error page mechanism</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-111" date="1507809600">- Resolves: rhbz#1498345 CVE-2017-12615 CVE-2017-12617 tomcat6: various flaws</changelog>
</package>
<package pkgid="4ce45e27aa33def8fbf9e9e7d2c6e87562ae1abbabd962b0130a07c4da5e3003" name="tomcat6-webapps" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="114.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-112" date="1583496000">- Resolves: rhbz#1806803 CVE-2020-1938 tomcat6: tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
</package>
<package pkgid="c91a7a99212042e51aa337f876498052253ab3e7c8b92122d9f4bf8e3e78dbed" name="tomcat6-webapps" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="115.el6_10"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-113" date="1583841600">- Related: rhbz#1806803 Add IIS attributes to filter pattern and update secret logic</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-114" date="1584360000">- Related: rhbz#1806803 Update patch to remove secret attribute renaming</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-115" date="1590667200">- Resolves: CVE-2020-9484 tomcat6: tomcat: Apache Tomcat Remote Code Execution via session persistence</changelog>
</package>
<package pkgid="c2aeeb52bc853872308bb53191ef86c320992efed6b31e2842edfd4e1857d32e" name="tomcat6-webapps" arch="i686">
  <version epoch="0" ver="6.0.24" rel="94.el6_7"/>
  <changelog author="David Knox &lt;dknox@redhat.com&gt; 0:6.0.24-90" date="1431691200">- Related: rhbz#1042811 left over test value in the conf</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-93" date="1450094400">- Resolves: rhbz#1301646 Resolving NIO connector memory leak</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-94" date="1453982400">- Resolves: rhbz#1293289 CVE-2014-7810 tomcat6 security manager bypass via EL expressions</changelog>
</package>
<package pkgid="2997ced8ecf9d7e179911e00ed63ba64cab978d9ee428cede4ebdb3a0b648fec" name="tomcat6-webapps" arch="noarch">
  <version epoch="0" ver="6.0.24" rel="98.el6_8"/>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-96" date="1468929600">- Resolves: rhbz#1357123 rpm -V tomcat6 fails due on /var/log/tomcat6/catalina.out</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-97" date="1471262400">- Resolves: rhbz#1367051 CVE-2015-5174 URL Normalization issue
- Resolves: rhbz#1367054 CVE-2016-0706 Security Manager bypass via StatusManagerServlet
- Resolves: rhbz#1367058 CVE-2016-0714 Security Manager bypass via persistence mechanisms
- Resolves: rhbz#1367054 CVE-2015-5345 Directory disclosure</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:6.0.24-98" date="1471953600">- Resolves: rhbz#1362210 CVE-2016-5388 Tomcat: CGI sets environmental variable based on user supplied Proxy request header
- Resolves: rhbz#1368119</changelog>
</package>
<package pkgid="e1d39ca6635d12b5aff96c9a3bb54e77e498925f25448ad99d75fae7c93d4b46" name="tzdata" arch="noarch">
  <version epoch="0" ver="2016a" rel="2.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015g-4" date="1450699200">- tzdata now performs /etc/localtime updates (#1289696)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-1" date="1453982400">- Rebase to 2016a
  - America/Cayman will not observe daylight saving this year after all.
    Revert our guess that it would.
  - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
  - Asia/Tehran now has DST predictions for the year 2038 and later,
    to be March 21 00:00 to September 21 00:00.  This is likely better
    than predicting no DST, albeit off by a day every now and then.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-2" date="1453982401">- Rebuild with --target rhel-6.8-noarch-candidate.</changelog>
</package>
<package pkgid="26296b31c8b0e451708f41b9a3e362571c26063ce3a57633f8d9e150f85c46c3" name="tzdata" arch="noarch">
  <version epoch="0" ver="2016b" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-1" date="1453982400">- Rebase to 2016a
  - America/Cayman will not observe daylight saving this year after all.
    Revert our guess that it would.
  - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
  - Asia/Tehran now has DST predictions for the year 2038 and later,
    to be March 21 00:00 to September 21 00:00.  This is likely better
    than predicting no DST, albeit off by a day every now and then.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-2" date="1453982401">- Rebuild with --target rhel-6.8-noarch-candidate.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016b-1" date="1457956800">- Rebase to 2016b
  - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
    Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
    2016-03-27 at 02:00 local time.  They need distinct zones since their
    post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
    Altai Republic, Russia, which will switch from +06 to +07 on the same date
    and local time.  The Astrakhan change is already official; the others have
    passed the first reading in the State Duma and are extremely likely.
    Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  - As a trial of a new system that needs less information to be made up,
    the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  - Haiti will not observe DST in 2016.
  - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
    Guess future transitions will be March's last
    Saturday at 01:00, not March's last Friday at 24:00.</changelog>
</package>
<package pkgid="39d9fd02578d12c1313cda546d1e6c41265b4aa9c28307f85c57c11aaf9af9cb" name="tzdata" arch="noarch">
  <version epoch="0" ver="2016c" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-2" date="1453982400">- Rebuild with --target rhel-6.8-noarch-candidate.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016b-1" date="1457956800">- Rebase to 2016b
  - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
    Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
    2016-03-27 at 02:00 local time.  They need distinct zones since their
    post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
    Altai Republic, Russia, which will switch from +06 to +07 on the same date
    and local time.  The Astrakhan change is already official; the others have
    passed the first reading in the State Duma and are extremely likely.
    Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  - As a trial of a new system that needs less information to be made up,
    the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  - Haiti will not observe DST in 2016.
  - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
    Guess future transitions will be March's last
    Saturday at 01:00, not March's last Friday at 24:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016c-1" date="1458734400">- Rebase to 2016c
  - Azerbaijan no longer observes DST.
  - Chile reverts from permanent to seasonal DST.</changelog>
</package>
<package pkgid="3a7d2866fe4e8248ab873f448c080c24a6b72883797e54dd1e772acbd9f53e49" name="tzdata" arch="noarch">
  <version epoch="0" ver="2016d" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016b-1" date="1457956800">- Rebase to 2016b
  - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
    Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
    2016-03-27 at 02:00 local time.  They need distinct zones since their
    post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
    Altai Republic, Russia, which will switch from +06 to +07 on the same date
    and local time.  The Astrakhan change is already official; the others have
    passed the first reading in the State Duma and are extremely likely.
    Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  - As a trial of a new system that needs less information to be made up,
    the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  - Haiti will not observe DST in 2016.
  - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
    Guess future transitions will be March's last
    Saturday at 01:00, not March's last Friday at 24:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016c-1" date="1458734400">- Rebase to 2016c
  - Azerbaijan no longer observes DST.
  - Chile reverts from permanent to seasonal DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016d-1" date="1461067200">- Rebase to 2016d
  - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
  - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
    at 02:00.</changelog>
</package>
<package pkgid="42427f93789cbf7a712c2b2842f7dde1645f624692e2fb9005af7381c487a2df" name="tzdata" arch="noarch">
  <version epoch="0" ver="2016e" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016c-1" date="1458734400">- Rebase to 2016c
  - Azerbaijan no longer observes DST.
  - Chile reverts from permanent to seasonal DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016d-1" date="1461067200">- Rebase to 2016d
  - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
  - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
    at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016e-1" date="1465905600">- Rebase to 2016e
  - Egypt reinstates DST.</changelog>
</package>
<package pkgid="1dcd62e1849aaa713a6810fd035249ee87bbce7699b999c7cd3c191a623160fa" name="tzdata" arch="noarch">
  <version epoch="0" ver="2016f" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016d-1" date="1461067200">- Rebase to 2016d
  - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
  - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
    at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016e-1" date="1465905600">- Rebase to 2016e
  - Egypt reinstates DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-1" date="1467720000">- Rebase to 2016f
  - Egypt cancelled DST.
  - Asia/Novosibirsk transitions from +06 to +07 on 2016-07-24 at 02:00.</changelog>
</package>
<package pkgid="be4a9bed9b24b583eaa5f179d6d2670f34c52244837220e77990c3d9aca354a0" name="tzdata" arch="noarch">
  <version epoch="0" ver="2016g" rel="2.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474891200">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
</package>
<package pkgid="1bc56b0f7e90fbb151f43b8bb2b9c2fd0c7deb65bd51677c9dd4c871c197313e" name="tzdata" arch="noarch">
  <version epoch="0" ver="2016h" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
</package>
<package pkgid="51021abb88fb7552df1aab8739fda3e647e061ba41105586ecbe3d2c54f00fb1" name="tzdata" arch="noarch">
  <version epoch="0" ver="2016i" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
</package>
<package pkgid="19166b1b76c7f8f8fe6270bc8f4c1cc2240448a3a12f174c5f8b9c2810bf814c" name="tzdata" arch="noarch">
  <version epoch="0" ver="2016j" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
</package>
<package pkgid="037c2782146fb0c464bac96539845bbbeb830ec1963d607cafdb822c5d5f73d0" name="tzdata" arch="noarch">
  <version epoch="0" ver="2017a" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488456000">- Rebase to tzdata-2017a
  - Mongolia no longer observes DST. (BZ #1425222)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1427694)</changelog>
</package>
<package pkgid="cce8e6fb65711f66a670c1045de4110a65bfc0f3d4b85442afe6bac36dedac8c" name="tzdata" arch="noarch">
  <version epoch="0" ver="2017b" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488456000">- Rebase to tzdata-2017a
  - Mongolia no longer observes DST. (BZ #1425222)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1427694)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
</package>
<package pkgid="c42f3d1defe0ae10931a797df80bbdd7d6973b4b48b586117c7880e683154835" name="tzdata" arch="noarch">
  <version epoch="0" ver="2017c" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488456000">- Rebase to tzdata-2017a
  - Mongolia no longer observes DST. (BZ #1425222)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1427694)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018.
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds.</changelog>
</package>
<package pkgid="1c881e691d7705bc094334b7863df3425281ef8fca91f469635a060f05aca5c0" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018c" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018.
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
</package>
<package pkgid="b0311e8b6f5dc1b3944f1de7961e85bd237abc109eebda3fa51c40dc8e33d4d7" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018d" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
</package>
<package pkgid="f7e03d38a6de62a054de45a2db10340f06a9a4e30d9d1c80314fbe6cfc0bb050" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata.tar.gz file and make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="f0da448a10ba632c51d202b7889cd86ee06d2fe891e30282e2b31d44c2b4fd7a" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018f" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539000000">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018-5" date="1539345600">- Bump the Release and rebuild noarch.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
</package>
<package pkgid="dd6914d95ecc991db1d1a76a6d8c6d831e1c6ca386ccc5189abe9e2399a5660a" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018g" rel="1.el6"/>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018-5" date="1539345600">- Bump the Release and rebuild noarch.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
</package>
<package pkgid="60e2001038dfb303134d64a9068f1544d239b0ddca9c382a09982fa4cbdf3775" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018i" rel="1.el6"/>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
</package>
<package pkgid="988fc743347abada03a088728a3e751d7e0577ef016442fdb16bda5480454228" name="tzdata" arch="noarch">
  <version epoch="0" ver="2019a" rel="1.el6"/>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
</package>
<package pkgid="6f36b7d2cf5955cf97d56e2a64c64941cf74133b2f4425a9c97afdc037794563" name="tzdata" arch="noarch">
  <version epoch="0" ver="2019b" rel="2.el6"/>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-2" date="1562155200">- Need to bump the release in order to update the build.</changelog>
</package>
<package pkgid="a39f2001bf8cfc0be237ccf50a9ace47f164e735c182ab8b5d999c2e637764ea" name="tzdata" arch="noarch">
  <version epoch="0" ver="2019c" rel="1.el6"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-2" date="1562155200">- Need to bump the release in order to update the build.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
</package>
<package pkgid="8b0c71c5689666a060de7b991d6d8c7ac2f5a903d8b42af4da0bef2812bcfe63" name="tzdata" arch="noarch">
  <version epoch="0" ver="2020a" rel="1.el6"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-2" date="1562155200">- Need to bump the release in order to update the build.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020a-1" date="1587729600">- Rebase to tzdata-2020a
  - Morocco will spring forward on 2020-05-31 rather than
    previously predicted 2020-05-24.
