<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="202">
<package pkgid="d16748a6076297509e37d481ec3eb46d36e6f8b64170d9cbb753ab3681dce960" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="91.el6_9"/>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-82" date="1475755200">- Release 1.2.11.15-82
- Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-83" date="1475755201">- Release 1.2.11.15-83
- Resolves: #1327065 - After updating server, component nss-3.21.0-0.3.el6_7.x86_64, some client applications cannot connect to server (DS 48798)
- Resolves: #1266920 - invalid message about write_changelog_and_ruv on consumers (DS 47801)
- Resolves: #1330758 - add a nsTLS1.0 on or off new configuration parameter to cn=encryption,cn=config in RHEL 6 389-ds-base (DS 48816)
- Resolves: #1369572 - cleanallruv changelog cleaning incorrectly impacts all backends (DS 48964)
- Resolves: #1371706 - Server Side Sorting crashes the server. (DS 48970)
- Resolves: #1371678 - Disabling CLEAR password storage scheme will crash server when setting a password (DS 48975)
- Resolves: #1370145 - cannot reindex retrochangelog (DS 47619)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-84" date="1477569600">- Release 1.2.11.15-84
- Resolves: #1352109 - Replication stops working only when fips mode is set to true  (DS 48909)
- Resolves: #1372420 - DES to AES backport issues (DS 47462)
- Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 48983)
- Resolves: #1382386 - Directory Server accepts a wrong userdn macro ACI (DS 449)
- Resolves: #1382519 - 1.2.11 only -- coverity fixes (DS 49004)
- Resolves: #1387022 - specific search with sizelimit=1 sometimes returns no entry (DS 47703)
- Resolves: #1387772 - trace args debug logging must be more restrictive (DS 49009)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-85" date="1478520000">- Release 1.2.11.15-85
- Resolves: #1372420 - DES to AES backport issues (DS 47462)
- Resolves: #1391324 - ds9 backport 47411 - Replace substring search with plain search in referint plugin (DS 47411)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-86" date="1483963200">- Release 1.2.11.15-86
- Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 49049)
- Resolves: #1400997 - ldif2db.pl script shows wrong usage for -n as instance, instead of database (DS 49070)
- Resolves: #1403754 - ns-slapd crashes during tickets/ticket48665_test.py (DS 48665)
- Resolves: #1410645 - The "repl-monitor" web page does not display "year" in date. (DS 48220)
- Resolves: #1399600 - ns-slapd segfaults during execution of tickets/ticket47966_test.py (DS 47966, DS 48987)
- Resolves: #1402012 - Importing big ldif file with duplicate DNs throwing "unable to flush" error
- Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-87" date="1484654400">- Release 1.2.11.15-87
- Resolves: #1391701 - do not treat missing csn as fatal (DS 49020)
- Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-88" date="1485777600">- Release 1.2.11.15-88
- Resolves: #1413692 - custom schema is registered in small caps after schema reload (DS 47973)
- Resolves: #1408976 - dbscan-bin crashing due to a segmentation fault. (DS 49104)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-89" date="1486987200">- Release 1.2.11.15-89
- Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-90" date="1490270400">- Release 1.2.11.15-90
- Resovles: #1435365 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.1.11.15-91" date="1491220800">- Release 1.2.11.15-91
- Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages</changelog>
</package>
<package pkgid="840fae7bfd056e672e16465c446b582768b32494d2b4d2a2048c7c96687077ea" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="94.el6_9"/>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-85" date="1478520000">- Release 1.2.11.15-85
- Resolves: #1372420 - DES to AES backport issues (DS 47462)
- Resolves: #1391324 - ds9 backport 47411 - Replace substring search with plain search in referint plugin (DS 47411)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-86" date="1483963200">- Release 1.2.11.15-86
- Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 49049)
- Resolves: #1400997 - ldif2db.pl script shows wrong usage for -n as instance, instead of database (DS 49070)
- Resolves: #1403754 - ns-slapd crashes during tickets/ticket48665_test.py (DS 48665)
- Resolves: #1410645 - The "repl-monitor" web page does not display "year" in date. (DS 48220)
- Resolves: #1399600 - ns-slapd segfaults during execution of tickets/ticket47966_test.py (DS 47966, DS 48987)
- Resolves: #1402012 - Importing big ldif file with duplicate DNs throwing "unable to flush" error
- Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-87" date="1484654400">- Release 1.2.11.15-87
- Resolves: #1391701 - do not treat missing csn as fatal (DS 49020)
- Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-88" date="1485777600">- Release 1.2.11.15-88
- Resolves: #1413692 - custom schema is registered in small caps after schema reload (DS 47973)
- Resolves: #1408976 - dbscan-bin crashing due to a segmentation fault. (DS 49104)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-89" date="1486987200">- Release 1.2.11.15-89
- Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-90" date="1490270400">- Release 1.2.11.15-90
- Resovles: #1435365 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-91" date="1491220800">- Release 1.2.11.15-91
- Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-92" date="1519387200">- Release 1.2.11.15-92
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-93" date="1519646400">- Release 1.2.11.15-93
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-94" date="1519646401">- Release 1.2.11.15-94
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)</changelog>
</package>
<package pkgid="a15858c02f57df43bd18857509d70a70dc9886778c2504f992664f8f22b34287" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.11.15" rel="95.el6_9"/>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-86" date="1483963200">- Release 1.2.11.15-86
- Resolves: #1380435 - Backport request of ticket 48983 to RHEL6.9 (DS 49049)
- Resolves: #1400997 - ldif2db.pl script shows wrong usage for -n as instance, instead of database (DS 49070)
- Resolves: #1403754 - ns-slapd crashes during tickets/ticket48665_test.py (DS 48665)
- Resolves: #1410645 - The "repl-monitor" web page does not display "year" in date. (DS 48220)
- Resolves: #1399600 - ns-slapd segfaults during execution of tickets/ticket47966_test.py (DS 47966, DS 48987)
- Resolves: #1402012 - Importing big ldif file with duplicate DNs throwing "unable to flush" error
- Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-87" date="1484654400">- Release 1.2.11.15-87
- Resolves: #1391701 - do not treat missing csn as fatal (DS 49020)
- Resolves: #1406835 - memberOf fixup task does not validate args (DS 49072)</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.2.11.15-88" date="1485777600">- Release 1.2.11.15-88
- Resolves: #1413692 - custom schema is registered in small caps after schema reload (DS 47973)
- Resolves: #1408976 - dbscan-bin crashing due to a segmentation fault. (DS 49104)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-89" date="1486987200">- Release 1.2.11.15-89
- Resolves: #1421512 - ns-slapd crashes in ldif_sput due to the output buf size is less than the real size.</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-90" date="1490270400">- Release 1.2.11.15-90
- Resovles: #1435365 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-91" date="1491220800">- Release 1.2.11.15-91
- Resolves: bug 1437777 - EMBARGOED CVE-2017-2668 389-ds-base: Remote crash via crafted LDAP messages</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-92" date="1519387200">- Release 1.2.11.15-92
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-93" date="1519646400">- Release 1.2.11.15-93
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c
- Resolves: Bug 1543798 - EMBARGOED CVE-2018-1054 389-ds-base: remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 in collate.c</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11-15-94" date="1519646401">- Release 1.2.11.15-94
- Resolves: Bug 1544415 - CVE-2017-15135 389-ds-base: Authentication bypass due to lack of size check in slapi_ct_memcmp function in ch_malloc.c (fix cherry-pick error)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.2.11.15-95" date="1523534400">- Bump version to 1.2.11-15-95
- Resolves: Bug 1562152 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="9beea6d097102060e87ae5119c5e0395ad131eea921b5f7fa13e157156b0ded2" name="acl-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.49" rel="7.el6_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.47-5" date="1248436800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 2.2.47-5.1" date="1259582400">- Rebuilt for RHEL 6</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 2.2.49-1" date="1262865600">- update to the latest bugfix release
- CVE-2009-4411</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 2.2.49-2" date="1268222400">- upstream patch for setfacl --restore SUID/SGID bits handling</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 2.2.49-3" date="1269432000">- prevent setfacl --restore from SIGSEGV on malformed restore file (#576512)
- run the test-suite if possible</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 2.2.49-4" date="1274788800">- let acl depend on the same version of libacl (#595674)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 2.2.49-5" date="1309176000">- clarify that removing a non-existent acl entry is not an error (#674883)
- update project URL in package specification (#702638)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 2.2.49-6" date="1311681600">- add function acl_extended_file_nofollow() (#720318)
- build with partial RELRO support as a security enhancement (#723998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 2.2.49-7" date="1474632000">- fix SIGSEGV of getfacl -e on overly long group name (#1025246)
- fix test-suite failure on a repeated run (#743847)</changelog>
  <changelog author="Kamil Dudka &lt;dkdudka@redhat.com&gt; - 2.2.49-7.el6_9.1" date="1498478400">- fix spurious acl_check() failure on setfacl --restore (#1451801)</changelog>
</package>
<package pkgid="a923a8941d54554748deb7a94818d33062373fc44f7e7a30b179130ac56c621d" name="apr-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.9" rel="5.el6_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.6-2" date="1248436800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Bojan Smojver &lt;bojan@rexursive.com&gt; - 1.3.7-1" date="1248609600">- bump up to 1.3.7</changelog>
  <changelog author="Bojan Smojver &lt;bojan@rexursive.com&gt; - 1.3.7-2" date="1248609601">- include apr_cv_sock_cloexec too</changelog>
  <changelog author="Bojan Smojver &lt;bojan@rexursive.com&gt; - 1.3.8-1" date="1249560000">- bump up to 1.3.8
- CVE-2009-2412
- allocator alignment fixes</changelog>
  <changelog author="Bojan Smojver &lt;bojan@rexursive.com&gt; - 1.3.9-1" date="1253880000">- bump up to 1.3.9</changelog>
  <changelog author="Bojan Smojver &lt;bojan@rexursive.com&gt; - 1.3.9-2" date="1254139200">- revert use of accept4(), dup3() and epoll_create1()</changelog>
  <changelog author="Bojan Smojver &lt;bojan@rexursive.com&gt; - 1.3.9-3" date="1256472000">- remove uuid/crypt libs from pkg-config file</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.3.9-4" date="1330603200">- add fix for apr_fnmatch() regression (CVE-2011-1928, #706352)
- add fix for CVE-2011-0419 (#703520)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.3.9-5" date="1339156800">- add fix for apr_mcast_hops w/AF_INET6 socket (#824515)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.3.9-5.1" date="1509364800">- Resolves: #1507346 - CVE-2017-12613 apr: Out-of-bounds array deref
  in apr_time_exp*() functions</changelog>
</package>
<package pkgid="2a23d416d61a30727a1b2dab0549e130c3db7cfec6acb78de69d3342bf945d10" name="autofs-debuginfo" arch="i686">
  <version epoch="1" ver="5.0.5" rel="133.el6_9"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-124" date="1476100800">- bz1350786 - On every system boot automount needs a restart to access
  NIS map
  - wait for master map available at start.
  - add master read wait option.
- Resolves: rhbz#1350786</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-125" date="1476273600">- bz703846 - Incorrect autofs.schema
  - update and add README for old autofs schema
- Resolves: rhbz#703846</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-126" date="1476705600">- bz1384404 - Automounter does not fetch maps from AD
  - work around sss startup delay.
  - add sss master map wait config option.
- Resolves: rhbz#1384404</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-127" date="1479384000">- bz1350786 - On every system boot automount needs a restart to access
  NIS map
  - fix included master map not found return.
  - dont exit on master map read fail timeout.
  - set sane default master read wait timeout.
- Related: rhbz#1350786</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-128" date="1480334400">- bz1350786 - On every system boot automount needs a restart to access
  NIS map
  - don't return until after master map retry read.
- Related: rhbz#1350786</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-129" date="1480334401">- bz1350786 - On every system boot automount needs a restart to access
  NIS map
  - make lookup_nss_read_master() return nss status.
- Related: rhbz#1350786</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-130" date="1480507200">- bz703846 - Incorrect autofs.schema
  - fix autofs.schema.new not copied to package.
- Resolves: rhbz#703846</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-131" date="1484049600">- bz1396403 - Trying to access a non-existent directory using automount
              results in 4 minute hang with nfs-utils-1.2.3-73.el6
  - fix inconsistent signed usage for __rpc_ping().
  - check NFS server availability on local mount fallback
- Resolves: rhbz#1396403</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-132" date="1485864000">- bz1277033 - RHEL6.7: shutdown / reboot hangs with findmnt in a readlink
  system call, doing path_walk and stuck in autofs4_wait
  - make set_direct_mount_catatonic() more general.
  - set autofs mounts catatonic at exit
- Related: rhbz#1277033</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.5-133.el6_9" date="1508155200">- bz1501922 - Autofs processes hung while waiting for the release of an
  entry master_lock that is held by another thread waiting on a bind mount
  - only take master map mutex for master map update.
-Resolves: rhbz#1501922</changelog>
</package>
<package pkgid="4449c62988eccfeaea92a11497bb13921d70963651c44f31f5dd665e83648487" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.54.rc1" date="1476878400">- Increase ISC_SOCKET_MAXEVENTS to 2048 (#1326283)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.55.rc1" date="1476878401">- Backported relevant parts of [RT #39567] (#1259923)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.56.rc1" date="1476964800">- Do not include patch backup in docs (fixes #1325081 patch)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.57.rc1" date="1476964801">- Do not change lib permissions in chroot (#1321239)
- Support WKS records in chroot (#1297562)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.58.rc1" date="1477915200">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.59.rc1" date="1477915201">- Use /lib or /lib64 only if directory in chroot already exists
- Tighten NSS library pattern, escape chroot mount path</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.60.rc1" date="1479816000">- Restore SELinux contexts before named restart</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.61.rc1" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
</package>
<package pkgid="bbe0c5291f66d4ca2bb1fc89350701840cc131cb83167c837cc284416cc1e668" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.55.rc1" date="1476878400">- Backported relevant parts of [RT #39567] (#1259923)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.56.rc1" date="1476964800">- Do not include patch backup in docs (fixes #1325081 patch)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.57.rc1" date="1476964801">- Do not change lib permissions in chroot (#1321239)
- Support WKS records in chroot (#1297562)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.58.rc1" date="1477915200">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.59.rc1" date="1477915201">- Use /lib or /lib64 only if directory in chroot already exists
- Tighten NSS library pattern, escape chroot mount path</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.60.rc1" date="1479816000">- Restore SELinux contexts before named restart</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.61.rc1" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
</package>
<package pkgid="66b61b8dd1524cdb5bfd53811ee1f9250d9385a05cd0be3d8436a7a779949739" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.57.rc1" date="1476964800">- Do not change lib permissions in chroot (#1321239)
- Support WKS records in chroot (#1297562)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.58.rc1" date="1477915200">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.59.rc1" date="1477915201">- Use /lib or /lib64 only if directory in chroot already exists
- Tighten NSS library pattern, escape chroot mount path</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.60.rc1" date="1479816000">- Restore SELinux contexts before named restart</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.61.rc1" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
</package>
<package pkgid="f6bad4b9edf9a0afb36d987b941e84c0a43c961fcdd7372030bfdfd792f3e2eb" name="bind-debuginfo" arch="i686">
  <version epoch="32" ver="9.8.2" rel="0.62.rc1.el6_9.5"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 32:9.8.2-0.58.rc1" date="1477915200">- Fix CVE-2016-8864</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.59.rc1" date="1477915201">- Use /lib or /lib64 only if directory in chroot already exists
- Tighten NSS library pattern, escape chroot mount path</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.60.rc1" date="1479816000">- Restore SELinux contexts before named restart</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.61.rc1" date="1484049600">- Fix CVE-2016-9147 (ISC change 4510)
- Fix regression introduced by CVE-2016-8864 (ISC change 4530)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1" date="1486555200">- Fix and test caching CNAME before DNAME (ISC change 4558)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.1" date="1492516800">- Fix CVE-2017-3136 (ISC change 4575)
- Fix CVE-2017-3137 (ISC change 4578)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.2" date="1493812800">- Fix DNSKEY that encountered a CNAME (#1447869, ISC change 3391)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.3" date="1496318400">- Update root servers and trust anchors (#1458234)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.4" date="1498737600">- Fix CVE-2017-3142 and CVE-2017-3143</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.8.2-0.62.rc1.5" date="1516190400">- Fix CVE-2017-3145</changelog>
</package>
<package pkgid="23e5b71c9918e7e70de2c9730326674fbdd7fab56e63d525b5810d5402c02e43" name="binutils-debuginfo" arch="i686">
  <version epoch="0" ver="2.20.51.0.2" rel="5.47.el6_9.1"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.20.51.0.2-5.39" date="1397044800">- Do not install windmc(1) man page (#850832)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.20.51.0.2-5.40" date="1397044801">- Fix up manpage for assembler (#870125)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.20.51.0.2-5.41" date="1398340800">- Add check for debugging section in LD to LE linker relaxation 
  for R_390_TLS_LDO32. (#959422)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.20.51.0.2-5.42" date="1407844800">- Do not overwrite valid SONAME with empty string.  (#1128279)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.20.51.0.2-5.43" date="1418904000">- Don't replace R_390_TLS_LE{32,64} with R_390_TLS_TPOFF for PIE
  (#1175590)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; - 2.20.51.0.2-5.44" date="1449576000">- Backport upstream RELRO fixes. (#1227839)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; - 2.20.51.0.2-5.45" date="1467720000">- Fix locating and reading separate debug info files. (#1311494)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; - 2.20.51.0.2-5.46" date="1483617600">- Fix seg-fault in readelf reading corrupt binary. (#1409817)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; - 2.20.51.0.2-5.47" date="1488283200">- Fix seg-fault in x86 PIE binaries. (#1427285)</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; - 2.20.51.0.2-5.47_el6_9.1" date="1490616000">- Update Release string to indicate a z-stream fix.
  (#1433075)</changelog>
</package>
<package pkgid="ad0e742a9fda4ad1a34c7dba92fb4c30b63ee0556446fda30a4a56e51a7198e7" name="bluez-debuginfo" arch="i686">
  <version epoch="0" ver="4.66" rel="2.el6_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.55-2" date="1254916800">- Enable caps lowering</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.55-3" date="1255089600">- Update cable pairing plugin to use libudev</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.56-1" date="1255176000">- Update to 4.56</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.57-1" date="1257076800">- Update to 4.57</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.57-2" date="1257163200">- Move the rfcomm.conf to the compat package, otherwise
the comments at the top of it are confusing</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.57-3" date="1257508800">- Fix error when Samsung headset sends us its battery status</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.57-4" date="1261051200">- Ignore battery notifications from headsets
Related: rhbz#543948</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.57-5" date="1273752000">- Don't build on s390 machines, there's no USB there
Related: rhbz#584317</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 4.66-1" date="1277899200">- Update to 4.66
- Update cable pairing patch
- Remove out-dated patches, including wacom pairing
- Move hidd, pand and dund man pages to the -compat
  sub-package
Resolves: rhbz#565586</changelog>
  <changelog author="Don Zickus &lt;dzickus@redhat.com&gt; 4.66-2" date="1505131200">- sdpd heap fixes
Resolves: #1490008</changelog>
</package>
<package pkgid="996752089e1fe083004a0aa26eebfaf4654ff8c0bae82129cdd97055df05c1ce" name="cups-debuginfo" arch="i686">
  <version epoch="1" ver="1.4.2" rel="78.el6_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1:1.4.2-69" date="1424692800">- Document ErrorPolicy in cupsd.conf manpage (bug #1120587, STR #4457).
- Prevent cups-polld busy loop when access is restricted (bug #1164854).
- Apply upstream patch to prevent crash in cupsdContinueJob() (bug #1187840).
- Added failover backend to support priority-based failover (bug #1115219).
- Apply patch to fix sanitize_title documentation (bug #988062, STR #4569).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1:1.4.2-70" date="1425470400">- Fixed SetEnv patch (bug #1198394).
- Validate ErrorPolicy directory when reading configuration (bug #1196217,
  STR #4591).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1:1.4.2-71" date="1429099200">- Apply patch for robustness in cookie parser (STR #4619).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1:1.4.2-72" date="1433937600">- CVE-2015-1158, CVE-2015-1159, CVE-2014-9679 (bug #1229983).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1:1.4.2-73" date="1452600000">- Fix failover backend options parsing (bug #1231322).
- The socket backend could go into an infinite loop with certain printers
  (bug #1276772, STR #3622)
- dnssd backend: don't crash if avahi gives a callback with no TXT record
  (bug #1269305)
- Don't unload jobs that couldn't be saved (bug #1283003, STR #4742).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1:1.4.2-74" date="1452686400">- Reset job's kill_time in finalize_job() (bug #1293498).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.4.2-75" date="1474545600">- 1324158 - IPP enters infinite loop consuming CPU</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.4.2-76" date="1474545601">- 1344782 - Banner pages do not show time-at-creation or time-at-processing
- 1219571 - Invalid memory accesses lead to crash when configured class has implicit class as first member</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.4.2-77" date="1478001600">- 1099617 - Using "lp -o orientation-requested=6" with a PDF file has no effect.
- 1268131 - Printing PDF with fit-to-page doesn't take printer HW margins into account</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.4.2-78" date="1493294400">- 1442206 - Errors when issuing lp* commands</changelog>
</package>
<package pkgid="5f0c1ca5ffa21d93c91581797aa1affaf2c4217724f9168d9cecfd8c3160967d" name="curl-debuginfo" arch="i686">
  <version epoch="0" ver="7.19.7" rel="53.el6_9"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-44" date="1419249600">- use only full matches for hosts used as IP address in cookies (CVE-2014-3613)
- fix handling of CURLOPT_COPYPOSTFIELDS in curl_easy_duphandle (CVE-2014-3707)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-45" date="1420718400">- reject CRLFs in URLs passed to proxy (CVE-2014-8150)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-46" date="1430136000">- require credentials to match for NTLM re-use (CVE-2015-3143)
- close Negotiate connections when done (CVE-2015-3148)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-47" date="1441195200">- make SCP/SFTP work with --proxytunnel (#1258566)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-48" date="1445947200">- SSH: do not require public key file for user authentication (#1260742)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-49" date="1446552000">- prevent NSS from incorrectly re-using a session (#1269660)
- prevent test46 from failing due to expired cookie (#1277551)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-50" date="1452513600">- use the default min/max TLS version provided by NSS (#1289205)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-51" date="1452859200">- SSH: make CURLOPT_SSH_PUBLIC_KEYFILE treat "" as NULL (#1260742)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-52" date="1454068800">- fix a bug in DNS caching code that causes a memory leak (#1302893)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 7.19.7-53" date="1488888000">- treat Negotiate authentication as connection-oriented (CVE-2017-2628)</changelog>
</package>
<package pkgid="ae13cd88d58a3fedcdff53000b93a28a73b767acb0e13f2009d4a4325e4ad5cc" name="device-mapper-multipath-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.9" rel="100.el6_9.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.92" date="1455883200">- Modify 0246-RHBZ-1145442-raw-output-and-wildcards.patch
  * fix PAD and PRINT macros
- Resolves: bz #1145442</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.93" date="1457524800">- Add 0250-RHBZ-1316165-fix-i686-size-bug.patch
  * make multipathd use uint64_t for tracking the interactive command
    fingerprint.