  - Canada's Yukon region changed to year round UTC -07
    effective 2020-03-08.
  - America/Godthab was renamed to America/Nuuk.</changelog>
</package>
<package pkgid="45de9b5c05f500bb9f37ce3cf655437c91f107403bc843fe9ee441a5d2140d7e" name="tzdata" arch="noarch">
  <version epoch="0" ver="2020b" rel="2.el6"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020a-1" date="1587729600">- Rebase to tzdata-2020a
  - Morocco will spring forward on 2020-05-31 rather than
    previously predicted 2020-05-24.
  - Canada's Yukon region changed to year round UTC -07
    effective 2020-03-08.
  - America/Godthab was renamed to America/Nuuk.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-1" date="1602072000">- Rebase to tzdata-2020b
  - Yukon timezones represented by America/Whitehorse and
    America/Dawson will change time zone rules from -08/-07 to
    permanent -07 on 2020-11-01, not on 2020-03-08 as 2020a had it.
  - The most recent winter(+08)/summer(+11) transition for Casey Station,
    Antarctica was 2020-10-04 00:01.
  - Remove obsolete files pacificnew, systemv, and yearistype.sh
    from the distribution.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-2" date="1602590400">- Include the upstream patch to support pacificnew for java tzupdater.
- Set POSIXRULES macro to continue installing posixrules file.</changelog>
</package>
<package pkgid="32d9a91f4702285b3295efd420d69823bbeeefa05251da72f3fbae6a61771a7c" name="tzdata" arch="noarch">
  <version epoch="0" ver="2020d" rel="1.el6"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-2" date="1602590400">- Include the upstream patch to support pacificnew for java tzupdater.
- Set POSIXRULES macro to continue installing posixrules file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020c-1" date="1603108800">- Rebase to tzdata-2020c
  - Fiji starts DST later than usual, on 2020-12-20.
  - Rearguard now provides an empty file pacificnew to support
    downstream software that expects it.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-1" date="1603281600">- Rebase to tzdata-2020d
 - Palestine will end summer time on 2020-10-24 rather than the
   predicted 2020-10-31.</changelog>
</package>
<package pkgid="bba8d1909e232f74c9cad62d92cb6568455e4a9d045cd4bec3f6ec346eeb2b9a" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2016a" rel="2.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2015g-4" date="1450699200">- tzdata now performs /etc/localtime updates (#1289696)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-1" date="1453982400">- Rebase to 2016a
  - America/Cayman will not observe daylight saving this year after all.
    Revert our guess that it would.
  - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
  - Asia/Tehran now has DST predictions for the year 2038 and later,
    to be March 21 00:00 to September 21 00:00.  This is likely better
    than predicting no DST, albeit off by a day every now and then.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-2" date="1453982401">- Rebuild with --target rhel-6.8-noarch-candidate.</changelog>
</package>
<package pkgid="4abf62bca3d1ebc962b35ca1a598646cce860847193eda4a2007458d072567b4" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2016b" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-1" date="1453982400">- Rebase to 2016a
  - America/Cayman will not observe daylight saving this year after all.
    Revert our guess that it would.
  - Asia/Chita switches from +0800 to +0900 on 2016-03-27 at 02:00.
  - Asia/Tehran now has DST predictions for the year 2038 and later,
    to be March 21 00:00 to September 21 00:00.  This is likely better
    than predicting no DST, albeit off by a day every now and then.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-2" date="1453982401">- Rebuild with --target rhel-6.8-noarch-candidate.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016b-1" date="1457956800">- Rebase to 2016b
  - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
    Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
    2016-03-27 at 02:00 local time.  They need distinct zones since their
    post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
    Altai Republic, Russia, which will switch from +06 to +07 on the same date
    and local time.  The Astrakhan change is already official; the others have
    passed the first reading in the State Duma and are extremely likely.
    Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  - As a trial of a new system that needs less information to be made up,
    the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  - Haiti will not observe DST in 2016.
  - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
    Guess future transitions will be March's last
    Saturday at 01:00, not March's last Friday at 24:00.</changelog>
</package>
<package pkgid="6d4520750b9862f77c975a3211c1ba52ea2e5c8aa3dc7361aa5ab629231c8f80" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2016c" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016a-2" date="1453982400">- Rebuild with --target rhel-6.8-noarch-candidate.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016b-1" date="1457956800">- Rebase to 2016b
  - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
    Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
    2016-03-27 at 02:00 local time.  They need distinct zones since their
    post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
    Altai Republic, Russia, which will switch from +06 to +07 on the same date
    and local time.  The Astrakhan change is already official; the others have
    passed the first reading in the State Duma and are extremely likely.
    Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  - As a trial of a new system that needs less information to be made up,
    the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  - Haiti will not observe DST in 2016.
  - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
    Guess future transitions will be March's last
    Saturday at 01:00, not March's last Friday at 24:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016c-1" date="1458734400">- Rebase to 2016c
  - Azerbaijan no longer observes DST.
  - Chile reverts from permanent to seasonal DST.</changelog>
</package>
<package pkgid="b72e66822289ec86634a58254c10abbf736bd689dfa8d4a55f3ec82ff9469230" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2016d" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016b-1" date="1457956800">- Rebase to 2016b
  - New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan and
    Ulyanovsk Oblasts, Russia, both of which will switch from +03 to +04 on
    2016-03-27 at 02:00 local time.  They need distinct zones since their
    post-1970 histories disagree.  New zone Asia/Barnaul for Altai Krai and
    Altai Republic, Russia, which will switch from +06 to +07 on the same date
    and local time.  The Astrakhan change is already official; the others have
    passed the first reading in the State Duma and are extremely likely.
    Also, Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  - As a trial of a new system that needs less information to be made up,
    the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  - Haiti will not observe DST in 2016.
  - Palestine's spring-forward transition on 2016-03-26 is at 01:00, not 00:00.
    Guess future transitions will be March's last
    Saturday at 01:00, not March's last Friday at 24:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016c-1" date="1458734400">- Rebase to 2016c
  - Azerbaijan no longer observes DST.
  - Chile reverts from permanent to seasonal DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016d-1" date="1461067200">- Rebase to 2016d
  - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
  - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
    at 02:00.</changelog>
</package>
<package pkgid="e1a4af31a55615a2cecd4cfeecaf097374c0d5126930ca32cf81efaad4c3fe52" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2016e" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016c-1" date="1458734400">- Rebase to 2016c
  - Azerbaijan no longer observes DST.
  - Chile reverts from permanent to seasonal DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016d-1" date="1461067200">- Rebase to 2016d
  - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
  - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
    at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016e-1" date="1465905600">- Rebase to 2016e
  - Egypt reinstates DST.</changelog>
</package>
<package pkgid="90bafdab03dd8bfc164b11cdab3460f3f871e41ccc991d08e489d1c43048eb06" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2016f" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016d-1" date="1461067200">- Rebase to 2016d
  - America/Caracas switches from -0430 to -04 on 2016-05-01 at 02:30.
  - Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  - New zone Asia/Tomsk, split off from Asia/Novosibirsk.  It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on 2016-05-29
    at 02:00.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016e-1" date="1465905600">- Rebase to 2016e
  - Egypt reinstates DST.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016f-1" date="1467720000">- Rebase to 2016f
  - Egypt cancelled DST.
  - Asia/Novosibirsk transitions from +06 to +07 on 2016-07-24 at 02:00.</changelog>
</package>
<package pkgid="f05a0748d6094749a630ee15fb572c95f69131b501c01d55aa2f247778b0899a" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2016g" rel="2.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.prerelease" date="1474891200">- Rebase to prerelease version of tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07. 
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
</package>
<package pkgid="73c6299e358cfd72cf152a348f74e0ab88b3015b4c98f8582e62b998a349941d" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2016h" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-1.20160927.prerelease" date="1474977600">- Change the Release to 1.20160927_prerelease.dist.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
</package>
<package pkgid="2f08cb4c79bd12bb6a620f876c3f7a85bf63acb38600d963445dd700d51e5f3b" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2016i" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016g-2" date="1475064000">- Rebase to tzdata-2016g.
  - Turkey changed from EET/EEST (+02/+03) to permanent +03,
    on 2016-09-07.
  - A new leap second will be added on 2016-12-31 23:59:60 UTC.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
</package>
<package pkgid="aae05e4f273d56b65a995ee9b66f365e8d131e51137efb4444c2a3bb8368c55f" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2016j" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016h-1" date="1476964800">- Rebase to tzdata-2016h:
  - Palestine will end DST on 2016-10-29 not 2016-10-21.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
</package>
<package pkgid="4e39b931c86e93566fdc97b5ce2e2e7c5b6ff388496f9aae52700decf5ea553e" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2017a" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488456000">- Rebase to tzdata-2017a
  - Mongolia no longer observes DST. (BZ #1425222)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1427694)</changelog>
</package>
<package pkgid="fcabb622dd0627a7a9e21b60a0071e1dfc013e636757ff0520bb8f2a245bd980" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2017b" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488456000">- Rebase to tzdata-2017a
  - Mongolia no longer observes DST. (BZ #1425222)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1427694)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
</package>
<package pkgid="70d1973c6bed76f1fd8c34e8202bace484f5934e816ff4f9754ceb9936e5ce72" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2017c" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488456000">- Rebase to tzdata-2017a
  - Mongolia no longer observes DST. (BZ #1425222)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1427694)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018.
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds.</changelog>
</package>
<package pkgid="9de078f2470d37c30f16a4285dc0b5edd1bb5ee3e78ce13131170778cffe62f3" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018c" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018.
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
</package>
<package pkgid="155eef77fc54cb05c666c1b5a742488d2aab7adbe2c7d486c4d61e8f5d6ca01b" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018d" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
</package>
<package pkgid="40fb5cb634cedda909a94696ce1f83da58b67dafc599b8ec342db293b9871368" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata.tar.gz file and make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="92b0d5fce4699b908a80d999f188607d82d1e284ec4e219ca1a1e840b31d4c00" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018f" rel="1.el6"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-4" date="1539000000">- Brazil moved the start of DST from the first Sunday in November
  to the third Sunday in November.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018-5" date="1539345600">- Bump the Release and rebuild noarch.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
</package>
<package pkgid="2fb8cb6851408affdaafa8881f9fdb109c22d10226edaa8bdae769523c025bae" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018g" rel="1.el6"/>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018-5" date="1539345600">- Bump the Release and rebuild noarch.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
</package>
<package pkgid="5a741f8213fd65ad537f949d2006bf2878358e743726a8e5844316a62c35b0a9" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018i" rel="1.el6"/>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
</package>
<package pkgid="09657e7344eb2c6f84d4f463481576d59b7a5dc54c76f86057c8edbb3615ccd5" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2019a" rel="1.el6"/>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
</package>
<package pkgid="7008f8ae57c82cb201946f2fc12167249b4373a78bd8ffe548f9d63fb1099037" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2019b" rel="2.el6"/>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-2" date="1562155200">- Need to bump the release in order to update the build.</changelog>
</package>
<package pkgid="6674b8c0d3301c748fe7b73ebfe17a14974cde36deb4d81ed6fa2742f85b868a" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2019c" rel="1.el6"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-2" date="1562155200">- Need to bump the release in order to update the build.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
</package>
<package pkgid="acc38f1677f866ea1fd1f115ecb9a4ed831d7a5b7ccda6b6effaf7a314659c4d" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2020a" rel="1.el6"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-2" date="1562155200">- Need to bump the release in order to update the build.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020a-1" date="1587729600">- Rebase to tzdata-2020a
  - Morocco will spring forward on 2020-05-31 rather than
    previously predicted 2020-05-24.
  - Canada's Yukon region changed to year round UTC -07
    effective 2020-03-08.
  - America/Godthab was renamed to America/Nuuk.</changelog>
</package>
<package pkgid="3c911a314eea6f7ab5633bbb68684d444288a2b595d69b2ff0bae0f9bf45fd34" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2020b" rel="2.el6"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020a-1" date="1587729600">- Rebase to tzdata-2020a
  - Morocco will spring forward on 2020-05-31 rather than
    previously predicted 2020-05-24.
  - Canada's Yukon region changed to year round UTC -07
    effective 2020-03-08.
  - America/Godthab was renamed to America/Nuuk.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-1" date="1602072000">- Rebase to tzdata-2020b
  - Yukon timezones represented by America/Whitehorse and
    America/Dawson will change time zone rules from -08/-07 to
    permanent -07 on 2020-11-01, not on 2020-03-08 as 2020a had it.
  - The most recent winter(+08)/summer(+11) transition for Casey Station,
    Antarctica was 2020-10-04 00:01.
  - Remove obsolete files pacificnew, systemv, and yearistype.sh
    from the distribution.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-2" date="1602590400">- Include the upstream patch to support pacificnew for java tzupdater.
- Set POSIXRULES macro to continue installing posixrules file.</changelog>
</package>
<package pkgid="4d2f476832375f815cf1b39ef3c4e03c526f6b188af7f71d12a3d7e94f222e3c" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2020d" rel="1.el6"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-2" date="1602590400">- Include the upstream patch to support pacificnew for java tzupdater.
- Set POSIXRULES macro to continue installing posixrules file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020c-1" date="1603108800">- Rebase to tzdata-2020c
  - Fiji starts DST later than usual, on 2020-12-20.
  - Rearguard now provides an empty file pacificnew to support
    downstream software that expects it.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-1" date="1603281600">- Rebase to tzdata-2020d
 - Palestine will end summer time on 2020-10-24 rather than the
   predicted 2020-10-31.</changelog>
</package>
<package pkgid="f58b96e6e3a3b79f5507a0e2950b8f940d8bc780522e16e01d246c3064105f24" name="unbound" arch="i686">
  <version epoch="0" ver="1.4.20" rel="29.el6_10.1"/>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 1.4.20-27.1" date="1590926400">- Fix amplifying an incoming query into a large number of queries directed to a target
- Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)</changelog>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 1.4.20-28.1" date="1591185600">- Fix unbound-1.4.20-amplifying-an-incoming-query.patch patch so it won't produce compiler warnings
- Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)</changelog>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 1.4.20-29.1" date="1591704000">- Fix segfault in unbound-1.4.20-amplifying-an-incoming-query.patch
- Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)</changelog>
</package>
<package pkgid="1640c1c683df3635ae36acb42b5f14ecca4de9afafc02d2fc8ae56eec77367bf" name="unbound-devel" arch="i686">
  <version epoch="0" ver="1.4.20" rel="29.el6_10.1"/>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 1.4.20-27.1" date="1590926400">- Fix amplifying an incoming query into a large number of queries directed to a target
- Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)</changelog>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 1.4.20-28.1" date="1591185600">- Fix unbound-1.4.20-amplifying-an-incoming-query.patch patch so it won't produce compiler warnings
- Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)</changelog>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 1.4.20-29.1" date="1591704000">- Fix segfault in unbound-1.4.20-amplifying-an-incoming-query.patch
- Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)</changelog>
</package>
<package pkgid="0be3da9d7576e4670c2a6779820fd9516c14d0be004c979b19adedae8eddead0" name="unbound-libs" arch="i686">
  <version epoch="0" ver="1.4.20" rel="29.el6_10.1"/>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 1.4.20-27.1" date="1590926400">- Fix amplifying an incoming query into a large number of queries directed to a target
- Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)</changelog>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 1.4.20-28.1" date="1591185600">- Fix unbound-1.4.20-amplifying-an-incoming-query.patch patch so it won't produce compiler warnings
- Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)</changelog>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 1.4.20-29.1" date="1591704000">- Fix segfault in unbound-1.4.20-amplifying-an-incoming-query.patch
- Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)</changelog>
</package>
<package pkgid="24ed8af56ac67370ba105e9d738d0ecc654fa687460e129adfdf21af68f24218" name="unbound-python" arch="i686">
  <version epoch="0" ver="1.4.20" rel="29.el6_10.1"/>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 1.4.20-27.1" date="1590926400">- Fix amplifying an incoming query into a large number of queries directed to a target
- Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)</changelog>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 1.4.20-28.1" date="1591185600">- Fix unbound-1.4.20-amplifying-an-incoming-query.patch patch so it won't produce compiler warnings
- Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)</changelog>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 1.4.20-29.1" date="1591704000">- Fix segfault in unbound-1.4.20-amplifying-an-incoming-query.patch
- Resolves: rhbz#1839171 (CVE-2020-12662), rhbz#1840257 (CVE-2020-12663)</changelog>
</package>
<package pkgid="2b638ae1698b71984ced858f580130900d401612c3ef03b97ce615d641c473b0" name="usbredir" arch="i686">
  <version epoch="0" ver="0.5.1" rel="3.el6"/>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.5.1-1" date="1348056000">- Update to upstream 0.5.1 release
- Resolves: rhbz#842356
- Remove bulk packets time out, this fixes various devices not working
- Resolves: rhbz#834560
- Add support to libusbredirparser for state serialization
- Resolves: rhbz#842316
- Drop isochronous packets when the network is too slow to keep up
- Resolves: rhbz#855737</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.5.1-2" date="1425297600">- Add upstream patch to fix usbredirparser headerlen bug when talking to
  the standalone usbredirserver
- Resolves: rhbz#1085318
- Add upstream patch with do-not-reset-device-blacklist
- Extend blacklist with 2798:0001
- Resolves: rhbz#1115917</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.5.1-3" date="1449662400">- Add downstream patch which includes a new callback for usbredir
  clients in order to drop isoc packets if client buffer is too big
- Add downstream patch defining USBREDIR_VERSION so applications can
  test against which version they are building
- Resolves: rhbz#1290749</changelog>
</package>
<package pkgid="b8f720a29aa858851bb3e935d80ab9df19554e70a3af19bb26a87fc9ffaa93ba" name="usbredir-devel" arch="i686">
  <version epoch="0" ver="0.5.1" rel="3.el6"/>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.5.1-1" date="1348056000">- Update to upstream 0.5.1 release
- Resolves: rhbz#842356
- Remove bulk packets time out, this fixes various devices not working
- Resolves: rhbz#834560
- Add support to libusbredirparser for state serialization
- Resolves: rhbz#842316
- Drop isochronous packets when the network is too slow to keep up
- Resolves: rhbz#855737</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.5.1-2" date="1425297600">- Add upstream patch to fix usbredirparser headerlen bug when talking to
  the standalone usbredirserver
- Resolves: rhbz#1085318
- Add upstream patch with do-not-reset-device-blacklist
- Extend blacklist with 2798:0001
- Resolves: rhbz#1115917</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.5.1-3" date="1449662400">- Add downstream patch which includes a new callback for usbredir
  clients in order to drop isoc packets if client buffer is too big
- Add downstream patch defining USBREDIR_VERSION so applications can
  test against which version they are building
- Resolves: rhbz#1290749</changelog>
</package>
<package pkgid="42a9467461ae4f3d924f3ecf469651c68bb45f9a1a813f0fd939a385c708a62c" name="usbredir-server" arch="i686">
  <version epoch="0" ver="0.5.1" rel="3.el6"/>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.5.1-1" date="1348056000">- Update to upstream 0.5.1 release
- Resolves: rhbz#842356
- Remove bulk packets time out, this fixes various devices not working
- Resolves: rhbz#834560
- Add support to libusbredirparser for state serialization
- Resolves: rhbz#842316
- Drop isochronous packets when the network is too slow to keep up
- Resolves: rhbz#855737</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 0.5.1-2" date="1425297600">- Add upstream patch to fix usbredirparser headerlen bug when talking to
  the standalone usbredirserver
- Resolves: rhbz#1085318
- Add upstream patch with do-not-reset-device-blacklist
- Extend blacklist with 2798:0001
- Resolves: rhbz#1115917</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.5.1-3" date="1449662400">- Add downstream patch which includes a new callback for usbredir
  clients in order to drop isoc packets if client buffer is too big
- Add downstream patch defining USBREDIR_VERSION so applications can
  test against which version they are building
- Resolves: rhbz#1290749</changelog>
</package>
<package pkgid="4ee1b687e857680f646d7e3226edada678cf8f14813eaa310d9e9c0dbc77e3f2" name="vim-X11" arch="i686">
  <version epoch="2" ver="7.4.629" rel="5.el6_10.2"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5" date="1427803200">- update sshd_config and cpp syntax files</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.629-5.2" date="1561550400">- 1724045 - fix CVE-2019-12735 the :source! command allows arbitrary command execution via the modeline
- fix spec warnings about expanding macros</changelog>
</package>
<package pkgid="7020f1c9645e91e68ed308e4dca84bed020cea2f53c384787368e28abb30fb88" name="vim-X11" arch="i686">
  <version epoch="2" ver="7.4.629" rel="5.el6_8.1"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-3" date="1423742400">- some minor spec file fixes required by the rebase</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5" date="1427803200">- update sshd_config and cpp syntax files</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
</package>
<package pkgid="c907b4ae52e8e5a6ae795de4e6588e173b2e537708117c00b40f1693a7ba2cbd" name="vim-common" arch="i686">
  <version epoch="2" ver="7.4.629" rel="5.el6_10.2"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5" date="1427803200">- update sshd_config and cpp syntax files</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.629-5.2" date="1561550400">- 1724045 - fix CVE-2019-12735 the :source! command allows arbitrary command execution via the modeline
- fix spec warnings about expanding macros</changelog>
</package>
<package pkgid="6e7cffb3d91803e4793300512dc92e8da5706bc7ff2e0adf8c10fa3f5daba448" name="vim-common" arch="i686">
  <version epoch="2" ver="7.4.629" rel="5.el6_8.1"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-3" date="1423742400">- some minor spec file fixes required by the rebase</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5" date="1427803200">- update sshd_config and cpp syntax files</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
</package>
<package pkgid="6558adcd98049f02fd5f779bf8b88789053fb6c3c184ca831a349d84505ad594" name="vim-enhanced" arch="i686">
  <version epoch="2" ver="7.4.629" rel="5.el6_10.2"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5" date="1427803200">- update sshd_config and cpp syntax files</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.629-5.2" date="1561550400">- 1724045 - fix CVE-2019-12735 the :source! command allows arbitrary command execution via the modeline
- fix spec warnings about expanding macros</changelog>
</package>
<package pkgid="e4f3084dea7cbbd485752a811010a84efaf18c71911df30de565a1a6d73ff27e" name="vim-enhanced" arch="i686">
  <version epoch="2" ver="7.4.629" rel="5.el6_8.1"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-3" date="1423742400">- some minor spec file fixes required by the rebase</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5" date="1427803200">- update sshd_config and cpp syntax files</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
</package>
<package pkgid="77d00d9a7676dd1307a49e2e349e3a52d83e371046824760d6754018fe58529d" name="vim-filesystem" arch="i686">
  <version epoch="2" ver="7.4.629" rel="5.el6_10.2"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5" date="1427803200">- update sshd_config and cpp syntax files</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.629-5.2" date="1561550400">- 1724045 - fix CVE-2019-12735 the :source! command allows arbitrary command execution via the modeline
- fix spec warnings about expanding macros</changelog>
</package>
<package pkgid="e01d77af9d4dabf2614d2b714bf9960238d05829389b5c3950ff1a32822be52e" name="vim-filesystem" arch="i686">
  <version epoch="2" ver="7.4.629" rel="5.el6_8.1"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-3" date="1423742400">- some minor spec file fixes required by the rebase</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5" date="1427803200">- update sshd_config and cpp syntax files</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
</package>
<package pkgid="8787c09e59cf09600e5fbe74670bb67f69bcaa37b299d024d7a13ebdf141d5cc" name="vim-minimal" arch="i686">
  <version epoch="2" ver="7.4.629" rel="5.el6_10.2"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5" date="1427803200">- update sshd_config and cpp syntax files</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.629-5.2" date="1561550400">- 1724045 - fix CVE-2019-12735 the :source! command allows arbitrary command execution via the modeline
- fix spec warnings about expanding macros</changelog>
</package>
<package pkgid="f0c499b9f3aefb371111285490b3460e39a529943190bc98292566e4a8967c59" name="vim-minimal" arch="i686">
  <version epoch="2" ver="7.4.629" rel="5.el6_8.1"/>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-3" date="1423742400">- some minor spec file fixes required by the rebase</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5" date="1427803200">- update sshd_config and cpp syntax files</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 7.4.629-5.1" date="1481544000">- add fix for CVE-2016-1248</changelog>
</package>
<package pkgid="db7bb356f785af7a774035a89ec720c8209642a26b53e3e6a71e92c3ad8e0361" name="virt-what" arch="i686">
  <version epoch="0" ver="1.11" rel="1.3.el6"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.11-1.1" date="1308916800">- Rebase to virt-what 1.11.