- Resolves: bz #1316165</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.94" date="1476446400">- Add 0251-RHBZ-1349376-fix-makefile.patch
  * make multipath use correct version of libdevmapper
- Add 0252-RHBZ-1333334-huawei-config.patch
- Add 0253-RHBZ-1305589-check-multipathd.patch
  * warn if multipath devices exist and mutipathd is not running
- Add 0254-RHBZ-1310320-no-kpartx.patch
  * add skip_kpartx option to skip kpartx device creation
- Add 0255-UPBZ-1322532-disable-reinstate.patch
  * do not reinstate unusable Implicit ALUA ghost paths
- Add 0256-RHBZ-1324764-man-page-typo.patch
- Add 0257-UPBZ-1328077-resize-map.patch
  * reset size if resizer operation fails
- Add 0259-UPBZ-1343747-dont-fail-discovery.patch
  * keep multipath from failing if it fails to get information on any device
- Add 0260-RHBZ-1364879-check-mpath-prefix.patch
  * ignore all devices that don't have a uuid starting with "mpath-"
- Add 0261-RHBZ-1377532-disable-changed-paths.patch
  * do not use path devices that change their wwid
- Resolves: bz #1299644, #1305589, #1310320, #1322532, #1324764, #1328077
- Resovles: bz #1333334, #1343747, #1349376, #1364879, #1377532</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.95" date="1476446401">- Modify 0254-RHBZ-1310320-no-kpartx.patch
  * fix small bug with unitialized data
- Refresh 0261-RHBZ-1377532-disable-changed-paths.patch
- Add 0262-RH-free-vector.patch
  * Fix coverity discovered bug in error path
- Resolves: bz #1310320</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.96" date="1478174400">- Add 0258-UPBZ-1300414-PURE_config.patch
- Add 0264-RHBZ-1365710-no-use-after-free.patch
  * Fix two segfaults, and NULL out some structures after free
- Add 0265-RHBZ-1390472-dont-exit.patch
  * don't exit if multipath hits recoverable errors during startup
- Resolves: bz #1300414, #1365710, #1390472</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.97" date="1478779200">- Add 0265-RHBZ-1355669-max-sectors-kb.patch
  * add "max_sectors_kb" config option to set this value on all paths
- Change devicemapper Requires to &gt;= 1.02.117-9.el6 (bz #1344381)
  * forces multipath to use latest version of blk-availability
- Resolves: bz #1344381, #1355669</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.98" date="1481025600">- Add 0266-RHBZ-1401391-fix-prio-put.patch
  * don't try to drop a nonexistant prio handler
- Add 0267-RHBZ-1401769-orphan-status.patch
  * don't print out checker and device status for orphan paths
- Resolves: bz #1401391, #1401769</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.99" date="1481025601">- Change devicemapper Requires to &gt;= 1.02.117-10.el6 (bz #1344381)
- Resolves: #1344381</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.100" date="1483617600">- Modify 0261-RHBZ-1377532-disable-changed-paths.patch
  * add man page information
- Refresh 0265-RHBZ-1355669-max-sectors-kb.patch
- Related: #1377532</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; -0.4.9.100.1" date="1506686400">- Add 0268-RHBZ-1497059-fix-reserve.patch
  * stop waiting for threads that weren't successfully created
- Resolves: bz #1497059</changelog>
</package>
<package pkgid="eba20f0d65814f42bfbde092773091c10300013442171e96f2e6e4b72bff57ad" name="dhcp-debuginfo" arch="i686">
  <version epoch="12" ver="4.1.1" rel="53.P1.el6_9.1"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-45.P1" date="1418817600">- dhcrelay -6 was not working due to patch for #1001742 (#1151054)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-46.P1" date="1424433600">- Fix dhcrelay6 init script (#1187967)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-47.P1" date="1424779200">- Improve seeding the random number generator in dhclient (#1185075)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-48.P1" date="1424865600">- Actually take IB MAC address into account when creating seed (#1185075)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-49.P1" date="1430740800">- Fix dhcrelay init script too. (#1187967)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-50.P1" date="1449144000">- Lease table overflow crash. (#1133917)
- Add ignore-client-uids option. (#1196768)
- dhclient-script: it's OK if the arping reply comes from our system. (#1204095)
- VLAN ID is only bottom 12-bits of TCI. (#1259552)
- dhclient: Make sure link-local address is ready in stateless mode. (#1263466)
- dhclient-script: make_resolv_conf(): Keep old nameservers
  if server sends domain-name/search, but no nameservers. (#1269595)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-51.P1" date="1452513600">- send unicast request/release via correct interface (#1297445)</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.1.1-52.P1" date="1477569600">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.1.1-53.P1" date="1478606400">- Resolves: #1363790 - dhclient does not update routing table after the lease
  expiry</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-54.P1" date="1501502400">- Resolves: #1063217 - failover hangs with both potential-conflict</changelog>
</package>
<package pkgid="c38913f324be1338a19eb6c713119616ff8729d24759f3fe3598cc2862f2a561" name="dhcp-debuginfo" arch="i686">
  <version epoch="12" ver="4.1.1" rel="53.P1.el6_9.3"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-46.P1" date="1424433600">- Fix dhcrelay6 init script (#1187967)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-47.P1" date="1424779200">- Improve seeding the random number generator in dhclient (#1185075)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-48.P1" date="1424865600">- Actually take IB MAC address into account when creating seed (#1185075)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-49.P1" date="1430740800">- Fix dhcrelay init script too. (#1187967)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-50.P1" date="1449144000">- Lease table overflow crash. (#1133917)
- Add ignore-client-uids option. (#1196768)
- dhclient-script: it's OK if the arping reply comes from our system. (#1204095)
- VLAN ID is only bottom 12-bits of TCI. (#1259552)
- dhclient: Make sure link-local address is ready in stateless mode. (#1263466)
- dhclient-script: make_resolv_conf(): Keep old nameservers
  if server sends domain-name/search, but no nameservers. (#1269595)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-51.P1" date="1452513600">- send unicast request/release via correct interface (#1297445)</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.1.1-52.P1" date="1477569600">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.1.1-53.P1" date="1478606400">- Resolves: #1363790 - dhclient does not update routing table after the lease
  expiry</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-53.P1.1" date="1501502400">- Resolves: #1063217 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.3" date="1519819200">- Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

&lt;* Wed Feb 28 2018 Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.2
- Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow</changelog>
</package>
<package pkgid="cc21e4707f85ac8d673c5826abcbb5f55e479cfd88a2b9b3de6a25aa8bc1a6f3" name="dhcp-debuginfo" arch="i686">
  <version epoch="12" ver="4.1.1" rel="53.P1.el6_9.4"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-47.P1" date="1424779200">- Improve seeding the random number generator in dhclient (#1185075)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-48.P1" date="1424865600">- Actually take IB MAC address into account when creating seed (#1185075)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-49.P1" date="1430740800">- Fix dhcrelay init script too. (#1187967)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-50.P1" date="1449144000">- Lease table overflow crash. (#1133917)
- Add ignore-client-uids option. (#1196768)
- dhclient-script: it's OK if the arping reply comes from our system. (#1204095)
- VLAN ID is only bottom 12-bits of TCI. (#1259552)
- dhclient: Make sure link-local address is ready in stateless mode. (#1263466)
- dhclient-script: make_resolv_conf(): Keep old nameservers
  if server sends domain-name/search, but no nameservers. (#1269595)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-51.P1" date="1452513600">- send unicast request/release via correct interface (#1297445)</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.1.1-52.P1" date="1477569600">- Resolves: #1321945 - dhclient hook script for Azure cloud</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 12:4.1.1-53.P1" date="1478606400">- Resolves: #1363790 - dhclient does not update routing table after the lease
  expiry</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 12:4.1.1-53.P1.1" date="1501502400">- Resolves: #1063217 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.3" date="1519819200">- Resolves: #1550085 - CVE-2018-5733 Avoid reference overflow

&lt;* Wed Feb 28 2018 Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.2
- Resolves: #1550083 - CVE-2018-5732 Avoid options buffer overflow</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.1.1-53.P1.el6_9.4" date="1524571200">- Resolves: #1570897 - Fix comamnd execution in NM script (CVE-2018-1111)</changelog>
</package>
<package pkgid="4af475caf173efb52d8f119285af6b91b5769c469f17a7f22c5d436331b4ed62" name="dnsmasq-debuginfo" arch="i686">
  <version epoch="0" ver="2.48" rel="18.el6_9"/>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 2.48-9" date="1354449600">- Added cc flag -fno-strict-aliasing to solve Testsuite regressions</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 2.48-10" date="1354622400">- Fixed dnsmasq-2.48-add-bind-dynamic-option.patch
 - the option --bind-dynamic was not set correctly when used</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 2.48-11" date="1355745600">- Revert previous changes because of many problems with --bind-dynamic option backport.
- Dropping dnsmasq-2.48-add-bind-dynamic-option.patch
- Set SO_BINDTODEVICE socket option when using --bind-interfaces (rhbz#884957)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 2.48-12" date="1355918400">- Fixing initscript restart stop functions (rhbz#850944)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 2.48-13" date="1357300800">- Fix the DHCP RELEASE problem when two or more dnsmasq instances are running (rhbz#887156)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 2.48-14" date="1396612800">- Fix initscript status command to check only the system instance (#991473)</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.48-15" date="1449662400">- Resolves: #1288617 - dnsmasq: Non-interactive startup might lead to 100% cpu
  consumption</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.48-16" date="1449748800">- Resolves: #1288617 - add missing patch file</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 2.48-17" date="1453118400">- Resolves: #1154953 - use both SO_REUSEADDR and SO_REUSEPORT</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.48-18" date="1506427200">- Fix CVE-2017-14491</changelog>
</package>
<package pkgid="c76136a0e8be3f08738e889646e349cb3a6a2bb244b348635ac567590d95bc96" name="fence-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.0.15" rel="13.el6_9.2"/>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.15-5" date="1424952000">- fence_ilo_ssh: New fence agent
  Resolves: rhbz#1111482
- fence_kdump: Update metadata for 'monitor'
  Resolves: rhbz#1094515</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.15-6" date="1425297600">- fence_kdump: Fix problems found by Coverity
  Resolves: rhbz#1094515</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.15-7" date="1427198400">- fence_scsi: remove new pythonic version
- fence_ipmilan: unset default cipher
- fence_ilo2: add options --tls1.0
- fence_bladecenter: fix login process
  Resolves: rhbz#1049805</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.15-8" date="1427371200">- fix fence2rng to handle quotes
  Resolves: rhbz#1118008</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.15-9" date="1440676800">- fence_ipmilan no longer understands -i
  Resolves: rhbz#1254046
- fence_ipmilan no longer understands 'timeout'
  Resolves: rhbz#1254700
- fence_ilo: Improve negotiation of TLS protocol
  Resolves: rhbz#1256902
- fence_rsa: Login process over telnet is not working
  Resolves: rhbz#1247062
- fence_mpath: lose scsi keys after restart
  Resolves: rhbz#1254183</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.15-10" date="1446465600">- fence_brocade: Regression in get_power_status
  Resolves: rhbz#1274432</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.15-11" date="1450094400">- fence_ipmilan: Revert power_wait values
  Resolves: rhbz#1273632
- fence_apc: Support for firmware 6.x
  Resolves: rhbz#1259254
- fence_ipmilan: Add 'diag' action
  Resolves: rhbz#1266600
- fencing: Add '-list-status' action
  Resolves: rhbz#1183829</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.15-12" date="1450267200">- fence_ipmilan: Add 'diag' action
  Resolves: rhbz#1266600</changelog>
  <changelog author="Marek Grac &lt;mgrac@redhat.com&gt; - 4.0.15-13" date="1471262400">- fence_ipmilan: Do not print password to debug output
  Resolves: rhbz#1358064
- fencing: Handle None as status properly
  Resolves: rhbz#1361623</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.15-13.2" date="1509710400">- fence_rhevm: add "--api-path" and "--disable-http-filter" to be
  able to explicitly use oVirt API version 3
  Resolves: rhbz#1506694</changelog>
</package>
<package pkgid="b22d26fe601465a37dae1fb3979682391002d9bf8b5acc1dc05ebb5cf06c36ee" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.1.0" rel="2.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-0.11" date="1486468800">- Readded addons patch</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-0.12" date="1487678400">- Update to 52.0b8</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-0.13" date="1488196800">- Added fix for rhbz#1414535</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-1" date="1488283200">- Update to 52.0ESR (B1)
- Build RHEL7 package for Gtk3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1491912000">- Update to 52.1.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.1.0-2" date="1492603200">- Update to 52.1.0 ESR (Build3)</changelog>
</package>
<package pkgid="f5bd792b238b9daafaf0ef972f7a63731d1db9cba08b3e0c5f2192f8091fad3b" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.2.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-0.12" date="1487678400">- Update to 52.0b8</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-0.13" date="1488196800">- Added fix for rhbz#1414535</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-1" date="1488283200">- Update to 52.0ESR (B1)
- Build RHEL7 package for Gtk3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1491912000">- Update to 52.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.1-1" date="1493985600">- Update to 52.1.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1496923200">- Update to 52.2.0 ESR</changelog>
</package>
<package pkgid="411cc160a10b1ae57804c5b0b1fbe8afa18a8dee2abdb2c1a2a8e58439621676" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.3.0" rel="3.el6_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-1" date="1488283200">- Update to 52.0ESR (B1)
- Build RHEL7 package for Gtk3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-2" date="1488369600">- Enable system nss</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1491912000">- Update to 52.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.1-1" date="1493985600">- Update to 52.1.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1496923200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1502107200">- Fix for rhbz#1470294 - bundling newer libffi for ppc* platforms</changelog>
</package>
<package pkgid="b50d72e13c63823162602832f97486e0543763d866b2028323ea850deaedb4f8" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.4.0" rel="1.el6_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-3" date="1488456000">- Added fix for rhbz#1423012 - ppc64 gfx crashes</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1491912000">- Update to 52.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.1-1" date="1493985600">- Update to 52.1.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1496923200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1502107200">- Fix for rhbz#1470294 - bundling newer libffi for ppc* platforms</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-4" date="1503662400">- Added fix for rhbz#1451055</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
</package>
<package pkgid="24ba34296aaed28a72e70263d5def410c4a4675bb07ca1704b4ce399b4ac0a02" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.5.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0-4" date="1488801600">- Update to 52.0 ESR (b4)</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1491912000">- Update to 52.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.1-1" date="1493985600">- Update to 52.1.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1496923200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1502107200">- Fix for rhbz#1470294 - bundling newer libffi for ppc* platforms</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-4" date="1503662400">- Added fix for rhbz#1451055</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
</package>
<package pkgid="ab002ab3e9a6227790e165ce51af98bfa46851b0b3906ebc4a7f9166fb480fa3" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.5.1" rel="1.el6_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.0-5" date="1489752000">- Added fix for mozbz#1348168/CVE-2017-5428</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1491912000">- Update to 52.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.1-1" date="1493985600">- Update to 52.1.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1496923200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1502107200">- Fix for rhbz#1470294 - bundling newer libffi for ppc* platforms</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-4" date="1503662400">- Added fix for rhbz#1451055</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
</package>
<package pkgid="b916708907ae8f56b32a660f187d785fd8be509081514f2c637dc3a7f88d8daf" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.6.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1491912000">- Update to 52.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.1-1" date="1493985600">- Update to 52.1.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1496923200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1502107200">- Fix for rhbz#1470294 - bundling newer libffi for ppc* platforms</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-4" date="1503662400">- Added fix for rhbz#1451055</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.0-1" date="1516276800">- Update to 52.6.0 ESR</changelog>
</package>
<package pkgid="074b711014d4b3ffa5131e71dfc8c97a872d6fa0072b82a7ea3716a2f2ecc485" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.7.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.1-1" date="1493985600">- Update to 52.1.1 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1496923200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1502107200">- Fix for rhbz#1470294 - bundling newer libffi for ppc* platforms</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-4" date="1503662400">- Added fix for rhbz#1451055</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.0-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
</package>
<package pkgid="687a3fed7915c544157a113078be389886d76f5fb8a08f1805ee837036fa2e52" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.7.2" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1496923200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1502107200">- Fix for rhbz#1470294 - bundling newer libffi for ppc* platforms</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-4" date="1503662400">- Added fix for rhbz#1451055</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.0-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
</package>
<package pkgid="fde4bb54804348bcc2c278b2d18ca437e090c4a3edfc0b5f1636d2ac008a0427" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.7.3" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-2" date="1501761600">- Update to 52.3.0 ESR (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1502107200">- Fix for rhbz#1470294 - bundling newer libffi for ppc* platforms</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-4" date="1503662400">- Added fix for rhbz#1451055</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.0-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
</package>
<package pkgid="800f8d061edf6760c8d60aca540152deb63735355b72a3f808d317a233c04eaf" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.8.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1502107200">- Fix for rhbz#1470294 - bundling newer libffi for ppc* platforms</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-4" date="1503662400">- Added fix for rhbz#1451055</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.0-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1525435200">- Update to 52.8.0 ESR</changelog>
</package>
<package pkgid="f04ea5e30f32dc8ca37fb774683a5036b10f6c29896859c8a1a5acae9fb73b50" name="freeradius-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.6" rel="7.el6_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.1.12-4" date="1348488000">- resolves: bug#855317
  CVE-2012-3547 freeradius: Stack-based buffer overflow by processing
  certain expiration date fields of a certificate during x509 certificate
  validation</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.1.12-5" date="1405684800">- Add support for microsecond precision of home server's response_window
  option, client's response_window option with the same precision and home
  server's response_timeouts option, backported from v3.0.x.
- Resolves: bug#1107843</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.1.12-6" date="1405771200">- Fix missing braces around a condition branch in client response_window
  patch.
- Resolves: bug#1107843</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-1" date="1422360000">- Upgrade to the latest upstream release v2.2.6
  Resolves: Bug#921563  raddebug not working correctly
  Resolves: Bug#921567  raddebug -t 0 exists immediately
  Resolves: Bug#1060319 MSCHAP Authentication is not working using automatic
                        windows user credentials
  Resolves: Bug#1078736 Rebase FreeRADIUS to 2.2.4
  Resolves: Bug#1135439 Default message digest defaults to sha1
  Resolves: Bug#1142669 EAP-TLS and OCSP validation causing segmentation
                        fault
  Resolves: Bug#1173388 dictionary.mikrotik missing Attributes
- Remove radutmp rotation
  Resolves: Bug#904578  radutmp should not rotate
- Check for start_servers not exceeding max_servers
  Resolves: Bug#1146828 radiusd silently fails when start_servers is higher
                        than max_servers</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-2" date="1422878400">- Fix a number of new Coverity errors and compiler warnings.