  resolves: rhbz#672211
- Add patch "IA64 Xen HVM should print 'xen-hvm' not 'xen-domU'" from upstream.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.11-1.2" date="1349956800">- Add patch to fix dmidecode detection of Hitachi Virtage
  (thanks Satoru Moriya, Masaki Kimura)
  resolves: rhbz#829427</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.11-1.3" date="1477915200">- Add all patches from 1.11 to upstream 1.15+.
  resolves: rhbz#1249439 rhbz#1312431</changelog>
</package>
<package pkgid="27962e02447cecd1532d96cf8f7877ea48e145a841fa42eb74883d68425ebe20" name="wireshark" arch="i686">
  <version epoch="0" ver="1.8.10" rel="25.el6"/>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 1.8.10-23" date="1474632000">- Resolves: #1238166 - tshark -F option fails to create capture files in .pcap
  format</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 1.8.10-24" date="1478865600">- Related: #1245887
- segfault with CVE-2013-4075 capture
- valgrind error with CVE-2015-3812 capture</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 1.8.10-25" date="1479297600">- rebuilt</changelog>
</package>
<package pkgid="e31eed6cf9ab619d37a461785ece2bc469151944bd163e22ba7be7ad33376310" name="wireshark-devel" arch="i686">
  <version epoch="0" ver="1.8.10" rel="25.el6"/>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 1.8.10-23" date="1474632000">- Resolves: #1238166 - tshark -F option fails to create capture files in .pcap
  format</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 1.8.10-24" date="1478865600">- Related: #1245887
- segfault with CVE-2013-4075 capture
- valgrind error with CVE-2015-3812 capture</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 1.8.10-25" date="1479297600">- rebuilt</changelog>
</package>
<package pkgid="6738bab7f0d6e55f6219030fe9676eddd6d69d031d073f5bbe59e42152331781" name="wireshark-gnome" arch="i686">
  <version epoch="0" ver="1.8.10" rel="25.el6"/>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 1.8.10-23" date="1474632000">- Resolves: #1238166 - tshark -F option fails to create capture files in .pcap
  format</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 1.8.10-24" date="1478865600">- Related: #1245887
- segfault with CVE-2013-4075 capture
- valgrind error with CVE-2015-3812 capture</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 1.8.10-25" date="1479297600">- rebuilt</changelog>
</package>
<package pkgid="34880e862ab92cb9806c408c37343ec818af6780f46d0f0bff6c959e579dd2e3" name="wpa_supplicant" arch="i686">
  <version epoch="1" ver="0.7.3" rel="9.el6_9.2"/>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:0.7.3-9" date="1472126400">- Deauthenticate on reconfiguration (rh #1359044)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:0.7.3-9.1" date="1508068800">- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:0.7.3-9.2" date="1508328000">- Fix backport errors (CVE-2017-13077, CVE-2017-13080)</changelog>
</package>
<package pkgid="1dcfc4ec6f180a230736873837f5fa11f4dc91715264cba26f1813253dd496aa" name="xcb-proto" arch="noarch">
  <version epoch="0" ver="1.12" rel="1.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.10-2" date="1402228800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.11-1" date="1412164800">- xcb-proto 1.11</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 1.12-1" date="1484827200">- xcb-proto 1.12 (#1414714)</changelog>
</package>
<package pkgid="b424bc106f262f26a6b95d2516d78912779153b680bc48fbf8b76dbb66e018c2" name="xcb-util" arch="i686">
  <version epoch="0" ver="0.4.0" rel="2.2.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.3.6-6" date="1418904000">- Add compat-xcb-util subpackage to restore libxcb-icccm.so.1</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.4.0-2.1" date="1447675200">- xcb-util 0.4.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.4.0-2.2" date="1459425600">- Fix now-unnecessary compat header and pkgconfig</changelog>
</package>
<package pkgid="643f1641b023ef21bda59f176be56d569d3be52d9eb2fea2657db83dba2a838a" name="xcb-util-devel" arch="i686">
  <version epoch="0" ver="0.4.0" rel="2.2.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.3.6-6" date="1418904000">- Add compat-xcb-util subpackage to restore libxcb-icccm.so.1</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.4.0-2.1" date="1447675200">- xcb-util 0.4.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.4.0-2.2" date="1459425600">- Fix now-unnecessary compat header and pkgconfig</changelog>
</package>
<package pkgid="8409fcfe81bc516c440242b78a0c00ff51ad905009be079ef2781c4dfae4be20" name="xcb-util-renderutil" arch="i686">
  <version epoch="0" ver="0.3.9" rel="3.el6"/>
  <changelog author="Thomas Moschny &lt;thomas.moschny@gmx.de&gt; - 0.3.9-1" date="1403438400">- Update to 0.3.9.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.9-2" date="1408363200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Thomas Moschny &lt;thomas.moschny@gmx.de&gt; - 0.3.9-3" date="1413979200">- Include COPYING.</changelog>
</package>
<package pkgid="81516f396dd26f5a00f38b2d8af0d6ca1ba66dcaea810b0e6e53f840864b7ab4" name="xcb-util-renderutil-devel" arch="i686">
  <version epoch="0" ver="0.3.9" rel="3.el6"/>
  <changelog author="Thomas Moschny &lt;thomas.moschny@gmx.de&gt; - 0.3.9-1" date="1403438400">- Update to 0.3.9.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.9-2" date="1408363200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Thomas Moschny &lt;thomas.moschny@gmx.de&gt; - 0.3.9-3" date="1413979200">- Include COPYING.</changelog>
</package>
<package pkgid="fe04f8540a3ed07b20d7c440a04b6cc71552b361b765125e13c7945342d22903" name="xerces-c" arch="i686">
  <version epoch="0" ver="3.0.1" rel="21.el6_10"/>
  <changelog author="Kalev Lember &lt;kalev@smartlink.ee&gt; 3.0.1-19" date="1274875200">- Fix multilib conflict caused by Xerces_autoconf_config.hpp (#595923)</changelog>
  <changelog author="Jonathan Robie &lt;jrobie@localhost.localdomain&gt; - 3.0.1-20" date="1278676800">- Added no-strict-aliasing to stop rpmdiff from complaining.
  Resolves: bug 612891</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 3.0.1-21" date="1582804800">- add security fix for CVE-2018-1311</changelog>
</package>
<package pkgid="299f5f4e4944cbd1b4b31bcf4287d85c7f4567477a07fbd7f7b4d7fa14959817" name="xerces-c-devel" arch="i686">
  <version epoch="0" ver="3.0.1" rel="21.el6_10"/>
  <changelog author="Kalev Lember &lt;kalev@smartlink.ee&gt; 3.0.1-19" date="1274875200">- Fix multilib conflict caused by Xerces_autoconf_config.hpp (#595923)</changelog>
  <changelog author="Jonathan Robie &lt;jrobie@localhost.localdomain&gt; - 3.0.1-20" date="1278676800">- Added no-strict-aliasing to stop rpmdiff from complaining.
  Resolves: bug 612891</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 3.0.1-21" date="1582804800">- add security fix for CVE-2018-1311</changelog>
</package>
<package pkgid="d992f681dce12e5cc47b634455037596ff101ad2eebc66d459708ce5ac4679e9" name="xerces-c-doc" arch="noarch">
  <version epoch="0" ver="3.0.1" rel="21.el6_10"/>
  <changelog author="Kalev Lember &lt;kalev@smartlink.ee&gt; 3.0.1-19" date="1274875200">- Fix multilib conflict caused by Xerces_autoconf_config.hpp (#595923)</changelog>
  <changelog author="Jonathan Robie &lt;jrobie@localhost.localdomain&gt; - 3.0.1-20" date="1278676800">- Added no-strict-aliasing to stop rpmdiff from complaining.
  Resolves: bug 612891</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 3.0.1-21" date="1582804800">- add security fix for CVE-2018-1311</changelog>
</package>
<package pkgid="78813af9513e91f82e540b35f15d85ddd266daf6b9a02a0d5656d3c8d5984fca" name="xmlrpc3-client" arch="noarch">
  <version epoch="0" ver="3.0" rel="4.17.el6_9"/>
  <changelog author="Andrew Overholt &lt;overholt@redhat.com&gt; 3.0-4.15" date="1266580800">- Use archive.apache.org.</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.16" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.17" date="1527076801">- Rebase patch to avoid orig files in source JAR
- Related: CVE-2016-5003</changelog>
</package>
<package pkgid="fad43ed14d17c02069b65e51ce40fdbaf6ce4333cb659542d48f6a0b67f71cb9" name="xmlrpc3-client-devel" arch="noarch">
  <version epoch="0" ver="3.0" rel="4.17.el6_9"/>
  <changelog author="Andrew Overholt &lt;overholt@redhat.com&gt; 3.0-4.15" date="1266580800">- Use archive.apache.org.</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.16" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.17" date="1527076801">- Rebase patch to avoid orig files in source JAR
- Related: CVE-2016-5003</changelog>
</package>
<package pkgid="5ab2504dae5743662d03fdb824cf5947aca23424a667951b1e0236eb7f1c3777" name="xmlrpc3-common" arch="noarch">
  <version epoch="0" ver="3.0" rel="4.17.el6_9"/>
  <changelog author="Andrew Overholt &lt;overholt@redhat.com&gt; 3.0-4.15" date="1266580800">- Use archive.apache.org.</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.16" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.17" date="1527076801">- Rebase patch to avoid orig files in source JAR
- Related: CVE-2016-5003</changelog>
</package>
<package pkgid="a6a4631645e71b66da9d849fbe454a721fbb1cee550b624158b3c3ecdfac58a5" name="xmlrpc3-common-devel" arch="noarch">
  <version epoch="0" ver="3.0" rel="4.17.el6_9"/>
  <changelog author="Andrew Overholt &lt;overholt@redhat.com&gt; 3.0-4.15" date="1266580800">- Use archive.apache.org.</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.16" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.17" date="1527076801">- Rebase patch to avoid orig files in source JAR
- Related: CVE-2016-5003</changelog>
</package>
<package pkgid="92394cf322f88556706316499fe137f282aa67a31252745d600d6eaae6413dfe" name="xmlrpc3-javadoc" arch="noarch">
  <version epoch="0" ver="3.0" rel="4.17.el6_9"/>
  <changelog author="Andrew Overholt &lt;overholt@redhat.com&gt; 3.0-4.15" date="1266580800">- Use archive.apache.org.</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.16" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.17" date="1527076801">- Rebase patch to avoid orig files in source JAR
- Related: CVE-2016-5003</changelog>
</package>
<package pkgid="7134f5d218f3ee8468fd3224ec373172c78cf0051fb15b32329d7b25650066f0" name="xmlrpc3-server" arch="noarch">
  <version epoch="0" ver="3.0" rel="4.17.el6_9"/>
  <changelog author="Andrew Overholt &lt;overholt@redhat.com&gt; 3.0-4.15" date="1266580800">- Use archive.apache.org.</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.16" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.17" date="1527076801">- Rebase patch to avoid orig files in source JAR
- Related: CVE-2016-5003</changelog>
</package>
<package pkgid="eb836512ef5a81cc550d7e8642663c429e7e049c06af9b6d7f4cfd7c2e8b7aea" name="xmlrpc3-server-devel" arch="noarch">
  <version epoch="0" ver="3.0" rel="4.17.el6_9"/>
  <changelog author="Andrew Overholt &lt;overholt@redhat.com&gt; 3.0-4.15" date="1266580800">- Use archive.apache.org.</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.16" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 3.0-4.17" date="1527076801">- Rebase patch to avoid orig files in source JAR
- Related: CVE-2016-5003</changelog>
</package>
<package pkgid="483d8068353f32eefd3bab809d9dcf44b4bb89f66ded8dbe97bd67bf0f4f4554" name="xorg-x11-drv-acecad" arch="i686">
  <version epoch="0" ver="1.5.0" rel="8.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.5.0-6" date="1345636800">- Rebuild for server 1.13</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.5.0-7" date="1398254400">- Rebuild for server 1.15</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.5.0-8" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="b9ae6527f270cea55caef6cd8a353af5ff46d7a362ce2451035257d470f1bee3" name="xorg-x11-drv-aiptek" arch="i686">
  <version epoch="0" ver="1.4.1" rel="6.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.4.1-4" date="1345636800">- Use signal safe logging if available</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.1-5" date="1398254400">- Rebuild for server 1.15</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.4.1-6" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="08537f60e123845f7471c68637185d4b264f72e056192ae1488a6a748288ad8a" name="xorg-x11-drv-apm" arch="i686">
  <version epoch="0" ver="1.2.5" rel="11.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.5-9" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.2.5-10" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.2.5-11" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="ed7d714ca7487b015d0d4affb7a229e56eed7251e4d5e425c8a95ed29ba95d90" name="xorg-x11-drv-ast" arch="i686">
  <version epoch="0" ver="1.1.5" rel="1.el6"/>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; 0.91.10-1" date="1309262400">- upstream release 0.91.10</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.98.0-1" date="1398254400">- ast 0.98.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.1.5-1" date="1447243200">- ast 1.1.5</changelog>
</package>
<package pkgid="5d7ce92ea34d1d5c4ad7ea15a7494511a8695b4de023f86cf319bbf32ed9c86d" name="xorg-x11-drv-ati" arch="i686">
  <version epoch="0" ver="7.6.1" rel="2.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 7.5.99-4" date="1447243200">- New git snap for server 1.17</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 7.6.1-1" date="1447329600">- ati 7.6.1</changelog>
  <changelog author="Lyude Paul &lt;cpaul@redhat.com&gt; 7.6.1-2" date="1457006400">- Fix annoying trailing whitespace after %description
- Update firmware license
- Added missing firmware file TAHITI_vce.bin (#1310823)</changelog>
</package>
<package pkgid="c205cf9a7027f299f0c38245b99d9a7d62189b4e871c1244c6a2f33ea212d3b0" name="xorg-x11-drv-ati-firmware" arch="noarch">
  <version epoch="0" ver="7.6.1" rel="2.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 7.5.99-4" date="1447243200">- New git snap for server 1.17</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 7.6.1-1" date="1447329600">- ati 7.6.1</changelog>
  <changelog author="Lyude Paul &lt;cpaul@redhat.com&gt; 7.6.1-2" date="1457006400">- Fix annoying trailing whitespace after %description
- Update firmware license
- Added missing firmware file TAHITI_vce.bin (#1310823)</changelog>
</package>
<package pkgid="b94bd1a24dbb81ffeadd071bdb8032b9a513d6c4fe42067ffadc2b58434c4bfc" name="xorg-x11-drv-cirrus" arch="i686">
  <version epoch="0" ver="1.5.3" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.5.2-1" date="1398254400">- cirrus 1.5.2</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.5.2-2" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.5.3-1" date="1447243200">- cirrus 1.5.3</changelog>
</package>
<package pkgid="c50ed86c8139be329c95f6f1281662d4e05986a46c87809127db1bb569d54294" name="xorg-x11-drv-dummy" arch="i686">
  <version epoch="0" ver="0.3.6" rel="16.el6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.6-14" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.3.6-15" date="1389787200">- 1.15 ABI rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.3.6-16" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="ca4406167320bbbdfea7d2731310ad7bc7099e4c1786e5b4e562f23fe35dc388" name="xorg-x11-drv-elographics" arch="i686">
  <version epoch="0" ver="1.4.1" rel="4.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.4.1-2" date="1345636800">- Rebuild for server 1.13</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.1-3" date="1398254400">- Rebuild for server 1.15</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.4.1-4" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="4f653d37431912b50f5b450492e5e17757a45573666a9474c096db5d06fbf894" name="xorg-x11-drv-evdev" arch="i686">
  <version epoch="0" ver="2.9.2" rel="1.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 2.8.2-4" date="1408017600">- Fix Xen Virtual Pointer scroll wheels (#1129947)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 2.8.2-5" date="1447243200">- Rebuild for server 1.17</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 2.9.2-1" date="1448452800">- evdev 2.9.2 (#1248582)</changelog>
</package>
<package pkgid="a77234dd8f968691ab127941980a1a299660e48b7cd8d8b82ee363ad51c01c66" name="xorg-x11-drv-evdev-devel" arch="i686">
  <version epoch="0" ver="2.9.2" rel="1.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 2.8.2-4" date="1408017600">- Fix Xen Virtual Pointer scroll wheels (#1129947)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 2.8.2-5" date="1447243200">- Rebuild for server 1.17</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 2.9.2-1" date="1448452800">- evdev 2.9.2 (#1248582)</changelog>
</package>
<package pkgid="a1d867703dc869113e97a5df94efc611ed22d4c66ac00801c842e6f51696203c" name="xorg-x11-drv-fbdev" arch="i686">
  <version epoch="0" ver="0.4.3" rel="17.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.4.3-15" date="1395403200">- Default to 32bpp when the console is only 8bpp (#1055533)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.4.3-16" date="1407758400">- Pass the pci device being probed through to fbdevHWProbe</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.4.3-17" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="3d20e85cb59871b851b740ccf3572ebcfa104194b47f94b05eeadd8b5bf39a1e" name="xorg-x11-drv-fpit" arch="i686">
  <version epoch="0" ver="1.4.0" rel="7.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.4.0-5" date="1345636800">- Rebuild for server 1.13</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.0-6" date="1398254400">- Rebuild for server 1.15</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.4.0-7" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="ae345c0e1f7c5c95f85a9f1cf15e24d8937e04744196d420536df04ae48b2cbd" name="xorg-x11-drv-geode" arch="i686">
  <version epoch="0" ver="2.11.17" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 2.11.14-11" date="1384948800">- 1.15RC2 ABI rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 2.11.15-1" date="1385294400">- New upstream release</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 2.11.17-1" date="1447243200">- geode 2.11.17</changelog>
</package>
<package pkgid="a3197691b143c47914a576aab121c6593425759bda9463851a1cd58db11cecd2" name="xorg-x11-drv-glint" arch="i686">
  <version epoch="0" ver="1.2.8" rel="11.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.2.8-9" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.8-10" date="1407758400">- Pass the PCI device through to fbdevhw if appropriate</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.2.8-11" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="719a911db8d8b28da02ce5236bcf01d7b7e8b49871066e4606e54090041a4edf" name="xorg-x11-drv-hyperpen" arch="i686">
  <version epoch="0" ver="1.4.1" rel="6.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.4.1-4" date="1345636800">- Rebuild for server 1.13</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.1-5" date="1398254400">- Rebuild for server 1.15</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.4.1-6" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="22238526ea3c4e4137318d640a562a5f3f77958ee5acd40fb8eba847d3164ee9" name="xorg-x11-drv-i128" arch="i686">
  <version epoch="0" ver="1.3.6" rel="11.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.6-9" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.6-10" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.6-11" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="89a288b1ed535dacf75df96dfdd51ce74d25ef34219975914bf2c84d543e8353" name="xorg-x11-drv-i740" arch="i686">
  <version epoch="0" ver="1.3.4" rel="12.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.4-10" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.4-11" date="1407412800">- Fix initialization</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.4-12" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="5b50ccbedd6effe4fa5f1ed8c2deae4871721092a69cb8e7cdc788817069005d" name="xorg-x11-drv-intel" arch="i686">
  <version epoch="0" ver="2.99.917" rel="0.4.20151111.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 2.99.917-0.2" date="1457006400">- Add new SKL PCI IDs</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.99.917-0.3" date="1458129600">- Do not use randr in hotplug if not available (#1204087)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 2.99.917-0.4" date="1458648000">- Restore old buffers on RANDR configuration failure</changelog>
</package>
<package pkgid="a671a67bc00a071bfd386f4534ad6e6c6a82c700d716f009e863f9b5adbf4edb" name="xorg-x11-drv-intel-devel" arch="i686">
  <version epoch="0" ver="2.99.917" rel="0.4.20151111.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 2.99.917-0.2" date="1457006400">- Add new SKL PCI IDs</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.99.917-0.3" date="1458129600">- Do not use randr in hotplug if not available (#1204087)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 2.99.917-0.4" date="1458648000">- Restore old buffers on RANDR configuration failure</changelog>
</package>