  Resolves: Bug#1188598</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-3" date="1423051200">- Disable OpenSSL version check
  Resolves: Bug#1189011</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-4" date="1423742400">- Move OpenSSL init out of version check
  Resolves: Bug#1189394 radiusd segfaults after update
- Comment-out ippool-dhcp.conf inclusion
  Resolves: Bug#1189386 radiusd fails to start after 'clean' installation</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-5" date="1439812800">- Fix EAP client authentication with TLS 1.2
  Resolves: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-6" date="1441886400">- Fix EAP-TTLS/CHAP/MSCHAP/MSCHAPv2 authentication with WPA supplicant v2.4
  Related: Bug#1248484 FreeRADIUS 2.2.6 miscalculates MPPE keys with TLS 1.2</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 2.2.6-7" date="1499774400">- Resolves: Bug#1469115 CVE-2017-10979 freeradius: Out-of-bounds write in
                        rad_coalesce()
- Resolves: Bug#1469118 CVE-2017-10978 freeradius: Out-of-bounds read/write
                        due to improper output buffer size check in make_secret()
- Resolves: Bug#1469120 CVE-2017-10980 freeradius: Memory leak in decode_tlv() 
- Resolves: Bug#1469122 CVE-2017-10981 freeradius: Memory leak in
                        fr_dhcp_decode()
- Resolves: Bug#1469124 CVE-2017-10982 freeradius: Out-of-bounds read in
                        fr_dhcp_decode_options()
- Resolves: Bug#1469126 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63</changelog>
</package>
<package pkgid="26703c3453d3ca4d39efc4450cabf74647ab723309de094334b3a2f15c4ed4b3" name="gcc-debuginfo" arch="i686">
  <version epoch="0" ver="4.4.7" rel="18.el6_9.2"/>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.4.7-10" date="1407326400">- backport two further OpenMP 4.0 libgomp tasking fixes (#1099549)
- fix scheduler wrong-code with DEBUG_INSNs containing volatile ASM_OPERANDS
  (#1127118, PR rtl-optimization/61801)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.4.7-11" date="1409140800">- support passing non-POD through ... (#1087806)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.4.7-12" date="1424347200">- only use PCH in toplevel inclusions (#1177458, PR pch/38987, PR pch/52518)
- don't vectorize bitfield and boolean types (#1150606,
  PR tree-optimization/43390)
- fix up a Cray pointer handling bug (#1134560, PR fortran/62174)
- fix up stdarg optimization when address of a va_list variable escapes
  in a phi node (#1190640, PR target/64979)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.4.7-14" date="1425038400">- add -mhotpatch= support for s390{,x} (#1148120)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.4.7-15" date="1427371200">- update -mhotpatch= support for s390{,x} (#1148120)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.4.7-16" date="1433160000">- update -mhotpatch= support for s390{,x} (#1148120, PR target/66215)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.4.7-17" date="1450180800">- change libgomp default spincount if OMP_WAIT_POLICY is not specified
  (#1229852, PR libgomp/43706)
- remove -Wl,-z,nodlopen from Ada libraries, which no longer contain
  trampolines (#1241495)
- guard __gcov_flush body in libgcov.a with a mutex (#1251488,
  PR gcov/49484, PR gcov-profile/52627)
- add missing s390.exp hunk from -mhotpatch= support (#1233260)</changelog>
  <changelog author="Jakub Jelinek &lt;jakub@redhat.com&gt; 4.4.7-18" date="1476792000">- fix up std::rethrow_exception (PR libstdc++/62258, #1380760)
- fix fortran ICE in resolve_ordinary_assign (PR fortran/43362, #1356346)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.4.7-18.1" date="1516708800">- Retpoline support (#1535656)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.4.7-18.2" date="1517400000">- Fix indirect_jump/tablejump patters for retpolines (#1535656)</changelog>
</package>
<package pkgid="1ee2520050e9f87e028f468b489ab70c3e345f29add069637e5b4e5b4cf1a462" name="gcc-libraries-debuginfo" arch="i686">
  <version epoch="0" ver="7.1.1" rel="2.3.1.el6_9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-1.1.1" date="1489492800">- update from Fedora 7.0.1-0.12.fc26 (#1412815)
- add the libgfortran subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-2.1.1" date="1489579200">- also include the libquadmath subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-3.1.1" date="1489752000">- drop libquadmath and rename libgfortran to libgfortran2</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.1.1" date="1490011200">- also build on aarch64
- drop libitm
- only enable libatomic for aarch64</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.2.1" date="1495627200">- also build on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.1.1" date="1496664000">- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.2.1" date="1497268800">- remove libquadmath.so.* so that it doesn't end up in debuginfo</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.1.1" date="1497528000">- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 &gt;= 7.1.1-2)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.2.1" date="1497960000">- don't run make check with -fstack-protector on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.3.1" date="1499169600">- ship libquadmath on RHEL6</changelog>
</package>
<package pkgid="9c1f162e103e0a7ce204e254794373bc242710cdc8bb1178f8868c2d2532dbde" name="gcc-libraries-debuginfo" arch="i686">
  <version epoch="0" ver="7.1.1" rel="2.4.1.el6_9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-2.1.1" date="1489579200">- also include the libquadmath subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-3.1.1" date="1489752000">- drop libquadmath and rename libgfortran to libgfortran2</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.1.1" date="1490011200">- also build on aarch64
- drop libitm
- only enable libatomic for aarch64</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.2.1" date="1495627200">- also build on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.1.1" date="1496664000">- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.2.1" date="1497268800">- remove libquadmath.so.* so that it doesn't end up in debuginfo</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.1.1" date="1497528000">- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 &gt;= 7.1.1-2)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.2.1" date="1497960000">- don't run make check with -fstack-protector on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.3.1" date="1499169600">- ship libquadmath on RHEL6</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.4.1" date="1522756800">- Add support for DEC formatting extensions (#1563082)</changelog>
</package>
<package pkgid="1bf8b9bb276da338df198a39c12c829f6b8b894bda88ee77c412765df1b5b6c6" name="ghostscript-debuginfo" arch="i686">
  <version epoch="0" ver="8.70" rel="23.el6_9.2"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-16" date="1362744000">- Back-ported patch to copy CIDFontType 2 properly (bug #893775).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-17" date="1365768000">- Back-ported patch to implement JBIG2Decode generic regions using
  TPGDON (bug #916162).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-18" date="1375876800">- Back-ported patch to fix rendering failure with incomplete EOF
  marker (bug #967935).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-19" date="1379073600">- Removed patch backup file from payload.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-20" date="1424433600">- Applied patch from upstream to fix memory handling issue that could
  lead to crashes (bug #1105520).
- Improved support for PDF/A from upstream (bug #1060026).
- Back-ported patch to process embedded files as a portable collection
  only if there is a /Collection attribute (bug #1027534).
- Back-ported patch to preserve invisible PDF text in pdfwrite (bug #994452).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 8.70-21" date="1424433601">- Removed patch backup file from payload (bug #1027534).</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-22" date="1478520000">- Added security fixes for:
  - CVE-2013-5653 (bug #1380327)
  - CVE-2016-7977 (bug #1380415)
  - CVE-2016-7979 (bug #1382305)
  - CVE-2016-8602 (bug #1383940)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23" date="1485864000">- Fix for regression caused by previous CVE fixes (bug #1410260)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23.el6_9.1" date="1493899200">- Added security fix for CVE-2017-8291 (bug #1446063)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 8.70-23.el6_9.2" date="1494504000">- Security fix for CVE-2017-8291 updated to address SIGSEGV</changelog>
</package>
<package pkgid="f89d552d4a8e9ea65e9510daebf7eed94d392bc3aed262bec3717873fb2c5d86" name="git-debuginfo" arch="i686">
  <version epoch="0" ver="1.7.1" rel="9.el6_9"/>
  <changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 1.6.5.2-1.2" date="1259841600">- Rebuilt for RHEL 6</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.7.1-1" date="1276171200">- update to 1.7.1 (#585990)
- Use %{gitcoredir}/git-daemon as xinetd server (#529682) [Todd Zullinger]
- Remove long fixed xinetd IPv6 workaround (#557528) [Todd Zullinger]
- Make %{_var}/lib/git the default gitweb root (#556299) [Todd Zullinger]
- Include gitweb/INSTALL file as documentation [Todd Zullinger]
- Ship example gitweb config (%{_sysconfdir}/gitweb.conf) [Todd Zullinger]
- Install missing gitweb.js (#558740) [Todd Zullinger]
- Only BR perl(Error) [Todd Zullinger]
- Use config.mak to set build options [Todd Zullinger]
- Disable building of unused python remote helper libs [Todd Zullinger]
- Comply with Emacs add-on packaging guidelines (#573423) [Jonathan Underwood]
  - Place elisp source files in separate emacs-git-el package
  - Place git support files in own directory under site-lisp
  - Use Emacs packaging macros
- Replace $RPM_BUILD_ROOT with %{buildroot} [Todd Zullinger]</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-2" date="1280232000">- fix CVE-2010-2542 (#618108)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-3" date="1292500800">- fix CVE-2010-3906</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 1.7.1-4" date="1361880000">- fix CVE-2013-0308</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-5" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318253</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-6" date="1458388800">- remove needles part of previous fix
  Resolves: #1318253</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-7" date="1475236800">- fixes memory corruption on git shortlog
- add -f option for "git submodule add" to add files even when
  these are included in .gitignore
- improve performance of extremly slow http(s)
- fix cloning using http(s) protocol when redirection is requested
  Resolves: #874659 #1207253 #1237395 #1289984</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-8" date="1481198400">- fixes previous patch which add -f option for "git submodule add"
  which incorectly used unsupported option --ignore-missing for
  "git add --dry-run"
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1207253 #1368384</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.7.1-9" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
</package>
<package pkgid="8d59482989a133d3eb0a12caa640c138ffd41dc781226e01a7a5d464fb404be7" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6_9.1"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.201" date="1476187200">- df can fail on some systems (#1307029).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.202" date="1476187201">- Change malloc/tst-malloc-thread-exit.c to use fewer threads and 
  avoid timeout (#1318380).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.203" date="1476187202">- Add support for el_GR@euro, ur_IN, and wal_ET locales (#1101858).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.204" date="1476360000">- Fix detection of Intel FMA hardware (#1384281).</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.12-1.205" date="1476705600">- Make padding in struct sockaddr_storage explicit (#1338673)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.206" date="1476705601">- Fix CVE-2015-8779 glibc: Unbounded stack allocation in catopen function
  (#1358015).</changelog>
  <changelog author="Martin Sebor &lt;msebor@redhat.com&gt; - 2.12-1.207" date="1476705602">- Use FL_CLOEXEC in internal calls to fopen (#1012343).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.208" date="1476792000">- Update tests for struct sockaddr_storage changes (#1338673)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.209.1" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437618).</changelog>
</package>
<package pkgid="1ab5be19d58b34a1cfd90149b406d8009826014a4a680cf5259557208e71c2b7" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6_9.2"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.202" date="1476187200">- Change malloc/tst-malloc-thread-exit.c to use fewer threads and 
  avoid timeout (#1318380).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.203" date="1476187201">- Add support for el_GR@euro, ur_IN, and wal_ET locales (#1101858).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.204" date="1476360000">- Fix detection of Intel FMA hardware (#1384281).</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.12-1.205" date="1476705600">- Make padding in struct sockaddr_storage explicit (#1338673)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.206" date="1476705601">- Fix CVE-2015-8779 glibc: Unbounded stack allocation in catopen function
  (#1358015).</changelog>
  <changelog author="Martin Sebor &lt;msebor@redhat.com&gt; - 2.12-1.207" date="1476705602">- Use FL_CLOEXEC in internal calls to fopen (#1012343).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.208" date="1476792000">- Update tests for struct sockaddr_storage changes (#1338673)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.209.1" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437618).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209.2" date="1495800000">- Avoid large allocas in the dynamic linker (#1452711)</changelog>
</package>
<package pkgid="eca46128dc91ba38aa81e2b3fd6d0457b469c5e346d722b81b85afd0ee8e4a2c" name="glibc-debuginfo-common" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6_9.1"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.201" date="1476187200">- df can fail on some systems (#1307029).</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.202" date="1476187201">- Change malloc/tst-malloc-thread-exit.c to use fewer threads and 
  avoid timeout (#1318380).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.203" date="1476187202">- Add support for el_GR@euro, ur_IN, and wal_ET locales (#1101858).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.204" date="1476360000">- Fix detection of Intel FMA hardware (#1384281).</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.12-1.205" date="1476705600">- Make padding in struct sockaddr_storage explicit (#1338673)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.206" date="1476705601">- Fix CVE-2015-8779 glibc: Unbounded stack allocation in catopen function
  (#1358015).</changelog>
  <changelog author="Martin Sebor &lt;msebor@redhat.com&gt; - 2.12-1.207" date="1476705602">- Use FL_CLOEXEC in internal calls to fopen (#1012343).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.208" date="1476792000">- Update tests for struct sockaddr_storage changes (#1338673)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.209.1" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437618).</changelog>
</package>
<package pkgid="a6cc46b7d5a19972674374b18a18862840acc2263e5e615db139dd416c8de8e4" name="glibc-debuginfo-common" arch="i686">
  <version epoch="0" ver="2.12" rel="1.209.el6_9.2"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2.12-1.202" date="1476187200">- Change malloc/tst-malloc-thread-exit.c to use fewer threads and 
  avoid timeout (#1318380).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.203" date="1476187201">- Add support for el_GR@euro, ur_IN, and wal_ET locales (#1101858).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.204" date="1476360000">- Fix detection of Intel FMA hardware (#1384281).</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.12-1.205" date="1476705600">- Make padding in struct sockaddr_storage explicit (#1338673)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.206" date="1476705601">- Fix CVE-2015-8779 glibc: Unbounded stack allocation in catopen function
  (#1358015).</changelog>
  <changelog author="Martin Sebor &lt;msebor@redhat.com&gt; - 2.12-1.207" date="1476705602">- Use FL_CLOEXEC in internal calls to fopen (#1012343).</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.208" date="1476792000">- Update tests for struct sockaddr_storage changes (#1338673)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209" date="1485345600">- Fix AF_INET6 getaddrinfo with nscd (#1416496)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.12-1.209.1" date="1490788800">- Fix thread cancellation issues for setmntent() and others (#1437618).</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.12-1.209.2" date="1495800000">- Avoid large allocas in the dynamic linker (#1452711)</changelog>
</package>
<package pkgid="68eba49ff9d37f8ea1dce94152badeafe2a8af89df45d1ce10a4e5fde3a79075" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.15" rel="60.el6_9.4"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.15-54" date="1468324800">- add security fix for CVE-2016-5387</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-55" date="1473336000">- Resolves: #1372315 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-56" date="1478174400">- Resolves: #1310582 - when ProxyErrorOverride is On, modcluster return
  503 status code on subsequent requests</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-57" date="1478520000">- Resolves: #1356938 - mod_ssl install fails with a long hostname</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-58" date="1478520001">- Resolves: #1349546 - comments no longer allowed at the end of Allow
  from statements and maybe other statements from mod_authz*</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-59" date="1481284800">- Resolves: #1401694 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.1" date="1497355200">- Resolves: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.2" date="1497960000">- Resolves: #1463354 - segfault in ap_proxy_set_scoreboard_lb</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.3" date="1498737600">- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.4" date="1499428800">- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
</package>
<package pkgid="341c9778aa70d99761cc05b85b67f0db9000335aae45b3e15e86744b3899ba29" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.15" rel="60.el6_9.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-55" date="1473336000">- Resolves: #1372315 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-56" date="1478174400">- Resolves: #1310582 - when ProxyErrorOverride is On, modcluster return
  503 status code on subsequent requests</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-57" date="1478520000">- Resolves: #1356938 - mod_ssl install fails with a long hostname</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-58" date="1478520001">- Resolves: #1349546 - comments no longer allowed at the end of Allow
  from statements and maybe other statements from mod_authz*</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-59" date="1481284800">- Resolves: #1401694 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.1" date="1497355200">- Resolves: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.2" date="1497960000">- Resolves: #1463354 - segfault in ap_proxy_set_scoreboard_lb</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.3" date="1498737600">- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.4" date="1499428800">- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.5" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
</package>
<package pkgid="31259dd92ad4360b36fd2956a774b9ba37f8349a852aeb204fad639e3f44854b" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.2.15" rel="60.el6_9.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-56" date="1478174400">- Resolves: #1310582 - when ProxyErrorOverride is On, modcluster return
  503 status code on subsequent requests</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-57" date="1478520000">- Resolves: #1356938 - mod_ssl install fails with a long hostname</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-58" date="1478520001">- Resolves: #1349546 - comments no longer allowed at the end of Allow
  from statements and maybe other statements from mod_authz*</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-59" date="1481284800">- Resolves: #1401694 - rotatelogs: creation of zombie processes when -p is used</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.1" date="1497355200">- Resolves: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.2" date="1497960000">- Resolves: #1463354 - segfault in ap_proxy_set_scoreboard_lb</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.3" date="1498737600">- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.4" date="1499428800">- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
  Whitespace Defects</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.5" date="1501070400">- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
  authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
  in mod_auth_digest</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.2.15-60.6" date="1505822400">- Resolves: #1493061 - CVE-2017-9798 httpd: various flaws</changelog>
</package>
<package pkgid="c8872358e3016dea181b50233573f3bbb17ea171a183ce4c766fc6139db7e61a" name="ibus-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.4" rel="9.1.el6_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.3.4-2" date="1278417600">- Revert the version not to be rebased.
- Fix bug 608988 - Cannot de-select Hanja lock in applet menu
  Resolves: #608988</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.3.4-3" date="1281355200">- Resolves: #563053 Add pt_BR translation</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.3.4-4" date="1289995200">- Resolves: #651915 Wrong window position with ibus-x11
  Added ibus-651915-x11-position.patch
- Resolves: #633330 Fixed kn.po
- Resolves: #635541 Fixed gu.po
  Added ibus-1.3.4-po-2010-11-17.tar.bz2</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.3.4-5" date="1289995201">- Added Requires: ibus-libs in ibus-gtk and ibus-devel for rpmdiff.</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.3.4-6" date="1312200000">- Fixed Bug 667031 - ibus requires dbus-x11
- Fixed Bug 670137 - QT_IM_MODULE=xim in ibus.conf without ibus-qt</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.3.4-7" date="1406116800">- Fixed Bug 1066075 - Lotus Sametime hangs when searching for Korean names</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.3.4-8" date="1418385600">- Fixed Bug 1043381 - programs using "PreeditType: OverTheSpot" is stalled</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.3.4-9" date="1446033600">- Fixed Bug 1245288 - im-chooser kills firefox when you select ibus</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.3.4-10" date="1500984000">- Resolves: Bug 1403077 - Support second monitor in ZaphodHeads
  Added ibus-1403077-zaphodheads-x11.patch to get x11 screen number
  Added ibus-1403077-zaphodheads.patch</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.3.4-9.1" date="1520856000">- Resolves: Bug 1549171 - Support second monitor in ZaphodHeads</changelog>
</package>
<package pkgid="cafccf466f1003c6697b6a5d628c561c19127a5ff7d2659b9987a3165f385a99" name="initscripts-debuginfo" arch="i686">
  <version epoch="0" ver="9.03.58" rel="1.el6_9.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.03.50-1" date="1453204800">- functions: improve killing loops
- netfs: tweak nfs umount
- sysctl.conf: mention sysctl -a
- sysconfig.txt: document PPPOE_EXTRA and PPPD_EXTRA
- spec: require plymouth
- fix mangled sysconfig/init.s390
- rc.sysinit: don't perform fsck twice with /.autorelabel
- ifdown-eth: fix comparison
- ifup-eth: if arping fails, output responding MAC
- network-functions: fix change_resolv_conf after grep update
- spec: add sysctl.d dir
- rc.sysinit: fix typo in fs
- rename_devices: comments need to have a blank before them
- rename_device: remove comments and trailing whitespaces
- bonding: warn if the ifup for slave device failed
- clarify daemon() usage message
- ifdown: clean ipv4 localhost addresses
- ifup-post: check resolve.conf also with DNS2
- ifup: add missing quotes
- ifup-eth: some bridge options are applied later
- init.d/halt: give init some time to reexecute
- network-scripts: DEVICE and HWADRR could be quoted by apostrophe
- ifup-wireless: fix calling of phy_wireless_device
- rc.sysinit: apply quotas after system is relabeled</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.03.51-1" date="1456228800">- netfs: only unmount loopback device mounted on top of netdev or with back-file on netdev</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.03.52-1" date="1460376000">- functions: fix ignored delay in killproc</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.03.53-1" date="1460462400">- functions: parse -d first</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.03.54-1" date="1478520000">- specfile: require newer lvm
- ifdown-eth: add timeout for when flushing global scope
- functions: support boolean values in is_true() &amp; is_false()
- ifup-aliases: do not return with error when arping fails
- netconsole: resolve domain name via 'getent' instead of 'hosts'</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.03.55-1" date="1479297600">- ipcalc: detect invalid mask
- ifup-aliases: send gratuitous ARPs when adding addresses
- network: treat other tunnel interfaces (fixes ifdown stage)
- kexec-disable.conf: release kexec memory properly
- network-functions: do not send hostname via dhclient everytime
- sysconfig/network: NO_DHCP_HOSTNAME option introduced
- ipv6_add_addr_on_device: replace the existing address on NIC</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.03.56-1" date="1479729600">- regression in commit ca3cea691b6 fixed [${LEASEFILE} not specified]</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.03.57-1" date="1484049600">- regression in commit ca3cea691b6 fixed [quotes for $DHCLIENTARGS removed]</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.03.58-1" date="1484740800">- regression in commit bab72274889 fixed [missing $() for DAD detection]</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.03.58-1.el6_9.1" date="1493121600">- regression in commit a2ecd685d60 fixed [start $vpninterfaces]</changelog>
</package>
<package pkgid="384b54e24ed65c8619e87fd24347c1269a981c591d6184aab089b0da4c9f9f97" name="initscripts-debuginfo" arch="i686">
  <version epoch="0" ver="9.03.58" rel="1.el6_9.2"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.03.51-1" date="1456228800">- netfs: only unmount loopback device mounted on top of netdev or with back-file on netdev</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.03.52-1" date="1460376000">- functions: fix ignored delay in killproc</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.03.53-1" date="1460462400">- functions: parse -d first</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.03.54-1" date="1478520000">- specfile: require newer lvm
- ifdown-eth: add timeout for when flushing global scope
- functions: support boolean values in is_true() &amp; is_false()
- ifup-aliases: do not return with error when arping fails
- netconsole: resolve domain name via 'getent' instead of 'hosts'</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.03.55-1" date="1479297600">- ipcalc: detect invalid mask
- ifup-aliases: send gratuitous ARPs when adding addresses
- network: treat other tunnel interfaces (fixes ifdown stage)
- kexec-disable.conf: release kexec memory properly
- network-functions: do not send hostname via dhclient everytime
- sysconfig/network: NO_DHCP_HOSTNAME option introduced
- ipv6_add_addr_on_device: replace the existing address on NIC</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.03.56-1" date="1479729600">- regression in commit ca3cea691b6 fixed [${LEASEFILE} not specified]</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.03.57-1" date="1484049600">- regression in commit ca3cea691b6 fixed [quotes for $DHCLIENTARGS removed]</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.03.58-1" date="1484740800">- regression in commit bab72274889 fixed [missing $() for DAD detection]</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.03.58-1.el6_9.1" date="1493121600">- regression in commit a2ecd685d60 fixed [start $vpninterfaces]</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.03.58-1.el6_9.2" date="1505304000">- ARPUPDATE option introduced to resolve BZ #1440888</changelog>
</package>
<package pkgid="7f5dbbf53a1147cd5f7b222eb9be0dbff8f45ab31f3c89950d0d9c2b527c9e29" name="irqbalance-debuginfo" arch="i686">
  <version epoch="2" ver="1.0.7" rel="8.el6_9.1"/>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:1.0.4-10" date="1401364800">- Minor source hardening (bz 878001)
- Migrating algorithm fix (bz 1031230)
- Introducing deepestcache option (bz 1052166)
- Debug option behavior fix (bz 1096392)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:1.0.7-1" date="1421668800">- Rebase to 1.0.7 (bz 1181720)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:1.0.7-2" date="1421755200">- Unused variable removed (bz 1119404)
- Warning when started as non-root (bz 749651)
- More robust signal handling (bz 1158932)
- Fixed manpage hostname (bz 1162247)
- Fixed memleak (bz 1178247)
- Fixed help message typo (bz 1178903)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:1.0.7-3" date="1427889600">- Banscript option re-enabled (bz 1178903)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:1.0.7-4" date="1428408000">- Banscript option docs renewed (bz 1181720)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:1.0.7-5" date="1432814400">- Broken banirq handling after rebase fixed (bz 1181720)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:1.0.7-6" date="1447848000">- Unsolicited irqbalance re-enabling fixed (bz 1273505)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:1.0.7-7" date="1447848001">- Irqbalance doesn't place irq on isolated cpus (bz 1244948)</changelog>
  <changelog author="Petr Holasek &lt;pholasek@redhat.com&gt; - 2:1.0.7-8" date="1454414400">- Explicit dependency on newer glib2 added (bz 1302903)</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2:1.0.7-8.1" date="1517572800">- Balance correctly IRQs reappearing
- Resolves: #1541290</changelog>
</package>
<package pkgid="7f59d86393e0447bb495aceb27f892ab952da4c8faa54681d36cd3758f4a213f" name="iscsi-initiator-utils-debuginfo" arch="i686">
  <version epoch="0" ver="6.2.0.873" rel="27.el6_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.873-18" date="1455710400">- remove sysfs att_list cache, speed up handling of large number of sessions</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.873-19" date="1456747200">- 1309724 fix regression in ibft sysfs reading</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.873-20" date="1457611200">- 1314926 return NULL for no attr instead of an empty string</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.873-21" date="1459166400">- 1294965 iscsiuio match based on driver to support new hardware without
  adding PCI IDs (still need IDs added to kernel)
- bnx2i pass through ping support</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.873-22" date="1470657600">- 1004015 fix binding of iSNS discovered targets to ifaces</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.873-23" date="1476273600">- 1215578 iscsiadm rescan fails in node mode
- 1311818 data corruption during ethernet port failure</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.873-24" date="1476273601">- 1121670 iscsid enter infinite loop if conn_bind fails</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.873-25" date="1476360000">- 1380316 iscsiuio updates</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.873-26" date="1483963200">- 1400844 regression in interface binding</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.873-27" date="1496836800">- 1170750 apply "Set non negotiated params early" from upstream
  to fix SendTargets discovery over iSER with some targets</changelog>
</package>
<package pkgid="4e8cc5fe3ce31f4571c3a0bee9a25c942317a717c1070d29e016365442e2fddb" name="jasper-debuginfo" arch="i686">
  <version epoch="0" ver="1.900.1" rel="21.el6_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.900.1-12" date="1248436800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 1.900.1-13" date="1255435200">- CVE-2008-3520 jasper: multiple integer overflows in jas_alloc calls (#461476)
- CVE-2008-3522 jasper: possible buffer overflow in 
  jas_stream_printf() (#461478)</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 1.900.1-14" date="1256817600">- add pkgconfig support</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.900.1-15" date="1267531200">- Move documentation from libs subpackage to main package</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.900.1-16" date="1319630400">- CERT VU#887409: heap buffer overflow flaws lead to arbitrary code execution
  (#749150)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.900.1-17" date="1417867200">- CVE-2014-9029 - incorrect component number check in COC, RGN and QCC
                  marker segment decoders (#1171209)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.900.1-18" date="1418385600">- CVE-2014-8137 - double-free in in jas_iccattrval_destroy (#1173567)
- CVE-2014-8138 - heap overflow in jp2_decode (#1173567)</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.900.1-19" date="1421668800">- CVE-2014-8157 - dec-&gt;numtiles off-by-one check in jpc_dec_process_sot() (#1183672)
- CVE-2014-8158 - unrestricted stack memory use in jpc_qmfb.c (#1183680)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.900.1-20" date="1493035200">- Multiple security fixes (fixed by thoger):
  CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089
  CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692
  CVE-2016-8693 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-9262
  CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391
  CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9560 CVE-2016-9583
  CVE-2016-9591 CVE-2016-9600 CVE-2016-10248 CVE-2016-10249 CVE-2016-10251
- Fix implicit declaration warning caused by security fixes above</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.900.1-21" date="1493121600">- Bump release</changelog>
</package>
<package pkgid="96dc05622db1d5bee0c19f1dddeed5b09007a2793a3b4b6312a74c05861cf75c" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.141" rel="2.6.10.1.el6_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.101-2.6.6.1" date="1461067200">- added Patch666 fontpath.patch to fix tck regressions
- Resolves: rhbz#1325426</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.1" date="1469016000">- Bump to 2.6.7 and u111b00.