<package pkgid="61d2b5f130bda14e03db74da0edae6d096e0a607c643a5bf2fdea89707add84e" name="xorg-x11-drv-keyboard" arch="i686">
  <version epoch="0" ver="1.8.1" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.8.0-4" date="1389787200">- 1.15 ABI rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.8.0-5" date="1408536000">- Build on PPC</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.8.1-1" date="1429531200">- xf86-input-keyboard 1.8.1 (#1194877)</changelog>
</package>
<package pkgid="740da831effde07e8e0f449419f33bdbd4301d7a0ba52d7fcb8c92c0d656d0c0" name="xorg-x11-drv-mach64" arch="i686">
  <version epoch="0" ver="6.9.5" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.9.4-9" date="1430740800">- Fix crash in int10 setup</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 6.9.4-10" date="1447243200">- Rebuild for server 1.17</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 6.9.5-1" date="1477396800">- mach64 6.9.5</changelog>
</package>
<package pkgid="87a90efe01c1fd23e9be2df2b46c95701667d60d2daf1f1818c79918434acd4f" name="xorg-x11-drv-mga" arch="i686">
  <version epoch="0" ver="1.6.3" rel="11.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.6.3-9" date="1453291200">- Add support for G200EW3 and G200E4</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.6.3-10" date="1476446400">- attempt to fallback to DDC for UEFI</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.3-11" date="1486036800">- Add support for G200EH3</changelog>
</package>
<package pkgid="08d8fdcd41552a18a3eb998aded5e10d103226c87b251632e923c87fb81db56c" name="xorg-x11-drv-mouse" arch="i686">
  <version epoch="0" ver="1.9.1" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.9.0-6" date="1389787200">- 1.15 ABI rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.9.0-7" date="1408536000">- Build on PPC</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.9.1-1" date="1429531200">- xf86-input-mouse 1.9.1 (#1194879)</changelog>
</package>
<package pkgid="b69c887867e1aa7f322855c8e39580b630cedcde75db52edaee12bc3c1582cf1" name="xorg-x11-drv-mouse-devel" arch="i686">
  <version epoch="0" ver="1.9.1" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.9.0-6" date="1389787200">- 1.15 ABI rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.9.0-7" date="1408536000">- Build on PPC</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.9.1-1" date="1429531200">- xf86-input-mouse 1.9.1 (#1194879)</changelog>
</package>
<package pkgid="bbb98518ce1c8e638fc298ad2097eca4dc1a32426198f4c6e61fba63f1621f2b" name="xorg-x11-drv-mutouch" arch="i686">
  <version epoch="0" ver="1.3.0" rel="6.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.3.0-4" date="1345636800">- Rebuild for server 1.13</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.0-5" date="1398254400">- Rebuild for server 1.15</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.0-6" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="b9a3a879998b2eb9952540db867875ca8095750cf385beaa85db8b9d7e7a00dd" name="xorg-x11-drv-neomagic" arch="i686">
  <version epoch="0" ver="1.2.9" rel="1.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.2.7-6" date="1362657600">- require xorg-x11-server-devel, not -sdk</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.7-7" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.9-1" date="1447243200">- neomagic 1.2.9</changelog>
</package>
<package pkgid="a9e3423dfc0796df66347bf6cfe49009ec1ef183e4d8576e19384d61c161df51" name="xorg-x11-drv-nouveau" arch="i686">
  <version epoch="1" ver="1.0.12" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.0.10-1" date="1398254400">- nouveau 1.0.10</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.0.11-1" date="1447243200">- nouveau 1.0.11</changelog>
  <changelog author="Ben Skeggs &lt;bskeggs@redhat.com&gt; 1.0.12-1" date="1449748800">- nouveau 1.0.12</changelog>
</package>
<package pkgid="90f60780ce0d66b969b1f736a2120b4bdb13720930bbb7cc8d0d3520d6178bee" name="xorg-x11-drv-nv" arch="i686">
  <version epoch="0" ver="2.1.20" rel="6.el6"/>
  <changelog author="airlied@redhat.com - 2.1.20-4" date="1345636800">- rebuild for server ABI requires</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 2.1.20-5" date="1398254400">- Sync with git
- Rebuild for server 1.15</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 2.1.20-6" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="7dbcc8cf72511cee6d2cdaad270a8f2a7f926537c2715e0813caf662d53bf6ae" name="xorg-x11-drv-openchrome" arch="i686">
  <version epoch="0" ver="0.3.3" rel="7.el6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.3.3-6" date="1389787200">- 1.15 ABI rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.3.3-7" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="c12cdbcd4a47084f8eecc936f5f07cbf4add766a7bb817bea46ea65264e6c0ec" name="xorg-x11-drv-openchrome-devel" arch="i686">
  <version epoch="0" ver="0.3.3" rel="7.el6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.3.3-6" date="1389787200">- 1.15 ABI rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.3.3-7" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="aef2140e2b39cd516d38246f3bcbaf14a004160779119fe7dff1453417b39748" name="xorg-x11-drv-penmount" arch="i686">
  <version epoch="0" ver="1.5.0" rel="6.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.5.0-4" date="1345636800">- Rebuild for server 1.13</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.5.0-5" date="1398254400">- Rebuild for server 1.15</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.5.0-6" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="10455c0c66a3ea965b41359d50944b125a365fb6a8c716646d52468efff469c0" name="xorg-x11-drv-qxl" arch="i686">
  <version epoch="0" ver="0.1.1" rel="19.el6"/>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.1.1-17" date="1427716800">- Fix cursor leak causing a crash when running RHEL6 anaconda in a VM
  Resolves: rhbz#1199355
- Remove enable-resizable-surface0.patch. It's causing more troubles than
  it solves, and QEMU now has the needed ram/vram support to make it
  unnecessary
  Resolves: rhbz#1140765</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.1.1-18" date="1447243200">- Rebuild for server 1.17</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; 0.1.1-19" date="1454414400">- Remove RHEL 7 hack
  Resolves: rhbz#1226723
- Fix memory leak caused by image cache
  Resolves: rhbz#1221010</changelog>
</package>
<package pkgid="7f86b5263016b9690cdf0b836686eb2c48078fd4ad35642eba6162c0394ed544" name="xorg-x11-drv-r128" arch="i686">
  <version epoch="0" ver="6.10.0" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 6.9.1-7" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.9.1-8" date="1406548800">- Fix dist tag</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 6.10.0-1" date="1447243200">- r128 6.10.1</changelog>
</package>
<package pkgid="d36c7f3bdba4d457a584462fd953d17ad8cf0f168c72340b29f023bdc3f41146" name="xorg-x11-drv-rendition" arch="i686">
  <version epoch="0" ver="4.2.6" rel="1.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.2.5-9" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 4.2.5-10" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 4.2.6-1" date="1447243200">- rendition 4.2.6</changelog>
</package>
<package pkgid="0232b0591b2881bc57b74c6136597a405aa7e041675360ef021b59e61215b1fd" name="xorg-x11-drv-s3virge" arch="i686">
  <version epoch="0" ver="1.10.7" rel="1.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.10.6-9" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.10.6-10" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.10.7-1" date="1447243200">- s3virge 1.10.7</changelog>
</package>
<package pkgid="43b6c66907eaacb694bad52e90001892efc9826e8f5a73e928553b8a0f38f29a" name="xorg-x11-drv-savage" arch="i686">
  <version epoch="0" ver="2.3.7" rel="3.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 2.3.7-1" date="1386244800">- savage 2.3.7
- Trim changelog to f19</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 2.3.7-2" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 2.3.7-3" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="03bcc5e35a552a1ee6bae0045534d5a43ddb665e4b74073f0dc3298094ef15c7" name="xorg-x11-drv-siliconmotion" arch="i686">
  <version epoch="0" ver="1.7.8" rel="1.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7.7-8" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.7.7-9" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.7.8-1" date="1447243200">- siliconmotion 1.7.8</changelog>
</package>
<package pkgid="c385ef50731bfde786e519bd434bc446a3870664d3782b4a1e2e74f926e55a50" name="xorg-x11-drv-sis" arch="i686">
  <version epoch="0" ver="0.10.8" rel="1.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.10.7-9" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.10.7-10" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.10.8-1" date="1447243200">- sis 0.10.8</changelog>
</package>
<package pkgid="a7c1a14fe5ebbba87607cbb3a8e5fa93677ba8dc10eb55adbcbed2fd1b2a0f57" name="xorg-x11-drv-sisusb" arch="i686">
  <version epoch="0" ver="0.9.6" rel="11.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.6-9" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.9.6-10" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.9.6-11" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="6e2edd167bd66bdafe4a719b64bb9fc1412544cb5dead4fa26d6bb590387f748" name="xorg-x11-drv-synaptics" arch="i686">
  <version epoch="0" ver="1.8.3" rel="1.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.7.6-1" date="1399982400">- synaptics 1.7.6 (#1077486)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.7.6-2" date="1447243200">- Rebuild for server 1.17</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.8.3-1" date="1448452800">- synaptics 1.8.3 (#1248610)</changelog>
</package>
<package pkgid="73c1a6acdf8903f1be62798a22d6388e8a464d7c1a36b6394d1887b5ca8f7012" name="xorg-x11-drv-synaptics-devel" arch="i686">
  <version epoch="0" ver="1.8.3" rel="1.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.7.6-1" date="1399982400">- synaptics 1.7.6 (#1077486)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.7.6-2" date="1447243200">- Rebuild for server 1.17</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.8.3-1" date="1448452800">- synaptics 1.8.3 (#1248610)</changelog>
</package>
<package pkgid="f71b7b2ab5f36061c8a1c5db9435e8aa108cd8a63219192f680775450b9af51b" name="xorg-x11-drv-tdfx" arch="i686">
  <version epoch="0" ver="1.4.6" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.4.5-9" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.5-10" date="1406548800">- Fix dist tag</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.4.6-1" date="1447243200">- tdfx 1.4.6</changelog>
</package>
<package pkgid="bad06a11a7799e3f2034601a6832373c791e6191dcace761419f95e2c659151f" name="xorg-x11-drv-trident" arch="i686">
  <version epoch="0" ver="1.3.6" rel="11.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.6-9" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.6-10" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.6-11" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="850ed00772901661076154e2d52a57133d1e5d74039898eae67dca543b4f27b2" name="xorg-x11-drv-v4l" arch="i686">
  <version epoch="0" ver="0.2.0" rel="37.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.2.0-35" date="1389787200">- 1.15 ABI rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.2.0-36" date="1398772800">- Fix License</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 0.2.0-37" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="190e73d7330832c355289d98d522da3c63661c3bb79629f9c11be4b6535a42e1" name="xorg-x11-drv-vesa" arch="i686">
  <version epoch="0" ver="2.3.4" rel="1.el6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.2-13" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 2.3.2-15" date="1398686400">- 1.15 ABI rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 2.3.4-1" date="1447243200">- vesa 2.3.4</changelog>
</package>
<package pkgid="adbe7c62d90552560697f81947dac9edd96ed869d080a9bb9fdd6792c0ba2181" name="xorg-x11-drv-vmmouse" arch="i686">
  <version epoch="0" ver="13.1.0" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 13.0.0-1" date="1398254400">- vmmouse 13.0.0</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 13.0.0-2" date="1407240000">- Fix building outside of mock</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 13.1.0-1" date="1447243200">- vmmouse 13.1.0</changelog>
</package>
<package pkgid="54530f1d377d2e1abadaf4e63f10d0022224c5701f58a47072aa41e786eb7952" name="xorg-x11-drv-vmware" arch="i686">
  <version epoch="0" ver="13.1.0" rel="2.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 13.0.1-9" date="1408017600">- Fix bug with stalled Xv output</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 13.1.0-1" date="1447243200">- vmware 13.1.0</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 13.1.0-2" date="1450008000">- rebase onto new mesa.</changelog>
</package>
<package pkgid="4eadb7d404442437ed9e5757b6fc1c800080c5b0532122e773c2fa13cd3aac4c" name="xorg-x11-drv-void" arch="i686">
  <version epoch="0" ver="1.4.1" rel="1.el6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.0-22" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.4.0-23" date="1389787200">- 1.15 ABI rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.4.1-1" date="1429531200">- xf86-input-void 1.4.1 (#1194888)</changelog>
</package>
<package pkgid="0b016bb63607ac4b89efbf53e591893c15dca2f791354ec7c44ca94cc54f2fc9" name="xorg-x11-drv-voodoo" arch="i686">
  <version epoch="0" ver="1.2.5" rel="11.el6"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.5-9" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.2.5-10" date="1398686400">- Fix rhel arch list</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.5-11" date="1447243200">- Rebuild for server 1.17</changelog>
</package>
<package pkgid="a5006611219d2695af420c9416e2d824e71606abd2c08978eedca1c4aa5290f5" name="xorg-x11-drv-wacom" arch="i686">
  <version epoch="0" ver="0.32.0" rel="1.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-4" date="1401710400">- Disable action property error checking to ignore invalid values from g-s-d
  (#1077478)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.23.0-5" date="1447243200">- Rebuild for server 1.17</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.32.0-1" date="1448452800">- wacom 0.32.0 (#1248619)</changelog>
</package>
<package pkgid="a18e5e42644517f6a5d36e08741914ff006fd99e2fa688aa1ae2848572add178" name="xorg-x11-drv-wacom-devel" arch="i686">
  <version epoch="0" ver="0.32.0" rel="1.el6"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-4" date="1401710400">- Disable action property error checking to ignore invalid values from g-s-d
  (#1077478)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 0.23.0-5" date="1447243200">- Rebuild for server 1.17</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.32.0-1" date="1448452800">- wacom 0.32.0 (#1248619)</changelog>
</package>
<package pkgid="4d2dd78268173f1f91f633f4c290023a30a7dc0de618a0455603e724c5440a6f" name="xorg-x11-drv-xgi" arch="i686">
  <version epoch="0" ver="1.6.1" rel="1.el6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.6.0-20" date="1410436800">- Fix initialization to work post-mibs-removal</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.0-21.20121114git" date="1447243200">- Rebuild for server 1.17</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.6.1-1" date="1447243201">- xgi 1.6.1</changelog>
</package>
<package pkgid="f4982fcdc51011d964f5e6154fc7c6bf9ca6eb1a901c52b2f34d37bc4fa5c357" name="xorg-x11-proto-devel" arch="noarch">
  <version epoch="0" ver="7.7" rel="14.el6"/>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 7.7-12" date="1402574400">- inputproto-2.3.1</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 7.7-13" date="1451908800">- xproto: Increase number of file descriptors to 512</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 7.7-14" date="1483617600">- randrproto-1.5.0 (#1414731)</changelog>
</package>
<package pkgid="515571a2d150c7d57e31654f3ffd57e24ae92aea5cf96e5f165ea7a050a13d22" name="xorg-x11-server-Xdmx" arch="i686">
  <version epoch="0" ver="1.17.4" rel="16.sl6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-15" date="1478001600">- Fix a crash at application exit when using backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-16" date="1478088000">- Fix generation of GraphicsExposure events for window-&gt;pixmap copies when
  Xinerama is active</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490097600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="d5207cb787e7ce08d08fabc664eb2ab9acb8cf38c29b8b560c01e2f74d9e7b0c" name="xorg-x11-server-Xdmx" arch="i686">
  <version epoch="0" ver="1.17.4" rel="18.sl6_10"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-17" date="1510574400">- Fix ABI bug in Always backing store patch</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.17.4-18" date="1603972800">- CVE fixes for: CVE-2020-14345 (#1872388), CVE-2020-14346 (#1872392),
  CVE-2020-14361 (#1872399), CVE-2020-14362 (#1872406)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1604577600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL</changelog>
</package>
<package pkgid="a850f0c651c98e3f63a9b81b16ccb086286f91c4029010fe59bccc1c88cc6757" name="xorg-x11-server-Xephyr" arch="i686">
  <version epoch="0" ver="1.17.4" rel="16.sl6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-15" date="1478001600">- Fix a crash at application exit when using backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-16" date="1478088000">- Fix generation of GraphicsExposure events for window-&gt;pixmap copies when
  Xinerama is active</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490097600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="624c3b62896112a07ed4036f05394392d4be75cb6c699abe1887783e7d14559a" name="xorg-x11-server-Xephyr" arch="i686">
  <version epoch="0" ver="1.17.4" rel="18.sl6_10"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-17" date="1510574400">- Fix ABI bug in Always backing store patch</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.17.4-18" date="1603972800">- CVE fixes for: CVE-2020-14345 (#1872388), CVE-2020-14346 (#1872392),
  CVE-2020-14361 (#1872399), CVE-2020-14362 (#1872406)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1604577600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL</changelog>
</package>
<package pkgid="b76b0fd58138424d19bffc35a59bf25e5b094a4820ae5163fc92858ba67acf89" name="xorg-x11-server-Xnest" arch="i686">
  <version epoch="0" ver="1.17.4" rel="16.sl6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-15" date="1478001600">- Fix a crash at application exit when using backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-16" date="1478088000">- Fix generation of GraphicsExposure events for window-&gt;pixmap copies when
  Xinerama is active</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490097600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="a312654461fe22a47c0e5b50eefd2b56b495b7a3031518ff7bf9d0ce0bed9957" name="xorg-x11-server-Xnest" arch="i686">
  <version epoch="0" ver="1.17.4" rel="18.sl6_10"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-17" date="1510574400">- Fix ABI bug in Always backing store patch</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.17.4-18" date="1603972800">- CVE fixes for: CVE-2020-14345 (#1872388), CVE-2020-14346 (#1872392),
  CVE-2020-14361 (#1872399), CVE-2020-14362 (#1872406)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1604577600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL</changelog>
</package>
<package pkgid="81a0047cf6873f3d838bc4cc550c841780c4e7c431ea3230658c66cbd5b8ab7a" name="xorg-x11-server-Xorg" arch="i686">
  <version epoch="0" ver="1.17.4" rel="16.sl6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-15" date="1478001600">- Fix a crash at application exit when using backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-16" date="1478088000">- Fix generation of GraphicsExposure events for window-&gt;pixmap copies when
  Xinerama is active</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490097600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="ea32ffe1a2dd143f1d68f8c64536d9d8a0eb064e704abd11bdc7c26fc73a9325" name="xorg-x11-server-Xorg" arch="i686">
  <version epoch="0" ver="1.17.4" rel="18.sl6_10"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-17" date="1510574400">- Fix ABI bug in Always backing store patch</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.17.4-18" date="1603972800">- CVE fixes for: CVE-2020-14345 (#1872388), CVE-2020-14346 (#1872392),
  CVE-2020-14361 (#1872399), CVE-2020-14362 (#1872406)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1604577600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL</changelog>
</package>
<package pkgid="17d2a83f14ce2573ee23388b6e5af38d2498ba348db55633d06d75252ce52192" name="xorg-x11-server-Xvfb" arch="i686">
  <version epoch="0" ver="1.17.4" rel="16.sl6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-15" date="1478001600">- Fix a crash at application exit when using backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-16" date="1478088000">- Fix generation of GraphicsExposure events for window-&gt;pixmap copies when
  Xinerama is active</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490097600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="f4431c410eaeb5d9ac2ea2786d1768b6e15b4f287cef9b4265b017f1a867d76a" name="xorg-x11-server-Xvfb" arch="i686">
  <version epoch="0" ver="1.17.4" rel="18.sl6_10"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-17" date="1510574400">- Fix ABI bug in Always backing store patch</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.17.4-18" date="1603972800">- CVE fixes for: CVE-2020-14345 (#1872388), CVE-2020-14346 (#1872392),
  CVE-2020-14361 (#1872399), CVE-2020-14362 (#1872406)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1604577600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL</changelog>
</package>
<package pkgid="6043497d0c95375cf06f1e9642920733cb3b0f0738e47c6b54a0d220e1652a35" name="xorg-x11-server-common" arch="i686">
  <version epoch="0" ver="1.17.4" rel="16.sl6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-15" date="1478001600">- Fix a crash at application exit when using backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-16" date="1478088000">- Fix generation of GraphicsExposure events for window-&gt;pixmap copies when
  Xinerama is active</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490097600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="8b94bbb9c9981e11716bb78fe5249345ec38440119ed87390e1edaa0d3975d55" name="xorg-x11-server-common" arch="i686">
  <version epoch="0" ver="1.17.4" rel="18.sl6_10"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-17" date="1510574400">- Fix ABI bug in Always backing store patch</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.17.4-18" date="1603972800">- CVE fixes for: CVE-2020-14345 (#1872388), CVE-2020-14346 (#1872392),
  CVE-2020-14361 (#1872399), CVE-2020-14362 (#1872406)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1604577600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL</changelog>
</package>
<package pkgid="762920a817e8ad177aa60b188ef689285f2fd8770385214b6de5f0b9e002ae30" name="xorg-x11-server-devel" arch="i686">
  <version epoch="0" ver="1.17.4" rel="16.sl6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-15" date="1478001600">- Fix a crash at application exit when using backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-16" date="1478088000">- Fix generation of GraphicsExposure events for window-&gt;pixmap copies when
  Xinerama is active</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490097600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="810b8bcc70516214184521857befce4baf6d3535e51e230b9c86140cd81517f7" name="xorg-x11-server-devel" arch="i686">
  <version epoch="0" ver="1.17.4" rel="18.sl6_10"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-17" date="1510574400">- Fix ABI bug in Always backing store patch</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.17.4-18" date="1603972800">- CVE fixes for: CVE-2020-14345 (#1872388), CVE-2020-14346 (#1872392),
  CVE-2020-14361 (#1872399), CVE-2020-14362 (#1872406)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1604577600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL</changelog>
</package>
<package pkgid="8f9c3f754b88bd417364a0726fb9af996043d94a396977caa66f9b370f183805" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.17.4" rel="16.sl6"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-15" date="1478001600">- Fix a crash at application exit when using backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-16" date="1478088000">- Fix generation of GraphicsExposure events for window-&gt;pixmap copies when
  Xinerama is active</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1490097600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL
- Ran Regex: (Release: .*)%{\?dist}(.*) =&gt; \1.sl6\2
--&gt;  Modify release string to note changes</changelog>
</package>
<package pkgid="15077b6f04e8b424e017e80f2ec3e2a25ae54c3cf3de956181a6a66326b0af21" name="xorg-x11-server-source" arch="noarch">
  <version epoch="0" ver="1.17.4" rel="18.sl6_10"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-17" date="1510574400">- Fix ABI bug in Always backing store patch</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.17.4-18" date="1603972800">- CVE fixes for: CVE-2020-14345 (#1872388), CVE-2020-14346 (#1872392),
  CVE-2020-14361 (#1872399), CVE-2020-14362 (#1872406)</changelog>
  <changelog author="Scientific Linux Auto Patch Process &lt;SCIENTIFIC-LINUX-DEVEL@LISTSERV.FNAL.GOV&gt;" date="1604577600">- Added Source: xorg-x11-server.ini
--&gt;  Config file for automated patch script
- Added Source: xorg-x11-server-SPEC-remove-TUV.patch
--&gt;  Redirect support requests to SL</changelog>
</package>
<package pkgid="beb8bb3f68320f47172369b4711c479aaba35a4bb257b30b3d3a3d4ef7a17883" name="yum" arch="noarch">
  <version epoch="0" ver="3.2.29" rel="81.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.2.29-79" date="1478260800">- Add logging of bad update notice duplicates.
- Resolves: bug#1269659</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.2.29-80" date="1479902400">- Fixed the invalid changelog entry.
- Related: bug#1269659</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.2.29-81" date="1481112000">- Remove nonexistent options from yum.conf man page.
- Related: bug#1367861</changelog>
</package>
<package pkgid="2901e3552256f245091d2f14bd1c7b1a074834fa049824cc5ba73a1cea3a1074" name="yum-NetworkManager-dispatcher" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="ab14ca9d1d021286724d0690feb09a42d10824510d27e1c3b9956189739b8f37" name="yum-NetworkManager-dispatcher" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="af29d4249148b45a35581e4dc12835848cc10821ad6b4fd62b6bec6a376ba290" name="yum-cron" arch="noarch">
  <version epoch="0" ver="3.2.29" rel="81.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.2.29-79" date="1478260800">- Add logging of bad update notice duplicates.