- Update SystemTap bundle with fix for PR3091/RH1204159
- Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
- Resolves: rhbz#1350040</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.2" date="1469102400">- Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
- Resolves: rhbz#1350040</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.3" date="1469188800">- Bump to jdk7u111 b01 to fix TCK regressions (7081817 &amp; 8162344)
- Resolves: rhbz#1350040</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1477656000">- Bump to 2.6.8 and u121b00.
- Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
- Require at least the build-time version of NSS at run-time due to static linking.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.2" date="1478001600">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.2" date="1478001601">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.1" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="8ad43792e71a63ec38bf2ee691c079c0c7411e1c9566be980122f9e0d9e3685d" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.151" rel="2.6.11.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.1" date="1469016000">- Bump to 2.6.7 and u111b00.
- Update SystemTap bundle with fix for PR3091/RH1204159
- Drop patches (PR2938 (ttable_match_7) and PR2939 (fontpath)) applied upstream.
- Resolves: rhbz#1350040</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.2" date="1469102400">- Reset permissions of resources.jar to avoid it only being readable by root (PR1437).
- Resolves: rhbz#1350040</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.111-2.6.7.3" date="1469188800">- Bump to jdk7u111 b01 to fix TCK regressions (7081817 &amp; 8162344)
- Resolves: rhbz#1350040</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1477656000">- Bump to 2.6.8 and u121b00.
- Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
- Require at least the build-time version of NSS at run-time due to static linking.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.2" date="1478001600">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.2" date="1478001601">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.1" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.0" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="c3a8712bca315097e2fcbdd575e49beb55d3f3c24d677cb4e11c3962875d7777" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.161" rel="2.6.12.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.1" date="1477656000">- Bump to 2.6.8 and u121b00.
- Drop patches (S7081817, S8140344, S8145017 and S8162344) applied upstream.
- Require at least the build-time version of NSS at run-time due to static linking.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.2" date="1478001600">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.2" date="1478001601">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.1" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.0" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="eb12e68a40b84708974e3c954bd51559ab23df32892b5f56150620f8456c30b3" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.171" rel="2.6.13.0.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.121-2.6.8.2" date="1478001600">- Require a version of java-1.7.0-openjdk-devel with a working jar uf
- Remove unneeded AArch64 environment variable setting.
- Resolves: rhbz#1381990</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.121-2.6.8.2" date="1478001601">- New variable, @prefix@, needs to be substituted in tapsets (rhbz1371005)
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.1" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.0" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="28b3a0562bc4488930d54e5c3a4897d004c8f90282fb5eeddc71518c98787f85" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.1.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.131-2.6.9.1" date="1486468800">- Bump to 2.6.9 and u131b00.
- Remove patch application debris in fsg.sh.
- Re-generate PR2809 and RH1022017 against 2.6.9.
- Add blacklisted.certs to installation file list.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.0" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="29904255b41e775a5c5c0cbb3390ce546b09fac084f35c8aa949fe280c1c105d" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.0" date="1493294400">- Bump to 2.6.10 and u141b00.
- Adjust RH1022017 following application of 8173783
- Add more detailed output to fsg.sh and generate_source_tarball.sh.
- Bump to u141b01 to include S8043723 fix for s390.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.141-2.6.10.1" date="1493812800">- Bump to u141b02 to include S8011123 fix for TCK failure.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.151-2.6.11.0" date="1501675200">- Bump to 2.6.11 and u151b00.
- Update java-access-bridge-security.patch to apply against 2.6.11.
- Apply fix for 8185716 so ppc uses correct ins_encode format
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870400">- Bump to 2.6.12 and u161b00.
- Update SystemTap tapsets to version in IcedTea 2.6.12pre01 to fix RH1492139.
- Drop 8185716 patch, now applied upstream.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Fix name of SystemTap tarball, following update.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870401">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.161-2.6.12.0" date="1511870402">- Remove superfluous %1 from policy JAR file path.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.0" date="1518523200">- Bump to 2.6.13 and u171b01.
- Update java-1.7.0-openjdk-java-access-bridge-security.patch to apply after 8186080
- Update RC4 patch (8076221/PR2809) to apply after 8148108 (DH lower limit increase)
- Fix file path in rh1022017.patch.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578550</changelog>
</package>
<package pkgid="dce175058e55235869029d3975362d8b86ba1ec72410747247576ea8dd7d9a4c" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.131" rel="0.b11.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-3.b15" date="1476100800">- Restrict debug builds to shipped JIT architectures, excluding unshipped ppc64
- Resolves: rhbz#1381990</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-4.b15" date="1478520000">- Add fix for PR2934 / RH1329342
- Resolves: rhbz#1391682</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-5.b18" date="1483963200">- Update to aarch64-jdk8u111-b18, synced with upstream u111, S8170873 and new AArch64 fixes
- Replace our correct version of 8159244 with the amendment to the 8u version from 8160122.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-5.b18" date="1484222400">- Use java-1.7.0-openjdk to bootstrap on RHEL to allow us to use main build target
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-5.b18" date="1484568000">- Disable -ffp-no-contract option introduced by 8170873 as not available on RHEL 6 GCC.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-6.b14" date="1484568001">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-1.b16" date="1484568002">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568003">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
</package>
<package pkgid="d9be439c30c900fdfb0f859a57d4b298aa1648c2718d389d28a1252a7d0bab1e" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="2.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.111-6.b14" date="1484568000">- Enable a full bootstrap on JIT archs to ensure stability.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-1.b16" date="1484568001">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568002">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-1.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-0.b15" date="1499256001">- Update to aarch64-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
</package>
<package pkgid="2b575f209e0a9d9298130252925fc9f351762fc031d1f0e91024806d105879c2" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.141" rel="3.b16.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.112-1.b16" date="1484568000">- Update to aarch64-jdk8u112-b16.
- Drop upstreamed patches for 8044762, 8049226, 8154210, 8158260 and 8160122.
- Re-generate size_t and key size (RH1163501) patches against u112.
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568001">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-1.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-0.b15" date="1499256001">- Update to aarch64-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-3.b16" date="1500033602">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
</package>
<package pkgid="23d0b1003a1db0e4e818693fc10822c244d049f45903a2b9f021b27275809e22" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.144" rel="0.b01.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-1.b13" date="1484568000">- Update to aarch64-jdk8u121-b13.
- Add MD5 checksum for the new java.security file (EC &lt; 224, DSA &lt; 1024 restricted)
- Resolves: rhbz#1410612</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.121-2.b13" date="1491566400">- Add backports from 8u131 and 8u152 ahead of April CPU.
- Apply backports before local RPM fixes so they will be the same as when applied upstream
- Adjust RH1022017 following application of 8173783
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-0.b11" date="1492084800">- Update to aarch64-jdk8u131-b11.
- Drop upstreamed patches for 8147910, 8161993, 8170888 and 8173783.
- Update generate_source_tarball.sh to remove patch remnants.
- Cleanup tarball creation documentation to avoid duplication.
- Resolves: rhbz#1438751</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.131-1.b12" date="1499256000">- Add backports from 8u152 (8179084/RH1455694, 8175887) ahead of July CPU.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-0.b15" date="1499256001">- Update to aarch64-jdk8u141-b15.
- Update location of OpenJDK system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 6515172, 8144566, 8155049, 8165231, 8174164, 8174729 and 8175097.
- Update PR1983, PR2899 and PR2934 (SunEC + system NSS) to accomodate 8175110.
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-1.b15" date="1499774400">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b15" date="1500033600">- Revert previous commit so we can revise the security update.
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033601">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-3.b16" date="1500033602">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01.
- Resolves: rhbz#1482386</changelog>
</package>
<package pkgid="1b5fcc8f3c6aceba6afa474af3045d0ee03ed3a3827407c872133037b3b2a9c8" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.151" rel="1.b12.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-2.b16" date="1500033600">- Update to aarch64-jdk8u141-b16.
- Revert change to remove-intree-libraries.sh following backout of 8173207
- Resolves: rhbz#1466509</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.141-3.b16" date="1500033601">- Backport "8180048: Interned string and symbol table leak memory during parallel unlinking"
- Resolves: rhbz#1468473</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.144-0.b01" date="1502798400">- Update to aarch64-jdk8u144-b01.
- Resolves: rhbz#1482386</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241600">- Update to aarch64-jdk8u151-b12.
- Update location of OpenJDK zlib system library source code in remove-intree-libraries.sh
- Drop upstreamed patches for 8179084 and RH1367357 (part of 8183028).
- Update RH1191652 (root) to accomodate 8151841 (GCC 6 support).
- Update RH1163501 to accomodate 8181048 (crypto refactoring)
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241601">- Add 8075484/PR3473/RH1490713 which is listed as being in 8u151 but not supplied by Oracle.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241602">- Fix premature shutdown of NSS in SunEC provider.
- Move -ffp-no-contract fix to local fixes section.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508241603">- Update SystemTap tapsets to version in IcedTea 3.6.0pre02 to fix RH1492139.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
</package>
<package pkgid="ce1e040307dcd55a5f3f120c80a282fdc1854ca9769f8075b9de93bcd264bf6b" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.161" rel="3.b14.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328000">- Update location of policy JAR files following 8157561.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.151-0.b12" date="1508328001">- Correct fix to RH1191652 root patch so existing COMMON_CCXXFLAGS_JDK is not lost.
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.151-1.b12" date="1508328002">- repack policies adapted to new counts and paths
- note that also c-j-c is needed to make this apply in next update
- Resolves: rhbz#1499207</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.161-0.b12" date="1514894400">- Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
- Drop upstreamed patches of:
   patch561 8075484-pr3473-rh1490713.patch
   patch532 8162384-pr3122-rh1358661.patch
   patch547 8173941-pr3326.patch
   patch554 8175887-pr3415.patch
   patch550 8180048-pr3411-rh1449870.patch
- adapted pr3286-no_fp_contract.patch, CFLAGS_linux_ppc64 no longer have -ffp-contract=off so was dropped from hunk
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Drop pr3286-no_fp_contract.patch as flag no longer used on ppc64.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412803">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
</package>
<package pkgid="2846646b735e78744f1cc43bc5a1f64c8aea0327b2f50d5dcca9f182680d9c60" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="3.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Drop pr3286-no_fp_contract.patch as flag no longer used on ppc64.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412801">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412802">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412803">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="69b61caf295c2afa1d6de1a1b61f06e10e58b50f136974511f319b1bda588c41" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el6_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412800">- Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412801">- Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-1.b12" date="1515412802">- Bump release due to successful build of previous version.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b13" date="1515499200">- Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-3.b14" date="1515585600">- Update to b14 with updated Zero fix for 8174962 (S8194828)
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1522670400">- Cleanup from previous commit.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578545</changelog>
</package>
<package pkgid="3223510a0e7b5f31cafa4c7f11b515db337cf577e32e98e23587ef95bfcab2d7" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-688.el6]" date="1485864000">- [netdrv] sfc: fix missing mc_promisc setting (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-689.el6]" date="1486123200">- [netdrv] be2net: fix initial MAC setting (Ivan Vecera) [1415905]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-690.el6]" date="1486382400">- [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
- [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="1ff23b10fc2a54425b632249d7f84b09f443a6f56af9119b853f5f34fdb231cb" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
</package>
<package pkgid="6441f982e7dd034eeafe04989ea5e97726afb8ce67c5efb481680d698262fcc8" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="a133cb60edf4dfdc6b905676efd98f7801e9dcf57940b90c2cf45c7be1f7a4a8" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="23a730b0be21667564917d7c76e215cc7e02947921171318091f80fa7c146e92" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="96aee0d909e1d5366615ab27e01f122b163ef398385ac1fe7a410bef7bbb30b8" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="02e3c5e04c043f9b23732fbd49ddc0970006f58ae2cf4eb2616107841ace1d9a" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="fdbfea5c4572a5434cb9399311426b3cdab5334c578134d44259b36a4811588a" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="a4152cb6534223050f7a7d7954e5669af78d9346a9551072fd6df3bd5af897ca" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="48c05ae5308a7a2b804fb2792623f97ba088355bf5bf921598193c3fe76dbc71" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.24.1.el6]" date="1520942400">- [kernel] sched/core: Rework rq-&gt;clock update skips (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1551475 1212959]
- [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1550103 1532167]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.25.1.el6]" date="1521460800">- [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1557896 1535024]
- [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520818 1520817] {CVE-2017-8824}
- [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447640 1447641] {CVE-2017-7645}
- [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1552706 1437991]
- [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1551471 1495167]
- [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1551471 1495167]
- [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1540481 1538340]
- [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1538654 1408108]
- [s390] fix transactional execution control register handling (Hendrik Brueckner) [1538591 1520862]
- [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1538586 1518669]
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [net] netfilter: xt_TCPMSS: add more sanity tests on tcph-&gt;doff (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519627 1519626] {CVE-2017-1000410}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="02f6741a116d8cad09cfde753362d21cd001e32860e46535b248cab91e3d9bb0" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-690.el6]" date="1486382400">- [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
- [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="c3afe0ae967c282fd642dd0034e69c2439fa5bb0875668ad7eb9e7a5d271cc81" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="380084d70a769bde1f2307cf1b2839b0a6ff2fd438e4b7f0a30849f6118d138b" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.24.1.el6]" date="1520942400">- [kernel] sched/core: Rework rq-&gt;clock update skips (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1551475 1212959]
- [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1550103 1532167]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.25.1.el6]" date="1521460800">- [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1557896 1535024]
- [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520818 1520817] {CVE-2017-8824}
- [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447640 1447641] {CVE-2017-7645}
- [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1552706 1437991]
- [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1551471 1495167]
- [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1551471 1495167]
- [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1540481 1538340]
- [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1538654 1408108]
- [s390] fix transactional execution control register handling (Hendrik Brueckner) [1538591 1520862]
- [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1538586 1518669]
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [net] netfilter: xt_TCPMSS: add more sanity tests on tcph-&gt;doff (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519627 1519626] {CVE-2017-1000410}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="ea0e2044e2630a38f1a4b24ea3d79f7d1fc84aa0eff91fd51793631bcdf0d12b" name="kernel-debug-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="dd2bc83e4e2f5193065986ca2e8af28a8ebb82fb282741a2417e839d08d20cd7" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-688.el6]" date="1485864000">- [netdrv] sfc: fix missing mc_promisc setting (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-689.el6]" date="1486123200">- [netdrv] be2net: fix initial MAC setting (Ivan Vecera) [1415905]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-690.el6]" date="1486382400">- [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
- [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="2a8a60818984c30615ca46743db3e28064cd9c9817ef57e99ed18fd9edc4db9e" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
</package>
<package pkgid="abf1c398bafbffe5c87be426f4e173112673ec2d597b9c56b118c451f4929c6f" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="96b9c8ab2889f2015c648f0a582d5b1273ff11062c104d84418d213d594454d0" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="860ebd0b5fcf0a02df58945574645d08ffe4bce3aa5e849d5ce43905acd5e101" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="61c8c7ad0f9abedcd671f3fd8b8658a529aa39dde06b5aedb6f08c47ff050d42" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="e0ddb8754ebbfb88be97d9014bf6d021beb8484b93f2c50687a7ab8dcc56d07c" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="c12699d9f857a29d602a1da8164113fab6292e1eebc5150a5f77ad7b5e480f7b" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="c4919889a7704cbb4062b81a8ca331a9fb6f52a35e98f1040e928e87be21dd09" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="12e555e3875935653e7bc83f40423b794c652e4cf1ac392afc4e8827a07ae096" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.24.1.el6]" date="1520942400">- [kernel] sched/core: Rework rq-&gt;clock update skips (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1551475 1212959]
- [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1550103 1532167]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.25.1.el6]" date="1521460800">- [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1557896 1535024]
- [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520818 1520817] {CVE-2017-8824}
- [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447640 1447641] {CVE-2017-7645}
- [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1552706 1437991]
- [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1551471 1495167]
- [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1551471 1495167]
- [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1540481 1538340]
- [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1538654 1408108]
- [s390] fix transactional execution control register handling (Hendrik Brueckner) [1538591 1520862]
- [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1538586 1518669]
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [net] netfilter: xt_TCPMSS: add more sanity tests on tcph-&gt;doff (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519627 1519626] {CVE-2017-1000410}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="83dd8e7b78e1911278e187c3ed825746400c0539164a6cdb4961644b2c1c362f" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-690.el6]" date="1486382400">- [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
- [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="225297df7343c13dce3a031f282f779b22029e787cb6cf436eb9df3ce87b9002" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="f9aae15f507960016739fc3d76facbf46d24226e79bb56420fba5c7d8c0426f9" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.24.1.el6]" date="1520942400">- [kernel] sched/core: Rework rq-&gt;clock update skips (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1551475 1212959]
- [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1550103 1532167]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.25.1.el6]" date="1521460800">- [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1557896 1535024]
- [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520818 1520817] {CVE-2017-8824}
- [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447640 1447641] {CVE-2017-7645}
- [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1552706 1437991]
- [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1551471 1495167]
- [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1551471 1495167]
- [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1540481 1538340]
- [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1538654 1408108]
- [s390] fix transactional execution control register handling (Hendrik Brueckner) [1538591 1520862]
- [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1538586 1518669]
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [net] netfilter: xt_TCPMSS: add more sanity tests on tcph-&gt;doff (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519627 1519626] {CVE-2017-1000410}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="46a4121a784b91be210d2e0640fb58d79a980c222ff78f59451d450cf9e1cf74" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="3a1973aa63b759f888b6e4df30d51fa620d6f924a6d6dcfbdefc68fc5b7623ca" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-688.el6]" date="1485864000">- [netdrv] sfc: fix missing mc_promisc setting (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-689.el6]" date="1486123200">- [netdrv] be2net: fix initial MAC setting (Ivan Vecera) [1415905]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-690.el6]" date="1486382400">- [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
- [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="94a35245cf0eeb20c3f014af0a816e1b6eae2e99b2af3019ca2a51c317afaf3d" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
</package>
<package pkgid="36ee78dd62ce4dde902a18b650b6c682f98e0ff7ce511b15bfb21eda94cd90c5" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="f82426f71292e5c61fa7ae60d550bc091086f6d1f0af14f68b074c8085e8a186" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="3759209cb026f49bf9cbad1b6db0d24d238abbfe24b2eaa806912d78ec2f71f7" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="d05831b581701b210498f72070ffabd6605c01fd456ce984d92d4f84ebc1f2a7" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="947575a535d7886079fa867f1b5f66f5d8372a8d57230fcd9b1c4d2898de8c3b" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="43c391871412307d796a4c753bd2e2bd4e366490eec6b589c14520ce6630246c" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="85f1aee178b73a81faa1a428ca75c8365b77887f47f3209cc3037cad062d3aab" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="413e3f5bab8dcab75f7dca8007304ac8415feeb4879c85b8288625fb881d14c9" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.24.1.el6]" date="1520942400">- [kernel] sched/core: Rework rq-&gt;clock update skips (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1551475 1212959]
- [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1550103 1532167]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.25.1.el6]" date="1521460800">- [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1557896 1535024]
- [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520818 1520817] {CVE-2017-8824}
- [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447640 1447641] {CVE-2017-7645}
- [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1552706 1437991]
- [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1551471 1495167]
- [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1551471 1495167]
- [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1540481 1538340]
- [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1538654 1408108]
- [s390] fix transactional execution control register handling (Hendrik Brueckner) [1538591 1520862]
- [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1538586 1518669]
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [net] netfilter: xt_TCPMSS: add more sanity tests on tcph-&gt;doff (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519627 1519626] {CVE-2017-1000410}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="9ad72a390eb3ffad0632dad7fc651a8b97b2825d255077c887805a5b5a6df75f" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-690.el6]" date="1486382400">- [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
- [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="7e13d68080255d2cf8e5614b564f35f00987fc5c3bb6f9a634425738279cc0b9" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="58d49cc10442127c8d6d5c07bb57d9ff616a7e9714b8223e13e465706854edb3" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.24.1.el6]" date="1520942400">- [kernel] sched/core: Rework rq-&gt;clock update skips (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1551475 1212959]
- [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1550103 1532167]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.25.1.el6]" date="1521460800">- [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1557896 1535024]
- [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520818 1520817] {CVE-2017-8824}
- [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447640 1447641] {CVE-2017-7645}
- [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1552706 1437991]
- [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1551471 1495167]
- [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1551471 1495167]
- [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1540481 1538340]
- [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1538654 1408108]
- [s390] fix transactional execution control register handling (Hendrik Brueckner) [1538591 1520862]
- [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1538586 1518669]
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [net] netfilter: xt_TCPMSS: add more sanity tests on tcph-&gt;doff (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519627 1519626] {CVE-2017-1000410}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="4c972ec36f5c6f7f99cd1e2040d064628f690e1335b59a896b591d23626dfb67" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="014c2a57d54e90e540daa21d332b18f8f3d27cbf33a95ea0d60346095fab80a1" name="kexec-tools-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.0" rel="307.el6_9.1"/>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; - 2.0.0-299" date="1458907200">- mkdumprd: Use a flexible way to create rtc device, resolves bug 1315148
- hyper-v: do not exclude hv_utils module, resolves bug 1228774</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; - 2.0.0-300" date="1459252800">- fadump/ppc64: only check for dump target paths fadump supports, resolves bug 1254923</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; - 2.0.0-301" date="1472212800">- mkdumprd: Allow findmodule() to add dependency for lsmod output, resolves bug 1343282
- mkdumprd: Kill useless code in moduledep(), resolves bug 1343282
- mkdumprd: skip logical interfaces for bridge, resolves bug 1356615</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; - 2.0.0-302" date="1473854400">- mkdumprd: Pack kdump.conf into kdump initramfs, resolves bug 1038508</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; - 2.0.0-303" date="1476446400">- mkdumprd: Remove load_selinux_policy script, resolves bug 1323086
- mkdumprd: pass the value of DEV_ID to kdump, resolves bug 1322802</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; - 2.0.0-304" date="1476446401">- mkdumprd: pass the value of DEV_ID to kdump, resolves bug 1366513</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; - 2.0.0-305" date="1480680000">- kexec-tools/x86: do not pass efi boot data, resolves bug 1396377</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; - 2.0.0-306" date="1484049600">- mkdumprd: fix env for mdadm, resolves bug 1404263
- mkdumprd: create node for partition within RAID device, resolves bug 1404263
- mkdumprd: refactor block_mknod(), resolves bug 1404263
- uefi: Pass efi_smbios_addr to 2nd kernel, resolves bug 1404552</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; - 2.0.0-307" date="1484913600">- mkdumprd: add mdmon binary for raid1 support, resolves bug 1404263</changelog>
  <changelog author="Baoquan He &lt;bhe@redhat.com&gt; - 2.0.0-307.1" date="1506427200">- Improve 'cpu add' udev rules, resolves bug 1494022</changelog>
</package>
<package pkgid="05f6cc5f76ff7a07af6c5eb83238383628915e350482e02e7047437343c16615" name="ksh-debuginfo" arch="i686">
  <version epoch="0" ver="20120801" rel="34.el6_9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-25" date="1423828800">- combining alarm and IFS caused segfault (#1176670)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-26" date="1425556800">- fix segfault when handling a trap (#1117404)
- closing a file descriptor in a command substitution caused loss of the output (#1116072)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-27" date="1427112000">- ksh could hang when executed in removed directory (#1204111)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-28" date="1428062400">- using trap DEBUG could cause segmentation fault (#1200534)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-29" date="1436270400">- prevent null-test optimization in strdup (#1221766)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-30" date="1439380800">- do not free constant string trap (#1247383)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-31" date="1439985600">- fix another occurence of previous bug (#1247383)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-32" date="1448539200">- fix: in a login shell "( cmd &amp; )" does nothing (#1217236)
- multibyte character string after $1-9 was not expanded correctly (#1256495)
- case in a for loop inside a subshell caused syntax error (#1241013)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-33" date="1452254400">- ksh crashed when disk was full (#1212992)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1495108800">- Fix a memory leak while creating subshells
  Resolves: #1324990</changelog>
</package>
<package pkgid="9a25cd231090f03f9cf9749ca9817c37309f166f1a81f11da67d904b05308e2b" name="ksh-debuginfo" arch="i686">
  <version epoch="0" ver="20120801" rel="35.el6_9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-26" date="1425556800">- fix segfault when handling a trap (#1117404)
- closing a file descriptor in a command substitution caused loss of the output (#1116072)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-27" date="1427112000">- ksh could hang when executed in removed directory (#1204111)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-28" date="1428062400">- using trap DEBUG could cause segmentation fault (#1200534)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-29" date="1436270400">- prevent null-test optimization in strdup (#1221766)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-30" date="1439380800">- do not free constant string trap (#1247383)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-31" date="1439985600">- fix another occurence of previous bug (#1247383)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-32" date="1448539200">- fix: in a login shell "( cmd &amp; )" does nothing (#1217236)
- multibyte character string after $1-9 was not expanded correctly (#1256495)
- case in a for loop inside a subshell caused syntax error (#1241013)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-33" date="1452254400">- ksh crashed when disk was full (#1212992)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1495108800">- Fix a memory leak while creating subshells
  Resolves: #1324990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1498564800">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1437530</changelog>
</package>
<package pkgid="2b64df393b5e72ec3354c7b753811fc753224ddae5e6b1960a816795ba502122" name="ksh-debuginfo" arch="i686">
  <version epoch="0" ver="20120801" rel="36.el6_9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-27" date="1427112000">- ksh could hang when executed in removed directory (#1204111)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-28" date="1428062400">- using trap DEBUG could cause segmentation fault (#1200534)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-29" date="1436270400">- prevent null-test optimization in strdup (#1221766)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-30" date="1439380800">- do not free constant string trap (#1247383)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-31" date="1439985600">- fix another occurence of previous bug (#1247383)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-32" date="1448539200">- fix: in a login shell "( cmd &amp; )" does nothing (#1217236)
- multibyte character string after $1-9 was not expanded correctly (#1256495)
- case in a for loop inside a subshell caused syntax error (#1241013)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-33" date="1452254400">- ksh crashed when disk was full (#1212992)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1495108800">- Fix a memory leak while creating subshells
  Resolves: #1324990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1498564800">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1437530</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1509364800">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1454804</changelog>
</package>
<package pkgid="e69eab6990450a1aa3bcc94988c0d76da7277df73ff3fd13b8b435363bee7a29" name="ksh-debuginfo" arch="i686">
  <version epoch="0" ver="20120801" rel="37.el6_9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-28" date="1428062400">- using trap DEBUG could cause segmentation fault (#1200534)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-29" date="1436270400">- prevent null-test optimization in strdup (#1221766)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-30" date="1439380800">- do not free constant string trap (#1247383)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-31" date="1439985600">- fix another occurence of previous bug (#1247383)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-32" date="1448539200">- fix: in a login shell "( cmd &amp; )" does nothing (#1217236)
- multibyte character string after $1-9 was not expanded correctly (#1256495)
- case in a for loop inside a subshell caused syntax error (#1241013)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 20120801-33" date="1452254400">- ksh crashed when disk was full (#1212992)</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-34" date="1495108800">- Fix a memory leak while creating subshells
  Resolves: #1324990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1498564800">- Fix a crash during clean up after sourcing multiple files
  Resolves: #1437530</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1509364800">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1454804</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516276800">- Fix a crash due to out of bounds write
  Resolves: #1506344</changelog>
</package>
<package pkgid="d3edcab6067d3ba3b6be4dd0f600229b03f7ae6758847ac7a9441c779b9e230d" name="libcgroup-debuginfo" arch="i686">
  <version epoch="0" ver="0.40.rc1" rel="24.el6_9"/>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 0.40.rc1-15" date="1412251200">- related: #1036355
  bumping the release, rhel-6.6 build was not Z-candidate</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 0.40.rc1-16" date="1420545600">- extending cgroup names with default
  resolves: #1139205
- fixing libcgroup-0.40.rc1-reading-config-files-from-etc-cgconfig.d.patch not to modify patch backup file
  resolves: #1162220</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 0.40.rc1-17" date="1457092800">- fix infinite loop
  resolves: #1280382</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 0.40.rc1-18" date="1465300800">- fix order of memory subsystem parameters generated by cgsnapshot
  resolves: #1315543</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 0.40.rc1-19" date="1470916800">- fix loading config files from /etc/cgconfig.d to make it work with libcgroup-pam
  resolves: #1345762</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 0.40.rc1-20" date="1472731200">- change priority of cgconfig and cgred init scripts
  resolves: #1233393</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 0.40.rc1-21" date="1472731201">- change cgroup of every thread of a process
  resolves: #1284495</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 0.40.rc1-22" date="1472731202">- fix memory leak detected by Covscan
  related: #1284495</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 0.40.rc1-23" date="1477051200">- fix potential buffer overflow
  resolves: #1386742</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 0.40.rc1-24" date="1486123200">- fix segfault in cgroup_pam.c
  resolves: #1419519</changelog>
</package>
<package pkgid="095c98d4635761adb817ae671286e6d79687ca26fc8adf057b6e02a89a48ad6c" name="librelp-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.7" rel="3.el6_9.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 0.1.1-1" date="1209470400">- initial build</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 0.1.1-2" date="1210161600">- removed "BuildRequires: autoconf automake"</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.1.1-3" date="1235563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.1.1-4" date="1248523200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Dennis Gregorovic &lt;dgregor@redhat.com&gt; - 0.1.1-4.1" date="1259582400">- Rebuilt for RHEL 6</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 1.2.7-1" date="1400414400">- rebase to 1.2.7
  resolves: #966974</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 1.2.7-2" date="1401710400">- add a patch to prevent a segfault when using TCP KEEPALIVE
  resolves: #966974</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; 1.2.7-3" date="1401710401">- add patches to resolve issues reported by Coverity
  resolves: #966974</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.7-3.1" date="1522238400">- fixed CVE-2018-1000140
- resolved: rhbz#1561230</changelog>
</package>
<package pkgid="278fde2e685ac40bb54d62437af3876a156aac3a8b95b2a4428ba6903f0fe5a1" name="libreoffice-debuginfo" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.2.8.2-5" date="1422532800">- Related: rhbz#1150048 fix some indic shortcuts</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-6" date="1423224000">- Related: rhbz#1150048 rpmdiff fixes</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-7" date="1423483200">- Related: rhbz#1150048 packaging fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-8" date="1426680000">- Related: rhbz#1150048 rpmdiff: avoid multilib conflict</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-9" date="1429531200">- Resolves: rhbz#1209852 enable accidentally disabled GIO UCP</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
</package>
<package pkgid="d5ad3fc94164bb19346ec045b3a111c1d8bc0b20e65b58ddd876bdf100242e17" name="libreoffice-debuginfo" arch="i686">
  <version epoch="1" ver="4.3.7.2" rel="2.el6_9.2"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-6" date="1423224000">- Related: rhbz#1150048 rpmdiff fixes</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-7" date="1423483200">- Related: rhbz#1150048 packaging fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-8" date="1426680000">- Related: rhbz#1150048 rpmdiff: avoid multilib conflict</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-9" date="1429531200">- Resolves: rhbz#1209852 enable accidentally disabled GIO UCP</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-10" date="1430481600">- Resolves: rhbz#1217466 CVE-2015-1774 HWP filter fix</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.2.8.2-11" date="1432555200">- Resolves: rhbz#1223696 some labels in print dialog are not translated, even
  though the translations exist</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-1" date="1446724800">- Resolves: rhbz#1258467 rebase to 4.3.x</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2" date="1448280000">- Related: rhbz#1258467 fix RPATH for more bundled libs</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 1:4.3.7.2-2.1" date="1490529600">- Resolves: rhbz#1435532 CVE-2017-3157 Arbitrary file disclosure in Calc and
  Writer</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:4.3.7.2-2.2" date="1518696000">- Resolves: rhbz#1545033 CVE-2018-6871</changelog>
</package>
<package pkgid="fb07c070d3cb0a8a218f1e5104c736f5c7eb0916f4a77bd7ac95cd16ef7e9a11" name="libreswan-debuginfo" arch="i686">
  <version epoch="0" ver="3.15" rel="7.5.el6_9"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-5.1" date="1449057600">- Resolves: rhbz#1284966 add libreswan to RHEL6 (core)
- Resolves: rhbz#1288086 /var/run/pluto should have 755 and should have 700</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-5.2" date="1453550400">- Resolves: rhbz#1289498 keyingtries=0 is broken
- Resolves: rhbz#1166151 Pluto crashes on during 'service ipsec stop'
- Resolves: rhbz#1216946 IPv6 in RHEL6 fails after reboot
- Resolves: rhbz#1144462 ikev2 status shows "no tunnels up" while tunnel is up</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-5.3" date="1457352000">- Resolves: rhbz#1311360 When IKE rekeys, if on a different tunnel [...]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-6" date="1472040000">- Resolves: rhbz#1345959 openswan - libreswan migration issues
- Resolves: rhbz#1360134 libreswan needs to check additional CRLs after LDAP CRL distributionpoint fails
- Resolves: rhbz#1313709 ipsec pluto returns zero even if it fails [doc change only]
- Resolves: rhbz#1315415 ipsec.conf manpage does not contain any mention about crl-strict option</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7" date="1472040001">- Resolves: rhbz#1313843 Prescript warning: Missing control file /var/run/pluto/pluto.ctl</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7.1" date="1478174400">- Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort when ' auto --up --asynchronous' is used
- Resolves: rhbz#1335896 ipsec initnss/checknss custom directory not recognized</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7.2" date="1479729600">- Resolves: rhbz#1313843 Prescript warning: Missing control file /var/run/pluto/pluto.ctl
- Resolves: rhbz#1375741 Pluto (libreswan) intermittent abort [extended patch]
- Resolves: rhbz#1369990 Libreswan connection sometimes does not get re-established after one side restarts</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7.3" date="1484481600">- Resolves: rhbz#1403201 pluto uses up available memory and fails with 'unable to popen'
- Resolves: rhbz#1311360 When IKE rekeys [...] (updated for IKEv1 responder side)</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.15-7.5" date="1505822400">- Resolves: rhbz#1493917 (new-ksk-libreswan-el6) Add DNSSEC trust anchor KSK 2017</changelog>
</package>
<package pkgid="3c0c3a3f62a047d9f07e11f22474fb100a1c386798badf907f64d15ebc303af8" name="libtirpc-debuginfo" arch="i686">
  <version epoch="0" ver="0.2.1" rel="13.el6_9"/>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-5" date="1313496000">- Added support for user space servers (bz 714015) - 0.2.1-4
- Some RPMdiff clean up - 0.2.1-5</changelog>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-6" date="1366286400">- Removed a svc_freeargs() call from svc_dg_freeargs() (bz 953736)</changelog>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-7" date="1386936000">- Fixed some races in getnetconfig code (bz 1031498)
- Remove the installation of libtirpc.a and libtirpc.la (bz 869397)</changelog>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-8" date="1397044800">- Added authgss_free_private_data call (bz 1082807)</changelog>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-9" date="1401624000">- Fixed overrun in svcauth_gss_validate() (bz 1056809)</changelog>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-10" date="1403092800">- xdr_rejected_reply: Don't crash with invalid server rejection (bz 982064)</changelog>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-11" date="1447416000">- Backported upstream debugging (bz 1273158)
- Fixed memory leak in svc_vc_create (bz 1276687)
- Fixed memory leak in svc_tli_create (bz 1276855)
- Fixed memory leak in __svc_vc_dodestroy (bz 1276856)</changelog>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-12" date="1467028800">- clnt_vc_create: Do not hold a global mutex during connect (bz 1332520)</changelog>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-13" date="1481112000">- tirpc: fix taddr2uaddr for AF_LOCAL (bz 1285144)</changelog>
  <changelog author="Steve Dickson  &lt;steved@redhat.com&gt; 0.2.1-13_9" date="1495022400">- Fix for CVE-2017-8779 (bz 1449458)</changelog>
</package>
<package pkgid="738342efe842f56ffc7e41f82c45cd9cb12e308a726a97ecd80d67c9f2e44804" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="0.10.2" rel="62.el6_9.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-54" date="1430222400">- util: set MAC address for VF via netlink message to PF+VF# when possible (rhbz#1113474)
- util: set macvtap physdev online when macvtap is set online (rhbz#1113474)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-55" date="1446638400">- daemon: Suppress logging of VIR_ERR_NO_DOMAIN_METADATA (rhbz#1260864)
- Allow &lt;source&gt; for type=block to have no dev (rhbz#1220197)
- qemu: event: Properly handle spice events (rhbz#1236581)
- qemu: event: Clean up VNC monitor handling (rhbz#1236581)
- qemu: split out cpuset.mems setting (rhbz#1263263)
- qemu: leave restricting cpuset.mems after initialization (rhbz#1263263)
- virNetDev{Replace, Restore}MacAddress: Fix memory leak (rhbz#1251532)
- util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1251532)
- util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1251532)
- qemu: fix hotplugging cpus with strict memory pinning (rhbz#1263263)
- storage: Track successful creation of LV for removal (rhbz#1232170)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-56" date="1453291200">- qemu: snapshot: Fix return value of external checkpoint with no disks (rhbz#1292312)
- qemu: snapshot: Fix modification of vm object without job (rhbz#1290647)
- virsh-domain: Add --live, --config, --current logic to cmdAttachInterface (rhbz#1229128)
- RHEL: virsh: remove duplicate --config for 'virsh update-device' (rhbz#1224037)
- Update ESX driver to always use privateData (rhbz#1213348)
- esx: Simplify VI (vSphere) API and VMware product version handling (rhbz#1213348)
- conf: net: Correctly switch how to format address fields (rhbz#1299700)
- qemu: Refuse to create snapshot of a disk without source (rhbz#1299411)
- Build all binaries with PIE (rhbz#1242156)
- Enable full RELRO mode (rhbz#1242156)
- Don't duplicate compiler warning flags when linking (rhbz#1242156)
- Simplify RELRO_LDFLAGS (rhbz#1242156)
- Fix AM_LDFLAGS typo (rhbz#1242156)
- Pass AM_LDFLAGS to driver modules too (rhbz#1242156)
- RHEL: Enable RELRO for python modules (rhbz#1242156)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-57" date="1455624000">- vmx: Relax virtualHW.version check (rhbz#1300574)
- qemu: snapshot: Don't leak XML definition and forget to unlock job (rhbz#1305793)
- qemu: Fix formatting flags in qemuDomainSaveImageOpen (rhbz#1307094)
- network: Resolve some issues around vlan copying (rhbz#1300843)
- network: fix connections count in case of allocate failure (rhbz#1300843)
- network: consolidate connection count updates for device pool (rhbz#1300843)
- network: consolidated info log for all network allocate/free operations (rhbz#1300843)
- util: increase libnl buffer size (rhbz#1276478)
- util: reduce debug log in virPCIGetVirtualFunctions() (rhbz#1276478)
- util: improve error reporting in virNetDevVPortProfileGetStatus (rhbz#1276478)
- util: add missing newline (rhbz#1276478)
- util: eliminate bogus error log in virNetDevVPortProfileGetStatus (rhbz#1276478)
- util: clean up and expand 802.1QbX negotiation logging (rhbz#1276478)
- util: report the MAC address that couldn't be set (rhbz#1276478)
- util: reset MAC address of macvtap passthrough physdev after disassociate (rhbz#1276478)
- bitmap: add way to find next clear bit (rhbz#1276478)
- Introduce virBitmapIsBitSet (rhbz#1276478)
- util: Introduce flags field for macvtap creation (rhbz#1276478)
- virnetdevmacvlan.c: Introduce mutex for macvlan creation (rhbz#1276478)
- util: keep/use a bitmap of in-use macvtap devices (rhbz#1276478)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-58" date="1457092800">- qemu: Don't compare host-passthrough CPU to host CPU (rhbz#1307094)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-59" date="1457438400">- qemu: Always format model for host-model CPUs (rhbz#1307094)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-60" date="1459339200">- util: avoid getting stuck on macvtapN name created outside libvirt (rhbz#1321637)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-61" date="1476360000">- virsh: Properly display block job type (rhbz#1326653)
- spec: proper soft static allocation of qemu uid (rhbz#1351792)
- Revert "qemu: snapshot: Fix modification of vm object without job" (rhbz#1326652)
- qemu: snapshot: Fix job handling when creating snapshots (rhbz#1326652)
- tls: remove support for gnutls 1.x.x, require 2.2.0 (rhbz#1333415)
- configure: allow setting default TLS priority string (rhbz#1333415)
- rpc: allow priority string to be passed to TLS context (rhbz#1333415)
- libvirtd: add config option for TLS priority (rhbz#1333415)
- remote: allow TLS protocol/cipher priority override in URI (rhbz#1333415)
- Pass config file object through to driver open methods (rhbz#1333415)
- remote: allow TLS priority to be customized (rhbz#1333415)
- qemu: -numa doesn't (yet) support disjoint range (rhbz#1310122)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62" date="1477915200">- qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
- qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
- migration: add support for migrateURI configuration (rhbz#1347389)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
</package>
<package pkgid="7c1c0b4cb344ca2127713419063ac9de73f143a1aa24e1df770cf464ee766a66" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="0.10.2" rel="62.el6_9.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-55" date="1446638400">- daemon: Suppress logging of VIR_ERR_NO_DOMAIN_METADATA (rhbz#1260864)
- Allow &lt;source&gt; for type=block to have no dev (rhbz#1220197)
- qemu: event: Properly handle spice events (rhbz#1236581)
- qemu: event: Clean up VNC monitor handling (rhbz#1236581)
- qemu: split out cpuset.mems setting (rhbz#1263263)
- qemu: leave restricting cpuset.mems after initialization (rhbz#1263263)
- virNetDev{Replace, Restore}MacAddress: Fix memory leak (rhbz#1251532)
- util: make virNetDev(Replace|Restore)MacAddress public functions (rhbz#1251532)
- util: don't use netlink to save/set mac for macvtap+passthrough+802.1Qbh (rhbz#1251532)
- qemu: fix hotplugging cpus with strict memory pinning (rhbz#1263263)
- storage: Track successful creation of LV for removal (rhbz#1232170)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-56" date="1453291200">- qemu: snapshot: Fix return value of external checkpoint with no disks (rhbz#1292312)
- qemu: snapshot: Fix modification of vm object without job (rhbz#1290647)
- virsh-domain: Add --live, --config, --current logic to cmdAttachInterface (rhbz#1229128)
- RHEL: virsh: remove duplicate --config for 'virsh update-device' (rhbz#1224037)
- Update ESX driver to always use privateData (rhbz#1213348)
- esx: Simplify VI (vSphere) API and VMware product version handling (rhbz#1213348)
- conf: net: Correctly switch how to format address fields (rhbz#1299700)
- qemu: Refuse to create snapshot of a disk without source (rhbz#1299411)
- Build all binaries with PIE (rhbz#1242156)
- Enable full RELRO mode (rhbz#1242156)
- Don't duplicate compiler warning flags when linking (rhbz#1242156)
- Simplify RELRO_LDFLAGS (rhbz#1242156)
- Fix AM_LDFLAGS typo (rhbz#1242156)
- Pass AM_LDFLAGS to driver modules too (rhbz#1242156)
- RHEL: Enable RELRO for python modules (rhbz#1242156)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-57" date="1455624000">- vmx: Relax virtualHW.version check (rhbz#1300574)
- qemu: snapshot: Don't leak XML definition and forget to unlock job (rhbz#1305793)
- qemu: Fix formatting flags in qemuDomainSaveImageOpen (rhbz#1307094)
- network: Resolve some issues around vlan copying (rhbz#1300843)
- network: fix connections count in case of allocate failure (rhbz#1300843)
- network: consolidate connection count updates for device pool (rhbz#1300843)
- network: consolidated info log for all network allocate/free operations (rhbz#1300843)
- util: increase libnl buffer size (rhbz#1276478)
- util: reduce debug log in virPCIGetVirtualFunctions() (rhbz#1276478)
- util: improve error reporting in virNetDevVPortProfileGetStatus (rhbz#1276478)
- util: add missing newline (rhbz#1276478)
- util: eliminate bogus error log in virNetDevVPortProfileGetStatus (rhbz#1276478)
- util: clean up and expand 802.1QbX negotiation logging (rhbz#1276478)
- util: report the MAC address that couldn't be set (rhbz#1276478)
- util: reset MAC address of macvtap passthrough physdev after disassociate (rhbz#1276478)
- bitmap: add way to find next clear bit (rhbz#1276478)
- Introduce virBitmapIsBitSet (rhbz#1276478)
- util: Introduce flags field for macvtap creation (rhbz#1276478)
- virnetdevmacvlan.c: Introduce mutex for macvlan creation (rhbz#1276478)
- util: keep/use a bitmap of in-use macvtap devices (rhbz#1276478)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-58" date="1457092800">- qemu: Don't compare host-passthrough CPU to host CPU (rhbz#1307094)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-59" date="1457438400">- qemu: Always format model for host-model CPUs (rhbz#1307094)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-60" date="1459339200">- util: avoid getting stuck on macvtapN name created outside libvirt (rhbz#1321637)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-61" date="1476360000">- virsh: Properly display block job type (rhbz#1326653)
- spec: proper soft static allocation of qemu uid (rhbz#1351792)
- Revert "qemu: snapshot: Fix modification of vm object without job" (rhbz#1326652)
- qemu: snapshot: Fix job handling when creating snapshots (rhbz#1326652)
- tls: remove support for gnutls 1.x.x, require 2.2.0 (rhbz#1333415)
- configure: allow setting default TLS priority string (rhbz#1333415)
- rpc: allow priority string to be passed to TLS context (rhbz#1333415)
- libvirtd: add config option for TLS priority (rhbz#1333415)
- remote: allow TLS protocol/cipher priority override in URI (rhbz#1333415)
- Pass config file object through to driver open methods (rhbz#1333415)
- remote: allow TLS priority to be customized (rhbz#1333415)
- qemu: -numa doesn't (yet) support disjoint range (rhbz#1310122)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62" date="1477915200">- qemu: fix return value of qemuDomainBlockPivot on errors (rhbz#1300159)
- qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1300159)
- migration: add support for migrateURI configuration (rhbz#1347389)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.1" date="1513339200">- util: Implement virFileReadHeaderFD (CVE-2017-5715)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 0.10.2-62.el6_9.2" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="c53a4bc38450660864508e66f3544c47705c0292fe8629f9a7b3194eb83636f8" name="libvorbis-debuginfo" arch="i686">
  <version epoch="1" ver="1.2.3" rel="5.el6_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.2.0-7" date="1235563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.2-0.1.rc1" date="1244030400">- libvorbis 1.2.2rc1</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.2-1" date="1246536000">- libvorbis 1.2.2</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.2-2" date="1247054400">- libvorbis-1.2.2-svn16228.patch: Backport a fix from pre-1.2.3 to hopefully
  fix small sound file playback. (#505610)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.3-1" date="1247486400">- libvorbis 1.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.2.3-2" date="1248523200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.2.3-3" date="1257163200">- backport patches to fix CVE-2009-3379 (#531765) from upstream</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2.3-4" date="1258977600">- Fix doc subpackage build (#540634)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.2.3-5" date="1328443200">- fix CVE-2012-0444 (#787077)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.2.3-5.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="fd79da803115bf5d522a18b7050b09b30d36f754bd73d9702a6b786b4b4f1b22" name="lvm2-debuginfo" arch="i686">
  <version epoch="0" ver="2.02.143" rel="12.el6_9.1"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-4" date="1459339200">- Remove spurious error about no value in /sys/dev/block/major:minor/dm/uuid.