- Resolves: bug#1269659</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.2.29-80" date="1479902400">- Fixed the invalid changelog entry.
- Related: bug#1269659</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 3.2.29-81" date="1481112000">- Remove nonexistent options from yum.conf man page.
- Related: bug#1367861</changelog>
</package>
<package pkgid="b4b9e99616afbfbc23ab310d1c30fb418849d957206b94e7e0565e729890fe51" name="yum-plugin-aliases" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="23c0431eb9c10d6232b1a1d403ef164c46e86591565c6d0bc69f07178dccb3f4" name="yum-plugin-aliases" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="36277616bd554cd3fdbc5ba2875380e5c021c995a172ca25398073cae67b9c04" name="yum-plugin-auto-update-debug-info" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="461825b165262e31b7ac3cc738089bdf3b722fbea899e1350232cebb4fbea934" name="yum-plugin-auto-update-debug-info" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="ea0ccae84995abb5a8c493fcfbc903356d745d2955721e46f04c359f3eecec6b" name="yum-plugin-changelog" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="88bdf6618ba1041b898fafd1a92a23dada85a1f912e211ac81f9ea983f2281f7" name="yum-plugin-changelog" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="7e8632abde998147ced6ce6adad0980c61845027bd9e895c8c26883eb5180c4a" name="yum-plugin-fastestmirror" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="6035740076674b34195a8a0b8541cf3d6a8d05bd3f3b091cbe5558d753c6041d" name="yum-plugin-fastestmirror" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="812eaeb03a9491ea38484649f94fa57c5d3ee5becd6fdb3174339f562622a22e" name="yum-plugin-filter-data" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="20b47fc4d9cde1c35fdd3555b7cd4737fa865e9ad0f4edeb53a391c083c31f39" name="yum-plugin-filter-data" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="e2d32bfed08416c85737a4ca63f927bd1efb2ec098312358a3c15dfa838c9798" name="yum-plugin-fs-snapshot" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="ca64823750caeae7b80c25c339523a3cea8884fadb895d717888be1ef731bde9" name="yum-plugin-fs-snapshot" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="ba270aed752c12e9e6fc9590e2a020906f5d5ffe59279ffac8bc83fe0e868a38" name="yum-plugin-keys" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="76b09d70a6e94ca3d894d2f8c4c97eee95fe118df28fd9a5f9d0598c593ddb9d" name="yum-plugin-keys" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="3dfe726b496c9708e3343cf27f634238b16a9bbbf99d1a7da11390c24a3022c5" name="yum-plugin-list-data" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="adc02f3944c0b94cd4d6aae3317cb6bc768e57377b127c3e925946c1e4e8025d" name="yum-plugin-list-data" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="b50610b99ff61f8a61a2f67f3b0dd3aa75520acb12a5f173676ae00f44663eef" name="yum-plugin-local" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="5438236b802e01a19009fc09e8fca032e8c18fbabfd5ec531e95f844360fc301" name="yum-plugin-local" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="2a7a8b8bd4300d269d7f3ddf708bc5f1bf1ed107f8bf2c554fd13756f6003960" name="yum-plugin-merge-conf" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="7df9ba9a494a6fe20519be5845cbd5d60d05276737171caaa1a95a92a50a360c" name="yum-plugin-merge-conf" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="5906127a1c9834bc244fe9fa27441ea6669c4cd2a4b43fd8703f0776cebd5cca" name="yum-plugin-ovl" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="945e680bb51d2c9613a3fa5917bc23de86a5185b24ca1d192440577f7244aa0e" name="yum-plugin-ovl" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="64169819e4dd38e1243e52d7b9993d5bd8cc9e1b3fa04c5eac396259b381af3c" name="yum-plugin-post-transaction-actions" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="0021690dfd14c3f7467073e75a1f3a819e7096facd6e31d52bfc3745e91461fd" name="yum-plugin-post-transaction-actions" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="9945db5a7a156612aa1bd5045d1a5f81ca788fe642a30ef0ad9c5a147662b2a6" name="yum-plugin-priorities" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="837d4a10ca94d64886123262f0b7f7d434ea42119c1203b2df0f8067ac0b81d6" name="yum-plugin-priorities" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="1257e21a8695cb60ceceaebc398b7b1fe43e6cc7ab13d55e713b9026d13b34db" name="yum-plugin-protectbase" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="840a8471f6157337b1eb3d5263f5c4723b189f56cdac886d5077775ba2b1dc76" name="yum-plugin-protectbase" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="fc4c6fc7cc3761cc1496e64079ee670444b9357b11c89afeb3aa34a2ce7f8fb4" name="yum-plugin-ps" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="384f6815b3d7299017f9fcf07a7a6a96ffb18e66d414385548fc808342e0a472" name="yum-plugin-ps" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="bf7035a0917efbfa6ff19052c92b25102fb5bdad56208fa4c59936a0c14c96b7" name="yum-plugin-remove-with-leaves" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="8445db17196626778735605a35ad2feaead7a76acef3f5d118bae40fde566dce" name="yum-plugin-remove-with-leaves" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="e5876ceb9d4c492b3b06ac9a95e69735fd6a0d4911425706ec465730e8c60b5d" name="yum-plugin-rpm-warm-cache" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="204c3746eeb040ef109e09b076d07100c42f458a7297faed226effda8e9b441f" name="yum-plugin-rpm-warm-cache" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="7c21edc2fd60d5ede4bb736747ecd2cc11aff43db83bf952e9ee5e58c41a4543" name="yum-plugin-security" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="536069961e8b456087d562ee5cd1ce95b948bd2194e8e27ee9b41a109941eb60" name="yum-plugin-security" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="13d55d17c68373a1876a87c09d90f168ccbcda6e13ac05a3412527ec4083c601" name="yum-plugin-show-leaves" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="4d6e9b1612c1a8a46b4024fdcd055cd17c3f6b727989bdaadac1a36a3c877845" name="yum-plugin-show-leaves" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="c79f1c61c480f12d8263c6181e86ec1b093f32b0846d65e3009896ef89e996d6" name="yum-plugin-tmprepo" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="e99f7e126faa01a980cada21f07895e5bd5d33784469e6fe9cd34bbd9cd932e3" name="yum-plugin-tmprepo" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="90f155f4730e9d0d7f39229fd7d1323ccbc67b69b4a5d4dafec949fb26b7fbca" name="yum-plugin-tsflags" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="d88ad93aa065d7d0801b05d47667a6480a02b8150babb245d2d81276aeea1bf1" name="yum-plugin-tsflags" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="d854e40894470026231e7a9b9735e7893b0a7350fe94a5e5b3c4a8dd5a2c38b1" name="yum-plugin-upgrade-helper" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="14eb4dcd3bfe045e929c6a10d1540acc1857b5c1bed834079683d13d021770c5" name="yum-plugin-upgrade-helper" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="aea09613189f98d4807ac75c3afdbc7547ea783b444d1ded8385200020c246c5" name="yum-plugin-verify" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="3594f07f96de23e75358d99dbed6b8ca651c3a2b17e263b177713874665ca69a" name="yum-plugin-verify" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="bf5271c0fecf727e2596e67f8baa40db7eaef57e52d80a25704c6c1108472457" name="yum-plugin-versionlock" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="d5c89381cb35629175ca08ae3d9967109f67d8ace618a63da20448aef577245e" name="yum-plugin-versionlock" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="ce06c2224c44ec217aacdcd501d5135d6352a8320cc5310e2bbc30e9f297236b" name="yum-updateonboot" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="744439503c7cdd6fabcba5c8b3659c211493fcdc37200d43a378eeb7da68511a" name="yum-updateonboot" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="f72ab989deed3d75d479b11b37ba658964df14ddd1db78e682707a447916c558" name="yum-utils" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="40.el6"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-38" date="1476705600">- Fix count of applicable security updates.
- Resolves: bug#1347813
- auto-update-debuginfo: fix check for repos in opts.
- Resolves: bug#1293982
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1313574
- repoquery: fix --pkgnarrow=installed.
- Resolves: bug#1280453</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-39" date="1477915200">- Filter duplicates when counting security updates.
- Resolves: bug#1272025
- Update yum-verify man page.
- Related: bug#1347813</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
</package>
<package pkgid="18964c5dd295e7517a568d1ace3e4b04e9ce7fbb6edff47875a516137ed1017f" name="yum-utils" arch="noarch">
  <version epoch="0" ver="1.1.30" rel="42.el6_10"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-40" date="1480075200">- Fix total available updates count.
- Related: bug#1272828</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; -1.1.30-41" date="1519214400">- package-cleanup: don't remove required dupes.
- Resolves: bug#1496340</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; -1.1.30-42" date="1532433600">- reposync: prevent path traversal.
- Resolves: bug#1600619</changelog>
</package>
<package pkgid="cbd3998d7afe51c1548e9ed32d6309f6bf03710eb4b60c28b47defc45b449ed4" name="zsh" arch="i686">
  <version epoch="0" ver="4.3.11" rel="11.el6_10"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 4.3.11-9" date="1535457600">- yet another signal-handling related fix from upstream (#1622892)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 4.3.11-10" date="1582545600">- drop privileges securely when unsetting PRIVILEGED option (CVE-2019-20044)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 4.3.11-11" date="1583236800">- improve printing of error messages introduced by the fix of CVE-2019-20044</changelog>
</package>
<package pkgid="d8943ef934e6dca3e57cd3d4d9f60a64f99e47471ef0ec06ab05b5efb4b36e9a" name="zsh" arch="i686">
  <version epoch="0" ver="4.3.11" rel="8.el6"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 4.3.11-6" date="1456833600">- signal-handling related fixes collected from upstream (#1311166)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 4.3.11-7" date="1525348800">- fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
- fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
- fix buffer overrun in xsymlinks (CVE-2017-18206)
- fix buffer overflow when scanning very long path for symlinks (CVE-2014-10072)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 4.3.11-8" date="1525435200">- fix defects detected by Coverity related to CVE-2017-18206 and CVE-2018-1083</changelog>
</package>
<package pkgid="27365cb9a38fbd29d9bbb9fa6a220807ec6686d05f041386a95c96ab3ef14300" name="zsh-html" arch="i686">
  <version epoch="0" ver="4.3.11" rel="11.el6_10"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 4.3.11-9" date="1535457600">- yet another signal-handling related fix from upstream (#1622892)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 4.3.11-10" date="1582545600">- drop privileges securely when unsetting PRIVILEGED option (CVE-2019-20044)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 4.3.11-11" date="1583236800">- improve printing of error messages introduced by the fix of CVE-2019-20044</changelog>
</package>
<package pkgid="3363c7ea898b4fe67673c9274e213e4f56dbd74c56d059066905a7fec92b52d6" name="zsh-html" arch="i686">
  <version epoch="0" ver="4.3.11" rel="8.el6"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 4.3.11-6" date="1456833600">- signal-handling related fixes collected from upstream (#1311166)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 4.3.11-7" date="1525348800">- fix stack-based buffer overflow in utils.c:checkmailpath() (CVE-2018-1100)
- fix stack-based buffer overflow in gen_matches_files() (CVE-2018-1083)
- fix buffer overrun in xsymlinks (CVE-2017-18206)
- fix buffer overflow when scanning very long path for symlinks (CVE-2014-10072)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 4.3.11-8" date="1525435200">- fix defects detected by Coverity related to CVE-2017-18206 and CVE-2018-1083</changelog>
</package>
</otherdata>