- Fix device mismatch detection for LV if persistent .cache file is used.
- Fix holder device not being found in /dev while sysfs has it during dev scan.
- Document that lvmlockd and lvmpolld features are available only if compiled in
  (RHEL6 lvm2 doesn't have lvmlockd and lvmpolld compiled in).</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-5" date="1459339201">- Fix VGID/LVID dev indexing in dev cache to not index already indexed devs.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-6" date="1459512000">- Further fixes for device mismatch detection for LV if .cache file is used.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-7" date="1459944000">- Workaround for raid leg allocation failure after not-in-sync raid leg failure.
- Fix flushing of outstanding IO for mirror target (2.02.133).</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-8" date="1478692800">- Prevent non-synced raid1 repair unless --force
- Fix automatic updates of PV extension headers to newest version.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-9" date="1478779200">- Fix lvchange --discard|--zero for active thin-pool.
- Fix lock-holder device for thin pool with inactive thin volumes.
- Use any inherited tags when wiping metadata sub LVs to ensure activation.
- Do not issue "Failed to create directory" message for dm_create_dir failure.
- Add Conflicts: lvm2-libs &lt; 2.02.111 to device-mapper-event to prevent
  incorrect package setup if old and new device-mapper/lvm2 packages combined.
- Move blkdeactivate/blk-availability script from lvm2 to device-mapper package.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-10" date="1479988800">- Disable queueing on mpath devs in blk-availability initscript.
- Add new -m|--mpathoption disablequeueing to blkdeactivate.
- Prevent only repair for non-synced raid1 unless --force, not other raid types.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-11" date="1481630400">- Fix handling of transient failure of a PV holding RAID sub LVs.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 2.02.143-12" date="1484136000">- Allow transiently failed RAID LV to be refreshed.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.02.143-12.el6_9.1" date="1509624000">- Reject writemostly/writebehind in lvchange during resynchronization.</changelog>
</package>
<package pkgid="bca91b81a3d7feec26ab2f449a3589878ab8edf08f651fb0a9e217f68ca15304" name="mailman-debuginfo" arch="i686">
  <version epoch="3" ver="2.1.12" rel="26.el6_9.3"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 3:2.1.12-20" date="1422619200">- fix #745409 - do not set Indexes in httpd configuration for public archive
- fix #1008139 - fix traceback when list_data_dir is not a child of var_prefix</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 3:2.1.12-21" date="1422964800">- fix #1056366 - fix bad subject of the welcome email when creating list using
  newlist command</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 3:2.1.12-22" date="1426507200">- fix #1095359 - add support for DMARC</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 3:2.1.12-23" date="1426507201">- fix #1095359 - handle update when some mailing lists have been created
  by newer Mailman than this one</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 3:2.1.12-24" date="1429704000">- fix CVE-2015-2775 - directory traversal in MTA transports</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; 3:2.1.12-25" date="1429704001">- fix CVE-2002-0389 - local users able to read private mailing list archives</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.12-26" date="1479297600">- Resolves: #1363835 - /etc/mm_cfg.py is a symlink to /usr</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.12-26.1" date="1518782400">- Resolves: #1545967 - Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.12-26.2" date="1519992000">- Resolves: #1545967 - Fix XSS vulnerability in web UI. Add sanitizer</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.12-26.3" date="1520251200">- Related: #1545967 - Add missed import</changelog>
</package>
<package pkgid="6ecd473fc622d4c78bbc9391eee365dc3090c2e87863cd86636ef2c9ef181e4c" name="mercurial-debuginfo" arch="i686">
  <version epoch="0" ver="1.4" rel="5.el6_9"/>
  <changelog author="Neal Becker &lt;ndbecker2@gmail.com&gt; - 1.3-1" date="1246449600">- Update to 1.3</changelog>
  <changelog author="Neal Becker &lt;ndbecker2@gmail.com&gt; - 1.3-2" date="1246449601">- Re-enable tests since they now pass</changelog>
  <changelog author="Neal Becker &lt;ndbecker2@gmail.com&gt; - 1.3.1-2" date="1248436800">- Update to 1.3.1</changelog>
  <changelog author="Neal Becker &lt;ndbecker2@gmail.com&gt; - 1.3.1-3" date="1248436801">- Disable self-tests</changelog>
  <changelog author="Neal Becker &lt;ndbecker2@gmail.com&gt; - 1.4-1" date="1258372800">- Update to 1.4</changelog>
  <changelog author="Neal Becker &lt;ndbecker2@gmail.com&gt; - 1.4-1.1" date="1258372801">- Bump to 1.4-1.1</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 1.4-2" date="1266580800">- cleanup of spec file (mixed tabs-and-spaces, specific version
  for explicit obsoletes, file attributes)</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 1.4-3" date="1268395200">- replaced instances of #!/usr/bin/env python with #!/usr/bin/python
  Fixed: #528797</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.4-4" date="1431691200">- Fixed troubles with SSl connection
- Fixed adding of broken symlink when 'copy -A'
- Fixed permissions for */hgk - Thanks to Dave Johanse &lt;davejohansen@gmail.com&gt;
  Resolves: #784079 #928301 #1006457</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.4-5" date="1497528000">- Fixes CVE-2017-9462</changelog>
</package>
<package pkgid="9b7537cf27127c5d666a7f7498de652aea6c2ff1acacfe0c7ad79154c129a5b4" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="1" ver="1.17" rel="25.2.el6_9"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-18" date="1399291200">- Update microcode data file to 20140430 revision.
- Resolves: #1036240</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-19" date="1404129600">- Update microcode data file to 20140624 revision.
- Resolves: #1113394</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-20" date="1422532800">- Update microcode data file to 20150121 revision.
- Resolves: #1123992</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-21" date="1447243200">- Update microcode data file to 20151106 revision.
- Resolves: #1244968
- Remove bad file permissions on /lib/udev/rules.d/89-microcode.rules
- Resolves: #1201276</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-22" date="1473854400">- Update amd microcode data file to amd-ucode-2013-11-07
- Resolves: #1322525</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-23" date="1475582400">- Update microcode data file to 20160714 revision.
- Resolves: #1346045</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-24" date="1486468800">- Update microcode data file to 20161104 revision.
- Add workaround for E5-26xxv4
- Resolves: #1346045</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25" date="1487592000">- Revert microcode_amd_fam15h.bin to version from amd-ucode-2012-09-10
- Resolves: #1322525</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.1" date="1501070400">- Update microcode data file to 20170707 revision.
- Resolves: #1465143</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Add amd microcode_amd_fam17h.bin data file
- Resolves: #1527357</changelog>
</package>
<package pkgid="8a4a296c92e23240e25c2fe6d8c101ceda1204141434dbd2cac75b1833423841" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="1" ver="1.17" rel="25.4.el6_9"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-20" date="1422532800">- Update microcode data file to 20150121 revision.
- Resolves: #1123992</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-21" date="1447243200">- Update microcode data file to 20151106 revision.
- Resolves: #1244968
- Remove bad file permissions on /lib/udev/rules.d/89-microcode.rules
- Resolves: #1201276</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-22" date="1473854400">- Update amd microcode data file to amd-ucode-2013-11-07
- Resolves: #1322525</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-23" date="1475582400">- Update microcode data file to 20160714 revision.
- Resolves: #1346045</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-24" date="1486468800">- Update microcode data file to 20161104 revision.
- Add workaround for E5-26xxv4
- Resolves: #1346045</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25" date="1487592000">- Revert microcode_amd_fam15h.bin to version from amd-ucode-2012-09-10
- Resolves: #1322525</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.1" date="1501070400">- Update microcode data file to 20170707 revision.
- Resolves: #1465143</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Add amd microcode_amd_fam17h.bin data file
- Resolves: #1527357</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.3" date="1515758400">- Revert Microcode from Intel and AMD for Side Channel attack
- Resolves: #1533978</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.4" date="1516017600">- Use right upstream source for revert
- Resolves: #1533978</changelog>
</package>
<package pkgid="2993f0d4e241664029608247657082e45eb002a81038e9a5a3a83da62f95c241" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="1" ver="1.17" rel="25.6.el6_9"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-22" date="1473854400">- Update amd microcode data file to amd-ucode-2013-11-07
- Resolves: #1322525</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-23" date="1475582400">- Update microcode data file to 20160714 revision.
- Resolves: #1346045</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-24" date="1486468800">- Update microcode data file to 20161104 revision.
- Add workaround for E5-26xxv4
- Resolves: #1346045</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25" date="1487592000">- Revert microcode_amd_fam15h.bin to version from amd-ucode-2012-09-10
- Resolves: #1322525</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.1" date="1501070400">- Update microcode data file to 20170707 revision.
- Resolves: #1465143</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.2" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Add amd microcode_amd_fam17h.bin data file
- Resolves: #1527357</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.3" date="1515758400">- Revert Microcode from Intel and AMD for Side Channel attack
- Resolves: #1533978</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.4" date="1516017600">- Use right upstream source for revert
- Resolves: #1533978</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.5" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575563</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:1.17-25.6" date="1526385600">- Update disclaimer text
- Resolves: #1575563</changelog>
</package>
<package pkgid="9d7a5cfc118f3e76a4e53d4886431bf990be5651bd869b7c23a4621789d4d8e3" name="nfs-utils-debuginfo" arch="i686">
  <version epoch="1" ver="1.2.3" rel="75.el6_9"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.2.3-67" date="1450526400">- mount.nfs: Fix fallback from tcp to udp (bz 1287894)
- exportfs: escape path for function test_export (bz 735696)
- nfs-utils.spec: No verification on runtime configuration files (bz 1118176)
- idmapd: added usage statement (bz 1001439)
- mountd: fix netgroup lookup for short hostnames (bz 1231998)
- mountd: fix bug affecting exports of dirs with 64bit inode number (bz 994564)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.2.3-68" date="1452254400">- gssd: configurable connection timeout for the rpcgssd service (bz 1296607)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.2.3-69" date="1455192000">- nfs_connect_nb: handle EINTR during connection establishment (bz 1299004)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.2.3-70" date="1455364800">- Fixed a regression introduced by a kernel change (bz 1303877)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.2.3-71" date="1467028800">- rpc.mountd: set libtirpc nonblocking mode to avoid DO (bz 1301581)
- nfsidmap: Clean up other exit status cases (bz 1313603)
- gssd: Fix inner-loop variable reuse (bz 1313090)
- mount.nfs manpage: Add nfsmount.conf (bz 1302981)
- nfs.init: Set exit code on restarts (bz 1205055)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.2.3-72" date="1467201600">- statd: suppress a benign log message in nsm_delete_host() (bz 1347027)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.2.3-73" date="1477656000">- mountd: fix is_subdirectory to understand '/' (bz 1331207)
- mount.nfs: Fix for the bug in v1.2.4 that breaks mount.nfs (bz 1208385)
- mount.nfs: Removed supported flag from usage string (bz 1000990)
- mountd.man: Update to change -P option as an alias for -p (bz 1037926)
- exportfs: Deal with path's trailing "/" in unexportfs_parsed() (bz 1276538)
- mount: RPC_PROGNOTREGISTERED should not be a permanent error (bz 1352856)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.2.3-74" date="1481284800">- exportfs: use correct exit code on failed umounts (bz 1276221)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.2.3-75" date="1481716800">- Fixed regression with -V flag (bz 1404535)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.2.3-75_9" date="1508155200">- Exportfs crashes with long path (bz 1500920)</changelog>
</package>
<package pkgid="34f4cae94fe90f17e118f276d554ce8960ee2a49c5d0595e0a517dd25961a711" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="3.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-7" date="1478692800">- Add patch to check if hash algorithms are backed by a token
- Add patch to disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256,
  which have never enabled in the past</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-8" date="1478865600">- Fix problem in check_hash_impl patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-9" date="1479297600">- Update fix_multiple_open patch to fix regression in openldap client
- Remove pk11_genobj_leak patch, which caused crash with Firefox
- Add comment in the policy file to preserve the last empty line
- Disable SHA384 ciphersuites when CKM_TLS12_KEY_AND_MAC_DERIVE is not
  provided by softoken; this superseds check_hash_impl patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-10" date="1480680000">- Add patch to fix SSL CA name leaks, taken from NSS 3.27.2 release
- Add patch to fix bash syntax error in tests/ssl.sh
- Add patch to remove duplicate ciphersuites entries in sslinfo.c
- Add patch to abort selfserv/strsclnt/tstclnt on non-parsable version range
- Build with support for SSLKEYLOGFILE</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-11" date="1481025600">- Adjust the sslstress.txt filename so that it matches with the
  disableSSL2tests patch ported from RHEL 7
- Exclude SHA384 and CHACHA20_POLY1305 ciphersuites from stress tests
- Don't add gtests and ssl_gtests to nss_tests, unless gtests are enabled</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-12" date="1481630400">- Disable unsupported test cases in ssl_gtests</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-13" date="1483963200">- Update expired PayPalEE.cert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1488283200">- Rebase to 3.28.3
- Remove upstreamed moz-1282627-rh-1294606.patch,
  moz-1312141-rh-1387811.patch, moz-1315936.patch, and
  moz-1318561.patch
- Remove no longer necessary nss-duplicate-ciphers.patch
- Disable X25519 and exclude tests using it
- Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
</package>
<package pkgid="feed88c7607c0fd6286f86cb80f2a164ca5e41fb3ca4af7749d063c7d20abc43" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.4" rel="1.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-8" date="1478865600">- Fix problem in check_hash_impl patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-9" date="1479297600">- Update fix_multiple_open patch to fix regression in openldap client
- Remove pk11_genobj_leak patch, which caused crash with Firefox
- Add comment in the policy file to preserve the last empty line
- Disable SHA384 ciphersuites when CKM_TLS12_KEY_AND_MAC_DERIVE is not
  provided by softoken; this superseds check_hash_impl patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-10" date="1480680000">- Add patch to fix SSL CA name leaks, taken from NSS 3.27.2 release
- Add patch to fix bash syntax error in tests/ssl.sh
- Add patch to remove duplicate ciphersuites entries in sslinfo.c
- Add patch to abort selfserv/strsclnt/tstclnt on non-parsable version range
- Build with support for SSLKEYLOGFILE</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-11" date="1481025600">- Adjust the sslstress.txt filename so that it matches with the
  disableSSL2tests patch ported from RHEL 7
- Exclude SHA384 and CHACHA20_POLY1305 ciphersuites from stress tests
- Don't add gtests and ssl_gtests to nss_tests, unless gtests are enabled</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-12" date="1481630400">- Disable unsupported test cases in ssl_gtests</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-13" date="1483963200">- Update expired PayPalEE.cert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1488283200">- Rebase to 3.28.3
- Remove upstreamed moz-1282627-rh-1294606.patch,
  moz-1312141-rh-1387811.patch, moz-1315936.patch, and
  moz-1318561.patch
- Remove no longer necessary nss-duplicate-ciphers.patch
- Disable X25519 and exclude tests using it
- Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to 3.28.4</changelog>
</package>
<package pkgid="cfda83dcf28eda6bcc16988a516ea92ca70ff359765acf3c77d813e3df9f1e00" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.4" rel="3.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-10" date="1480680000">- Add patch to fix SSL CA name leaks, taken from NSS 3.27.2 release
- Add patch to fix bash syntax error in tests/ssl.sh
- Add patch to remove duplicate ciphersuites entries in sslinfo.c
- Add patch to abort selfserv/strsclnt/tstclnt on non-parsable version range
- Build with support for SSLKEYLOGFILE</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-11" date="1481025600">- Adjust the sslstress.txt filename so that it matches with the
  disableSSL2tests patch ported from RHEL 7
- Exclude SHA384 and CHACHA20_POLY1305 ciphersuites from stress tests
- Don't add gtests and ssl_gtests to nss_tests, unless gtests are enabled</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-12" date="1481630400">- Disable unsupported test cases in ssl_gtests</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-13" date="1483963200">- Update expired PayPalEE.cert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1488283200">- Rebase to 3.28.3
- Remove upstreamed moz-1282627-rh-1294606.patch,
  moz-1312141-rh-1387811.patch, moz-1315936.patch, and
  moz-1318561.patch
- Remove no longer necessary nss-duplicate-ciphers.patch
- Disable X25519 and exclude tests using it
- Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to 3.28.4</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-2" date="1493985600">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
</package>
<package pkgid="4868c0a1d175de82632ca8093f5e8443f9801529a2c9afdc5e0903d566ea6ce6" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.4" rel="4.el6_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-11" date="1481025600">- Adjust the sslstress.txt filename so that it matches with the
  disableSSL2tests patch ported from RHEL 7
- Exclude SHA384 and CHACHA20_POLY1305 ciphersuites from stress tests
- Don't add gtests and ssl_gtests to nss_tests, unless gtests are enabled</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-12" date="1481630400">- Disable unsupported test cases in ssl_gtests</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-13" date="1483963200">- Update expired PayPalEE.cert</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1488283200">- Rebase to 3.28.3
- Remove upstreamed moz-1282627-rh-1294606.patch,
  moz-1312141-rh-1387811.patch, moz-1315936.patch, and
  moz-1318561.patch
- Remove no longer necessary nss-duplicate-ciphers.patch
- Disable X25519 and exclude tests using it
- Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1489579200">- Avoid cipher suite ordering change, spotted by Hubert Kario</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1490356800">- Fix crash with tstclnt -W
- Adjust gtests to run with our old softoken and downstream patches</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to 3.28.4</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.28.4-2" date="1493985600">- Include CKBI 2.14 and updated CA constraints from NSS 3.28.5</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Fix zero-length record treatment for stream ciphers and SSLv2</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-4" date="1501848000">- Backport patch to simplify transcript calculation for CertificateVerify</changelog>
</package>
<package pkgid="270d17088ae6f6a012c0f1b5841c43b4df4d3afb4439e4dc55a8510d11406a76" name="nss-util-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.3" rel="1.el6_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.16.2.3-2" date="1416571200">- Fix the required nspr version to be 4.10.6
- Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-1" date="1427112000">- Resolves: Bug 1200937 - [RHEL6.6] nss-util 3.18 rebase required for firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-1" date="1433592000">- Rebase to nss-3.19.1
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-2" date="1444996800">- Resolves: Bug 1269356 - CVE-2015-7182 CVE-2015-7181</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-1" date="1453118400">- Rebase to nss-util from nss 3.21
- Resolves: Bug 1297890 - Rebase RHEL 6.8 to NSS-util 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-2" date="1456142400">- Added upstream patch for CVE-2016-1950</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-1" date="1475582400">- Rebase to NSS 3.26.0
- Remove upstreamed patch for CVE-2016-1950
- Remove p-disable-md5-590364-reversed.patch for bug 1335915</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-2" date="1475582401">- Add missing source files</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-3" date="1479902400">- Tolerate policy file without last empty line</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1487937600">- Rebase to NSS 3.28.3
- Package new header eccutil.h</changelog>
</package>
<package pkgid="e320f0309916fe6dbbadfb69786ea9943c6c4e4d3f0a85cbbfdb9981ed40dbb0" name="nss-util-debuginfo" arch="i686">
  <version epoch="0" ver="3.28.4" rel="1.el6_9"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.18.0-1" date="1427112000">- Resolves: Bug 1200937 - [RHEL6.6] nss-util 3.18 rebase required for firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-1" date="1433592000">- Rebase to nss-3.19.1
- Resolves: Bug 1224450</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.19.1-2" date="1444996800">- Resolves: Bug 1269356 - CVE-2015-7182 CVE-2015-7181</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 3.21.0-1" date="1453118400">- Rebase to nss-util from nss 3.21
- Resolves: Bug 1297890 - Rebase RHEL 6.8 to NSS-util 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 3.21.0-2" date="1456142400">- Added upstream patch for CVE-2016-1950</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-1" date="1475582400">- Rebase to NSS 3.26.0
- Remove upstreamed patch for CVE-2016-1950
- Remove p-disable-md5-590364-reversed.patch for bug 1335915</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-2" date="1475582401">- Add missing source files</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.27.1-3" date="1479902400">- Tolerate policy file without last empty line</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-1" date="1487937600">- Rebase to NSS 3.28.3
- Package new header eccutil.h</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-1" date="1491566400">- Rebase to NSS 3.28.4 to accommodate base64 encoding fix</changelog>
</package>
<package pkgid="57a5f61d61775ea3c2278d1b84ddf5d05b7b6fc29f8debf48c2d164248eaa16e" name="ntp-debuginfo" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="12.el6_9.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-2" date="1418990400">- don't generate weak control key for resolver (CVE-2014-9293)
- don't generate weak MD5 keys in ntp-keygen (CVE-2014-9294)
- fix buffer overflows via specially-crafted packets (CVE-2014-9295)
- don't mobilize passive association when authentication fails (CVE-2014-9296)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-3" date="1424347200">- validate lengths of values in extension fields (CVE-2014-9297)
- drop packets with spoofed source address ::1 (CVE-2014-9298)
- add nanosecond support to SHM refclock (#1117704)
- allow creating all SHM segments with owner-only access (#1122015)
- allow symmetric keys up to 32 bytes again (#1053551)
- fix calculation of root dispersion (#1045376)
- fix crash in ntpq mreadvar command (#1165141)
- don't step clock for leap second with -x option (#1190619)
- don't drop packets with source port below 123 (#1171630)
- use larger RSA exponent in ntp-keygen (#1184421)
- refresh peers on routing updates (#1193850)
- increase memlock limit again (#1053568)
- warn when monitor can't be disabled due to limited restrict (#1166596)
- improve documentation of restrict command (#1069019)
- update logconfig documentation for patched default (#1193849)
- don't build ntpsnmpd (#995134)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-4" date="1424692800">- fix typos in ntpd man page (#1194463)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5" date="1430222400">- reject packets without MAC when authentication is enabled (CVE-2015-1798)
- protect symmetric associations with symmetric key against DoS attack
  (CVE-2015-1799)
- fix generation of MD5 keys with ntp-keygen on big-endian systems
  (CVE-2015-3405)
- log when stepping clock for leap second or ignoring it with -x (#1204625)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-7" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-9" date="1452600000">- fix crash with invalid logconfig command (CVE-2015-5194)
- fix crash when referencing disabled statistic type (CVE-2015-5195)
- don't hang in sntp with crafted reply (CVE-2015-5219)
- don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
  CVE-2015-7702)
- fix memory leak with autokey (CVE-2015-7701)
- don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
- don't crash in ntpq with crafted packet (CVE-2015-7852)
- add option to set Differentiated Services Code Point (DSCP) (#1228314)
- extend rawstats log (#1242895)
- fix resetting of leap status (#1243034)
- report clock state changes related to leap seconds (#1242937)
- allow -4/-6 on restrict lines with mask (#1232146)
- retry joining multicast groups (#1288534)
- explain synchronised state in ntpstat man page (#1286969)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-11" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-12" date="1484136000">- don't limit rate of packets from sources (CVE-2016-7426)
- don't change interface from received packets (CVE-2016-7429)
- fix calculation of root distance again (CVE-2016-7433)
- require authentication for trap commands (CVE-2016-9310)
- fix crash when reporting peer event to trappers (CVE-2016-9311)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-12.el6_9.1" date="1506081600">- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)</changelog>
</package>
<package pkgid="ba6212e5ba082fc72fa8b3610953bb91421c4a56f63cfa78c8681c0ab4ba42a5" name="ntp-debuginfo" arch="i686">
  <version epoch="0" ver="4.2.6p5" rel="12.el6_9.2"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-3" date="1424347200">- validate lengths of values in extension fields (CVE-2014-9297)
- drop packets with spoofed source address ::1 (CVE-2014-9298)
- add nanosecond support to SHM refclock (#1117704)
- allow creating all SHM segments with owner-only access (#1122015)
- allow symmetric keys up to 32 bytes again (#1053551)
- fix calculation of root dispersion (#1045376)
- fix crash in ntpq mreadvar command (#1165141)
- don't step clock for leap second with -x option (#1190619)
- don't drop packets with source port below 123 (#1171630)
- use larger RSA exponent in ntp-keygen (#1184421)
- refresh peers on routing updates (#1193850)
- increase memlock limit again (#1053568)
- warn when monitor can't be disabled due to limited restrict (#1166596)
- improve documentation of restrict command (#1069019)
- update logconfig documentation for patched default (#1193849)
- don't build ntpsnmpd (#995134)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-4" date="1424692800">- fix typos in ntpd man page (#1194463)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-5" date="1430222400">- reject packets without MAC when authentication is enabled (CVE-2015-1798)
- protect symmetric associations with symmetric key against DoS attack
  (CVE-2015-1799)
- fix generation of MD5 keys with ntp-keygen on big-endian systems
  (CVE-2015-3405)
- log when stepping clock for leap second or ignoring it with -x (#1204625)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-7" date="1444996800">- check origin timestamp before accepting KoD RATE packet (CVE-2015-7704)
- allow only one step larger than panic threshold with -g (CVE-2015-5300)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-9" date="1452600000">- fix crash with invalid logconfig command (CVE-2015-5194)
- fix crash when referencing disabled statistic type (CVE-2015-5195)
- don't hang in sntp with crafted reply (CVE-2015-5219)
- don't crash with crafted autokey packet (CVE-2015-7691, CVE-2015-7692,
  CVE-2015-7702)
- fix memory leak with autokey (CVE-2015-7701)
- don't allow setting driftfile and pidfile remotely (CVE-2015-7703)
- don't crash in ntpq with crafted packet (CVE-2015-7852)
- add option to set Differentiated Services Code Point (DSCP) (#1228314)
- extend rawstats log (#1242895)
- fix resetting of leap status (#1243034)
- report clock state changes related to leap seconds (#1242937)
- allow -4/-6 on restrict lines with mask (#1232146)
- retry joining multicast groups (#1288534)
- explain synchronised state in ntpstat man page (#1286969)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-10" date="1453809600">- don't accept server/peer packets with zero origin timestamp (CVE-2015-8138)
- fix crash with reslist command (CVE-2015-7977, CVE-2015-7978)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-11" date="1462276800">- don't allow spoofed packets to demobilize associations (CVE-2015-7979,
  CVE-2016-1547)
- don't allow spoofed packet to enable symmetric interleaved mode
  (CVE-2016-1548)
- check mode of new source in config command (CVE-2016-2518)
- make MAC check resilient against timing attack (CVE-2016-1550)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-12" date="1484136000">- don't limit rate of packets from sources (CVE-2016-7426)
- don't change interface from received packets (CVE-2016-7429)
- fix calculation of root distance again (CVE-2016-7433)
- require authentication for trap commands (CVE-2016-9310)
- fix crash when reporting peer event to trappers (CVE-2016-9311)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 4.2.6p5-12.el6_9.1" date="1506081600">- fix buffer overflow in datum refclock driver (CVE-2017-6462)
- fix crash with invalid unpeer command (CVE-2017-6463)
- fix potential crash with invalid server command (CVE-2017-6464)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.2.6p5-12.el6_9.2" date="1513598400">- fix CVE-2016-7429 patch to work correctly on multicast client (#1525996)</changelog>
</package>
<package pkgid="e0f3ca7ce59202c79c02b5ed6b2d4f41948d10a6b9eec41120b4fbe5444d0387" name="openssh-debuginfo" arch="i686">
  <version epoch="0" ver="5.3p1" rel="123.el6_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-114" date="1453291200">- pam_ssh_agent_auth: Provide authorized_keys_command= feature (#1299555)
- CVE-2016-1908: Prevent possible fallback from untrusted X11 forwarding (#1299048)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-115" date="1453982400">- Ammends previous release, fixing typos and behaviour changes</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-116" date="1456401600">- Restore functionallity of pam_ssh_agent_auth in FIPS mode (#1278315)
- Initialize devices_done variable for challenge response (#1281468)
- Update behaviour of X11 forwarding to match upstream (#1299048)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 5.3p1-117" date="1458043200">- CVE-2016-3115: missing sanitisation of input for X11 forwarding (#1317817)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-118" date="1461585600">- ssh-copy-id: SunOS does not understand ~ (#1327547)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-119" date="1475236800">- Resolve sftp force permission colision with umask (#1341747)
- Relax bits needed check to allow hmac-sha2-512 with gss-group1-sha1- (#1353359)
- close ControlPersist background process stderr when not in debug mode (#1335539)
- Do not add a message "The agent has no identities." in ~/.ssh/authorized_keys (#1353410)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-120" date="1478088000">- Prevent infinite loop when Ctrl+Z pressed at password prompt (#1218424)
- Remove RC4 cipher and MD5 based MAC from the default client proposal (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-121" date="1481803200">- Fix missing hmac-md5-96 from server offer (#1373836)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-122" date="1482148800">- Allow to use ibmca crypto hardware (#1397547)
- CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes (1405374)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 5.3p1-123" date="1501761600">- Fix for CVE-2016-6210: User enumeration via covert timing channel (#1357442)</changelog>
</package>
<package pkgid="c73b3d387dc150f45256fc6007db59dab362844a406dd9bc4858b602d2799568" name="patch-debuginfo" arch="i686">
  <version epoch="0" ver="2.6" rel="8.el6_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.5.4-39" date="1241006400">- Fixed operation when SELinux is disabled (bug #498102).  Patch from
  Jan Kratochvil.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5.4-40" date="1248523200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.6-1" date="1258372800">- 2.6.  No longer need stderr, suffix, stripcr, parse, allow-spaces,
  ifdef, program_name, or posix-backup patches.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.6-2" date="1261656000">- Applied upstream patch to prevent incorrect filename being chosen
  when adding a new file (bug #550319).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.6-3" date="1267617600">- Added comments for all patches.
- Ship COPYING file.
- Removed sparc ifdefs in spec file.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.6-4" date="1280232000">- Fixed argument type for --get (bug #618216).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.6-5" date="1281096000">- Fixed selinux patch (bug #618215).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.6-6" date="1281960000">- Another fix for the selinux patch (bug #618215).</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.6-7" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.6-8" date="1523966400">- Fixed year overflow detected in rpmdiff</changelog>
</package>
<package pkgid="ad35194a35dd504c1517f374da44a33dbcca9040f5376b422cb641b2709e61c7" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-688.el6]" date="1485864000">- [netdrv] sfc: fix missing mc_promisc setting (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-689.el6]" date="1486123200">- [netdrv] be2net: fix initial MAC setting (Ivan Vecera) [1415905]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-690.el6]" date="1486382400">- [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
- [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="e2ad86b5186125ca2c92d319ce76a7c4d4660f730919ff22e090234e071d328c" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
</package>
<package pkgid="f9f14b84cdacb78cb84295143b946588ba6afd08f1eade550775680967ef6e30" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="65fbba866392c8ab4c48738f776b9bf510bf22098e93d5d901394916a21099fc" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="71e6d5655469afbf6f1d7c5f19b290a1d0371f1b6db5445948be59695c988d07" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="3409970e276bda4aca5b0547ea361531dc40dcd1be3b3ccf7cfb14bafa54a1d8" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="ab3a62008d3c022498159f177d7fb6fe5c2d28754a2a7b6afa7a9b7384873039" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="a872e099dbce1daf02fe01a09463a1cb91a36084ff25ab93561b6f7b7c48a725" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="e9422a91038bf3467b1b1ad3a036c0d50ee8390f151808cc5909ef75f89f7694" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="450457c68761462fca2b334f9c1c22afa3bbc9c41c307de3c6080f2e90accc14" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.24.1.el6]" date="1520942400">- [kernel] sched/core: Rework rq-&gt;clock update skips (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1551475 1212959]
- [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1550103 1532167]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.25.1.el6]" date="1521460800">- [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1557896 1535024]
- [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520818 1520817] {CVE-2017-8824}
- [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447640 1447641] {CVE-2017-7645}
- [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1552706 1437991]
- [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1551471 1495167]
- [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1551471 1495167]
- [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1540481 1538340]
- [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1538654 1408108]
- [s390] fix transactional execution control register handling (Hendrik Brueckner) [1538591 1520862]
- [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1538586 1518669]
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [net] netfilter: xt_TCPMSS: add more sanity tests on tcph-&gt;doff (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519627 1519626] {CVE-2017-1000410}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="34e77099b4de30f69ec1e18f2c9e9ee34acb24cdbb09a9814b5050f2d6cee589" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-690.el6]" date="1486382400">- [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
- [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="81f942660c2631d1f8f625f643c0752a3b5568eae697dcf89b5b9345ee569111" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="537bea55866094e18626f302bc453f39f96036a0b995857f28cc6e18f6610012" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.24.1.el6]" date="1520942400">- [kernel] sched/core: Rework rq-&gt;clock update skips (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1551475 1212959]
- [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1550103 1532167]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.25.1.el6]" date="1521460800">- [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1557896 1535024]
- [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520818 1520817] {CVE-2017-8824}
- [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447640 1447641] {CVE-2017-7645}
- [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1552706 1437991]
- [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1551471 1495167]
- [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1551471 1495167]
- [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1540481 1538340]
- [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1538654 1408108]
- [s390] fix transactional execution control register handling (Hendrik Brueckner) [1538591 1520862]
- [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1538586 1518669]
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [net] netfilter: xt_TCPMSS: add more sanity tests on tcph-&gt;doff (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519627 1519626] {CVE-2017-1000410}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="28aa906b37b09ceba480e4ba058ecc88b89458ae171dd120b1cf7970c814cbdc" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="7a415c1e6a677f54587333a52f6d8428d2a02f1cc669cdf613fed0eb968f3664" name="poppler-debuginfo" arch="i686">
  <version epoch="0" ver="0.12.4" rel="12.el6_9"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-3" date="1273060800">- Don't detect overlaping cells as table
- Resolves: #588723</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-4" date="1286366400">- Add poppler-0.12.4-CVE-2010-3702.patch
    (Properly initialize parser)
- Add poppler-0.12.4-CVE-2010-3703.patch
    (Properly initialize stack)
- Add poppler-0.12.4-CVE-2010-3704.patch
    (Fix crash in broken pdf (code &lt; 0))
- Resolves: #639860</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-5" date="1433246400">- Fix captions of push button fields.
- Resolves: #1191907</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.12.4-6" date="1448539200">- Silence illegal entry in bfrange block in ToUnicode CMap
- Resolves: #710816</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.12.4-7" date="1448884800">- Fix lines disappearing when selecting paragraph
- Resolves: #614824</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.12.4-8" date="1448971200">- Embed type1 fonts to PostScript files correctly
- Resolves: #1232210</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 0.12.4-9" date="1449662400">- Identification of fonts directly from streams and files
- Resolves: #1208719</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-10" date="1457697600">- Use better default pixel size for printing of 0 width lines
- Resolves: #1316163</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.12.4-11" date="1475150400">- Don't crash on streams without Length
- Resolves: #1302365</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.12.4-12" date="1502366400">- Resolves: rhbz#1479815 CVE-2017-9776</changelog>
</package>
<package pkgid="86799722c41ceb074b69026ead7f5a5598ea6f42234997e8268a5d9dc48768a8" name="postgresql-debuginfo" arch="i686">
  <version epoch="0" ver="8.4.20" rel="8.el6_9"/>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 8.4.13-1" date="1346068800">- Update to PostgreSQL 8.4.13, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-13.html
  including the fixes for CVE-2012-3488, CVE-2012-3489
Resolves: #852021</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.18-1" date="1381492800">- Update to PostgreSQL 8.4.18, for various fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-14.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-15.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-16.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-17.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-18.html
  including fixes for CVE-2013-0255, CVE-2013-1900 (#1017837)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-1" date="1392724800">- Update to PostgreSQL 8.4.20 (#1065843) for fixes described at
  http://www.postgresql.org/docs/8.4/static/release-8-4-19.html
  http://www.postgresql.org/docs/8.4/static/release-8-4-20.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-2" date="1425988800">- fix for CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2014-8161
  (rhbz#1198651 &amp; rhbz#1198652)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-3" date="1432728000">- CVE-2015-3165, CVE-2015-3166, CVE-2015-3167</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-4" date="1445428800">- fix for CVE-2015-5288 (rhbz#1273446)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-5" date="1455624000">- fix for CVE-2016-0773 (rhbz#1308598)
- fix tests for new libxml2 (rhbz#1303972)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-6" date="1456315200">- allow TLS &gt; 1.0 (rhbz#1287053)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 8.4.20-7" date="1473336000">- backport PGSTARTTIMEOUT variable from latest RHSCL while reasonably
  changing wait timeout to 2 seconds by default</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 8.4.20-8" date="1504008000">- backport fix for CVE-2017-7546 (rhbz#1484677)</changelog>
</package>
<package pkgid="e201b9bdbdc62740decc5e550b4a1dda97acef64d77400892a4dd1e7aa2114b6" name="procps-debuginfo" arch="i686">
  <version epoch="0" ver="3.2.8" rel="45.el6_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.2.8-37" date="1473076800">- Adding option to skip stripping of wchan name data
- Resolves: #1322111</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.2.8-38" date="1474545600">- New warning if pattern exceeds 15 characters without -f option
- Resolves: #877352</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.2.8-39" date="1476100800">- slabtop: fixing incorrect usage percent computation - int overflow
- Resolves: rhbz#1330008</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.2.8-40" date="1477396800">- sysctl.conf manpage: new NOTES section with predefined vars hint
- Resolves: rhbz#1318644</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.2.8-41" date="1477396801">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1217077</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.2.8-42" date="1477915200">- top: Termination with segfault if /proc becomes inaccessible during run
- Resolves: rhbz#928724</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.2.8-43" date="1479297600">- Rework of patch 91 from 3.2.8-37, stripping removed permanently, no new option
- Resolves: rhbz#1322111</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.2.8-44" date="1479816000">- Removal of patch 92 - procps-3.2.8-pgrep-15-chars-warning.patch
- Related: rhbz#877352</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.2.8-45" date="1482148800">- slabtop: additional work on usage computation to work on 32bit archs
- Related: rhbz#1330008</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.2.8-45.el6_9.1" date="1497355200">- ps: STIME no longer 1970 if many cores in /proc/stat
- Resolves: rhbz#1460176</changelog>
</package>
<package pkgid="743b3595d0001a591c7bb74a7ff854220ba16454447aa2a9ee1b6f3115707808" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.1.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-688.el6]" date="1485864000">- [netdrv] sfc: fix missing mc_promisc setting (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-689.el6]" date="1486123200">- [netdrv] be2net: fix initial MAC setting (Ivan Vecera) [1415905]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-690.el6]" date="1486382400">- [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
- [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
</package>
<package pkgid="a4ceabd9c865fc98227aa170b68f0179d324f16ad2a4d976eab30c6bcf3779e6" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
</package>
<package pkgid="96f9d9382d1388addef4bfce2410f1a7bbbac5ca38e8f080c4ab32df89d1d64a" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
</package>
<package pkgid="75fbbc2cf3265d1231f80b6e4ec865df982513f01b9836a12a3c27660d96f52a" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.10.3.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [2.6.32-696.10.2.el6]" date="1505044800">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.3.el6]" date="1505995200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="f87bc5e99ba924ebc07f2213016a4cc318daf5bf59d45529b61900934a1bc9b3" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.13.2.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.2.el6]" date="1506081600">- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}
- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
</package>
<package pkgid="6aa3d11d782e1eca357ebddd80614e2feec770e278fb7b11e1edfc8c95ca3dd0" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.16.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.7.1.el6]" date="1497268800">- [kernel] audit: acquire creds selectively to reduce atomic op overhead (Paul Moore) [1460164 1454847]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.8.1.el6]" date="1498046400">- [fs] sunrpc: Enable the keepalive option for TCP sockets (Dave Wysochanski) [1462094 1458421]
- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.9.1.el6]" date="1499860800">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.10.1.el6]" date="1500379200">- [mm] backport upstream large stack guard patch to RHEL6 (Larry Woodman) [1466667 1464237]
- Revert: [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- [fs] sunrpc: Handle EADDRNOTAVAIL on connection failures [1472128 1459978]
- [scsi] scsi_transport_srp: Fix a race condition (Don Dutile) [1462097 1417305]
- [scsi] scsi_transport_srp: Introduce srp_wait_for_queuecommand() (Don Dutile) [1462097 1417305]
- [block] make blk_cleanup_queue() wait until request_fn finished (Don Dutile) [1462097 1417305]
- [s390] kernel: initial cr0 bits (Hendrik Brueckner) [1460194 1445326]
- [s390] zfcp: do not trace pure benign residual HBA responses at default level (Hendrik Brueckner) [1460193 1421760]
- [s390] zfcp: fix rport unblock race with LUN recovery (Hendrik Brueckner) [1460190 1421761]
- [scsi] bnx2fc: fix race condition in bnx2fc_get_host_stats() (Maurizio Lombardi) [1467323 1393672]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
</package>
<package pkgid="917a1b9aae0fd06a7fddcc105eb3da1a67dd2c74d68d3abecec0da8647220f80" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.18.7.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.5.el6]" date="1513684800">- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.6.el6]" date="1513771200">- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.7.el6]" date="1514462400">- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="73fe245f70f14586452f5bbe42ee9a200ec9639b2da91de6f950664a7db1ddd1" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.20.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.11.1.el6]" date="1502452800">- [scsi] Add STARGET_CREATED_REMOVE state to scsi_target_state (Ewan Milne) [1472127 1452358]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.12.1.el6]" date="1503057600">- [fs] gfs2: clear gl_object when deleting an inode in gfs2_delete_inode (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: clear gl_object if gfs2_create_inode fails (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: set gl_object in inode lookup only after block type check (Robert S Peterson) [1479397 1464541]
- [fs] gfs2: introduce helpers for setting and clearing gl_object (Robert S Peterson) [1479397 1464541]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.13.1.el6]" date="1503489600">- [netdv] brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() (Stanislaw Gruszka) [1474783 1474782] {CVE-2017-7541}
- [x86] fix /proc/mtrr with base/size more than 44bits (Jerome Marchand) [1482855 1466530]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
</package>
<package pkgid="d9cb7d8e560591ec9424874eaa76288956dd85b80da7ebf9933fe60656ce0f97" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.23.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.14.1.el6]" date="1505736000">- [fs] nfs: don't disconnect open-owner on NFS4ERR_BAD_SEQID (Dave Wysochanski) [1491123 1459636]
- [net] l2cap: prevent stack overflow on incoming bluetooth packet (Neil Horman) [1490060 1490062] {CVE-2017-1000251}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.15.1.el6]" date="1506427200">- [fs] binfmt_elf.c:load_elf_binary(): return -EINVAL on zero-length mappings (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}
- [fs] binfmt_elf.c: fix bug in loading of PIE binaries (Petr Matousek) [1492959 1492961] {CVE-2017-1000253}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.16.1.el6]" date="1507464000">- [net] packet: fix tp_reserve race in packet_set_ring (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_frame_nr (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [net] packet: fix overflow in check for tp_reserve (Stefano Brivio) [1481941 1481943] {CVE-2017-1000111}
- [netdrv] sfc: tx ring can only have 2048 entries for all EF10 NICs (Jarod Wilson) [1498019 1441773]
- [fs] sunrpc: always treat the invalid cache as unexpired (Thiago Becker) [1497976 1477288]
- [fs] sunrpc: xpt_auth_cache should be ignored when expired (Thiago Becker) [1497976 1477288]
- [net] tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0 (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [net] tcp: fix 0 divide in __tcp_select_window() (Davide Caratti) [1488344 1488340] {CVE-2017-14106}
- [scsi] lpfc: fix "integer constant too large" error on 32bit archs (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: version 11.0.1.6 is 11.0.0.6 with no_hba_reset patches (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Vport creation is failing with "Link Down" error (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Fix eh_deadline setting for sli3 adapters (Maurizio Lombardi) [1487220 1441169]
- [scsi] lpfc: Correct panics with eh_timeout and eh_deadline (Maurizio Lombardi) [1487220 1441169]
- [net] udp: consistently apply ufo or fragmentation (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}
- [net] ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output (Davide Caratti) [1481532 1481529] {CVE-2017-1000112}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.17.1.el6]" date="1510142400">- [fs] nfsd: reorder nfsd_cache_match to check more powerful discriminators first (Thiago Becker) [1509876 1435787]
- [fs] nfsd: split DRC global spinlock into per-bucket locks (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert num_drc_entries to an atomic_t (Thiago Becker) [1509876 1435787]
- [fs] nfsd: remove the cache_hash list (Thiago Becker) [1509876 1435787]
- [fs] nfsd: convert the lru list into a per-bucket thing (Thiago Becker) [1509876 1435787]
- [fs] nfsd: clean up drc cache in preparation for global spinlock elimination (Thiago Becker) [1509876 1435787]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.18.1.el6]" date="1511092800">- [s390] s390/qdio: clear DSCI prior to scanning multiple input queues (Hendrik Brueckner) [1513314 1467962]
- [net] sctp: do not loose window information if in rwnd_over (Marcelo Leitner) [1514443 1492220]
- [net] sctp: fix recovering from 0 win with small data chunks (Marcelo Leitner) [1514443 1492220]
- [s390] zfcp: fix erp_action use-before-initialize in REC action trace (Hendrik Brueckner) [1512425 1497000]
- [hv] vmbus: Fix error code returned by vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Increase the time between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Raise retry/wait limits in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [hv] vmbus: Reduce the delay between retries in vmbus_post_msg() (Vitaly Kuznetsov) [1506145 1491846]
- [scsi] be2iscsi: fix bad extern declaration (Maurizio Lombardi) [1507512 1497152]
- [kernel] mqueue: fix a use-after-free in sys_mq_notify() (Davide Caratti) [1476122 1476124] {CVE-2017-11176}
- [net] ipv6: accept 64k - 1 packet length in ip6_find_1stfragopt() (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: avoid overflow of offset in ip6_find_1stfragopt (Matteo Croce) [1477008 1477006] {CVE-2017-7542}
- [net] ipv6: Fix leak in ipv6_gso_segment() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] gre: fix a possible skb leak (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Check ip6_find_1stfragopt() return value properly (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}
- [net] ipv6: Prevent overrun when parsing v6 header options (Sabrina Dubroca) [1502417 1459951] {CVE-2017-9074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
</package>
<package pkgid="07af11c10984e5f43430ebbb491c3480e991b0c740cc0dfcc01aa8779dafe655" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.28.1.el6"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.19.1.el6]" date="1513857600">- [scsi] bnx2fc: Fix hung task messages when a cleanup response is not received during abort (Chad Dupuis) [1523783 1504260]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.20.1.el6]" date="1515758400">- [x86] kaiser/efi: unbreak tboot (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix trampoline stack problem with XEN PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] pti/mm: Fix XEN PV boot failure (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Invoke TRACE_IRQS_IRETQ in paranoid_userspace_restore_all (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: show added cpuid flags in /proc/cpuinfo after late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: svm: spec_ctrl at vmexit needs per-cpu areas functional (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Eliminate redundnat FEATURE Not Present messages (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: enable IBRS and stuff_RSB before calling NMI C code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip CAP_SYS_PTRACE check to skip audit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: disable ibrs while in intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: skip IBRS/CR3 restore when paranoid exception returns to userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- Revert "x86/entry: Use retpoline for syscall's indirect calls" (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/dump_pagetables: Allow dumping current pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add a pgd argument to walk_pgd_level() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Add page table directory (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove unneeded nmi_userspace code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix nmi exit code with CONFIG_TRACE_IRQFLAGS (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: init_tss is supposed to go in the PAGE_ALIGNED per-cpu section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Clear kdump pgd page to prevent incorrect behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: consider the init_mm.pgd a kaiser pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: convert userland visible "kpti" name to "pti" (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: set IBRS during resume from RAM if ibrs_enabled is 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: __load_cr3 in resume from RAM after kernel %gs has been restored (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: Revert the __GFP_COMP flag change (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix paranoid_exit() trampoline clobber (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] spec_ctrl: allow use_ibp_disable only if both SPEC_CTRL and IBPB_SUPPORT are missing (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Documentation spec_ctrl.txt (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: remove irqs_disabled() check from intel_idle() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use enum when setting ibrs/ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: undo speculation barrier for ibrs_enabled and noibrs_cmdline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce ibpb_enabled = 2 for IBPB instead of IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: introduce SPEC_CTRL_PCP_ONLY_IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: cleanup s/flush/sync/ naming when sending IPIs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: set IBRS during CPU init if in ibrs_enabled == 2 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use IBRS_ENABLED instead of 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: allow the IBP disable feature to be toggled at runtime (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: always initialize save_reg in ENABLE_IBRS_SAVE_AND_CLOBBER (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: ibrs_enabled() is expected to return &gt; 1 (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: CLEAR_EXTRA_REGS and extra regs save/restore (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on syscall (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Add back STUFF_RSB to interrupt and error paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm/kaiser: make is_kaiser_pgd reliable (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] revert: mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix pgd freeing in error path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Fix 32-bit program crash with 64-bit kernel on AMD boxes (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: reload spec_ctrl cpuid in all microcode load paths (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: Prevent unwanted speculation without IBRS (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add noibrs noibpb boot options (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Use retpoline for syscall's indirect calls (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] syscall: Clear unused extra registers on 32-bit compatible syscall entrance (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: rescan cpuid after a late microcode update (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: add debugfs ibrs_enabled ibpb_enabled (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: consolidate the spec control boot detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] Remove __cpuinitdata from some data &amp; function (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] KVM/spec_ctrl: allow IBRS to stay enabled in host userland (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: move stuff_RSB in spec_ctrl.h (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Remove STUFF_RSB in error and interrupt code (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Stuff RSB for entry to kernel for non-SMEP platform (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Only set IBPB when the new thread cannot ptrace (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] mm: Set IBPB upon context switch (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS when offlining cpu and re-enable (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] idle: Disable IBRS entering idle and enable it on wakeup (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: implement spec ctrl C methods (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: save IBRS MSR value in save_paranoid for NMI (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: Use IBRS on syscall and interrupts (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: swap rdx with rsi for nmi nesting detection (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: spec_ctrl_pcp and kaiser_enabled_pcp in same cachline (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] spec_ctrl: use per-cpu knob instead of ALTERNATIVES for ibpb and ibrs (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] enter: MACROS to set/clear IBRS and set IBPB (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: add SPEC_CTRL to MSR and CPUID lists (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] svm: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] svm: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: add MSR_IA32_SPEC_CTRL and MSR_IA32_PRED_CMD (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] vmx: Set IBPB when running a different VCPU (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [kvm] x86: clear registers on VM exit (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] [kvm] Pad RSB on VM transition (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [security] Add SPEC_CTRL Kconfig option (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu/AMD: Control indirect branch predictor when SPEC_CTRL not available (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Report presence of IBPB and IBRS control (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] feature: Enable the x86 feature to control Speculation (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Provide get_scattered_cpuid_leaf() (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpuid: Cleanup cpuid_regs definitions (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] microcode: Share native MSR accessing variants (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] nop: Make the ASM_NOP* macros work from assembly (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] cpu: Clean up and unify the NOP selection infrastructure (Waiman Long) [1519797 1519796] {CVE-2017-5715}
- [x86] entry: Further simplify the paranoid_exit code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Remove trampoline check from paranoid entry path (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Don't switch to trampoline stack in paranoid_exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Simplify trampoline stack restore code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [misc] locking/barriers: prevent speculative execution based on Coverity scan results (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] udf: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [fs] prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [scsi] qla2xxx: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] p54: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [netdrv] carl9170: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [media] uvcvideo: prevent speculative execution (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Remove now unused definition of MFENCE_RDTSC feature (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] cpu/AMD: Make the LFENCE instruction serialized (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [kernel] locking/barriers: introduce new memory barrier gmb() (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Fix typo preventing msr_set/clear_bit from having an effect (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] Add another set of MSR accessor functions (Waiman Long) [1519787 1519789] {CVE-2017-5753}
- [x86] mm/kaiser: Replace kaiser with kpti to sync with upstream (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map the trace idt tables in userland shadow pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add "kaiser" and "nokaiser" boot options (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: fix RESTORE_CR3 crash in kaiser_stop_machine (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use stop_machine for enable/disable knob (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: use atomic ops to poison/unpoison user pagetables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use invpcid to flush the two kaiser PCID AISD (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use two PCID ASIDs optimize the TLB during enter/exit kernel (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stop patching flush_tlb_single (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: If INVPCID is available, use it to flush global mappings (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: use PCID feature to make user and kernel switches faster (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/64: Initialize CR4.PCIDE early (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add a 'noinvpcid' boot option to turn off INVPCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Add the 'nopcid' boot option to turn off PCID (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: validate trampoline stack (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] entry: Move SYSENTER_stack to the beginning of struct tss_struct (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: isolate the user mapped per cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: selective boot time defaults (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser/xen: Dynamically disable KAISER when running under Xen PV (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add Kconfig (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: avoid false positives during non-kaiser pgd updates (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Respect disabled CPU features (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] kaiser/mm: trampoline stack comments (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: stack trampoline (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: re-enable vsyscalls (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow to build KAISER with KASRL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow KAISER to be enabled/disabled at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: un-poison PGDs at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add a function to check for KAISER being enabled (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add debugfs file to turn KAISER on/off at runtime (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: disable native VSYSCALL (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map virtually-addressed performance monitoring buffers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add kprobes text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map trace interrupt entry (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map entry stack per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: map dynamically-allocated LDTs (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: make sure static PGDs are 8k in size (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: allow NX poison to be set in p4d/pgd (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: unmap kernel from userspace page tables (core patch) (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: mark per-cpu data structures required for entry/exit (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: introduce user-mapped per-cpu areas (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: add cr3 switches to entry code (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: remove scratch registers (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: prepare assembly for entry/exit CR3 switching (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/kaiser: Disable global pages by default with KAISER (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Document X86_CR4_PGE toggling behavior (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm/tlb: Make CR4-based TLB flushes more robust (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Do not set _PAGE_USER for init_mm page tables (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] increase robusteness of bad_iret fixup handler (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] mm: Check if PUD is large when validating a kernel address (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [x86] Separate out entry text section (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/const.h: Add _BITUL() and _BITULL() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] linux/mmdebug.h: add VM_WARN_ON() and VM_WARN_ON_ONCE() (Waiman Long) [1519799 1519802] {CVE-2017-5754}
- [include] stddef.h: Move offsetofend() from vfio.h to a generic kernel header (Waiman Long) [1519799 1519802] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.24.1.el6]" date="1520942400">- [kernel] sched/core: Rework rq-&gt;clock update skips (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1551475 1212959]
- [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1550103 1532167]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.25.1.el6]" date="1521460800">- [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1557896 1535024]
- [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520818 1520817] {CVE-2017-8824}
- [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447640 1447641] {CVE-2017-7645}
- [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1552706 1437991]
- [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1551471 1495167]
- [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1551471 1495167]
- [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1540481 1538340]
- [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1538654 1408108]
- [s390] fix transactional execution control register handling (Hendrik Brueckner) [1538591 1520862]
- [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1538586 1518669]
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [net] netfilter: xt_TCPMSS: add more sanity tests on tcph-&gt;doff (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519627 1519626] {CVE-2017-1000410}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
</package>
<package pkgid="dd263d755844974987f2d13f914dc964274abb11b7eb43048bee4c05b059c987" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.1.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-690.el6]" date="1486382400">- [drm] core: Do not preserve framebuffer on rmfb, v4 (Rob Clark) [1405267]
- [scsi] mpt3sas: Fix for block device of raid exists even after deleting raid disk (Tomas Henzl) [1416552]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
</package>
<package pkgid="2404992e8d36071b7f2ea536b9eeddef3cff3f00284a299747fd07b598f55dd1" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.3.2.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-691.el6]" date="1486468800">- [net] tcp: correct memory barrier usage in tcp_check_space() (Oleg Nesterov) [1386136]
- [fs] epoll: prevent missed events on EPOLL_CTL_MOD (Oleg Nesterov) [1386136]
- [acpi] acpica: Fix regression in FADT revision checks (Lenny Szubowicz) [1418339]
- [net] ipv6: stop sending PTB packets for MTU &lt; 1280 (Hannes Frederic Sowa) [1415931] {CVE-2016-10142}
- [net] fix dst_ops_extend leaks (Sabrina Dubroca) [1399633]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-692.el6]" date="1486728000">- [fs] gfs2: Limit number of transaction blocks requested for truncates (Robert S Peterson) [1401058]
- [fs] revert "sunrpc: make AF_LOCAL connect synchronous" (Benjamin Coddington) [1420044]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-693.el6]" date="1486814400">- [netdrv] sfc: Add efx_nic member with fixed netdev features (Jarod Wilson) [1419396]
- [netdrv] sfc: Take mac_lock before calling efx_ef10_filter_table_probe (Jarod Wilson) [1419396]
- [netdrv] sfc: Fix VLAN filtering feature if vPort has VLAN_RESTRICT flag (Jarod Wilson) [1419396]
- [netdrv] sfc: clean fallbacks between promisc/normal in efx_ef10_filter_sync_rx_mode (Jarod Wilson) [1419396]
- [netdrv] sfc: support cascaded multicast filters (Jarod Wilson) [1419396]
- [netdrv] sfc: Make failed filter removal less noisy (Jarod Wilson) [1410750]
- [netdrv] sfc: re-factor efx_ef10_filter_sync_rx_mode() (Jarod Wilson) [1410750]
- [netdrv] sfc: refactor debug-or-warnings printks (Jarod Wilson) [1410750]
- [net] implement netif_cond_dbg macro (Jarod Wilson) [1410750]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-694.el6]" date="1486987200">- [fs] posix_acl: Clear SGID bit when setting file permissions (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [fs] switch posix_acl_equiv_mode() to umode_t * (Andreas Grunbacher) [1371252] {CVE-2016-7097}
- [perf] sched latency: Fix thread pid reuse issue (Jiri Olsa) [1400743]
- [fs] ext4: fix races of writeback with punch hole and zero range (Lukas Czerner) [1394786]
- [fs] ext4: validate s_reserved_gdt_blocks on mount (Lukas Czerner) [1394786]
- [fs] ext4: release bh in make_indexed_dir (Lukas Czerner) [1394786]
- [fs] ext4: reinforce check of i_dtime when clearing high fields of uid and gid (Lukas Czerner) [1394786]
- [fs] ext4: validate that metadata blocks do not overlap superblock (Lukas Czerner) [1394786]
- [fs] ext4: short-cut orphan cleanup on error (Lukas Czerner) [1394786]
- [fs] ext4: fix reference counting bug on block allocation error (Lukas Czerner) [1394786]
- [fs] ext4: check for extents that wrap around (Lukas Czerner) [1394786]
- [fs] ext4: silence UBSAN in ext4_mb_init() (Lukas Czerner) [1394786]
- [fs] ext4: address UBSAN warning in mb_find_order_for_block() (Lukas Czerner) [1394786]
- [fs] ext4: clean up error handling when orphan list is corrupted (Lukas Czerner) [1394786]
- [fs] ext4: fix hang when processing corrupted orphaned inode list (Lukas Czerner) [1394786]
- [fs] jbd2: Fix unreclaimed pages after truncate in data=journal mode (Lukas Czerner) [1394786]
- [fs] ext4: Fix handling of extended tv_sec (Lukas Czerner) [1394786]
- [fs] create and use seq_show_option for escaping (Lukas Czerner) [1394786]
- [fs] ext4: replace open coded nofail allocation in ext4_free_blocks() (Lukas Czerner) [1394786]
- [fs] ext4: Introduce EFSBADCRC and EFSCORRUPTED error codes (Lukas Czerner) [1394786]
- [block] ensure request-&gt;part is valid (Jeff Moyer) [1416341]
- [sound] alsa: hda - fix Lewisburg audio issue (Jaroslav Kysela) [1413134]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
</package>
<package pkgid="b40f393d2ef43732a748767eb4afcdaae584863aa0b2d035de4e482e9432eaf2" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.30.1.el6"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.21.1.el6]" date="1516363200">- [fs] sunrpc: Revert "sunrpc: always treat the invalid cache as unexpired" (Thiago Becker) [1535938 1532786]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.22.1.el6]" date="1516881600">- [mm] add cpu_relax() to "dont return 0 too early" patch (Ian Kent) [1527811 988988]
- [mm] don't return 0 too early from find_get_pages() (Ian Kent) [1527811 988988]
- [crypto] cryptd: Add cryptd_max_cpu_qlen module parameter (Jon Maxwell) [1527802 1503322]
- [powerpc] spinlock: add gmb memory barrier (Mauricio Oliveira) [1531720 1538543]
- [powerpc] Prevent Meltdown attack with L1-D$ flush (Mauricio Oliveira) [1531720 1538543]
- [s390] vtime: turn BP on when going idle (Hendrik Brueckner) [1532733 1538542]
- [s390] cpuinfo: show facilities as reported by stfle (Hendrik Brueckner) [1532733 1538542]
- [s390] kconfigs: turn off SHARED_KERNEL support for s390 (Hendrik Brueckner) [1532733 1538542]
- [s390] add ppa to system call and program check path (Hendrik Brueckner) [1532733 1538542]
- [s390] spinlock: add gmb memory barrier (Hendrik Brueckner) [1532733 1538542]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532733 1538542]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.23.1.el6]" date="1518264000">- [scsi] avoid a permanent stop of the scsi device's request queue (Ewan Milne) [1519857 1513455]
- [x86] retpoline/hyperv: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Upgrade GCC retpoline warning to an error for brew builds (Waiman Long) [1543022 1535645]
- [x86] retpoline: Don't use kernel indirect thunks in vsyscalls (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Add a read-only retp_enabled debugfs knob (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: detect unretpolined modules (Waiman Long) [1543022 1535645]
- [x86] retpoline/ACPI: Convert indirect jump in wakeup code (Waiman Long) [1543022 1535645]
- [x86] retpoline/efi: Convert stub indirect calls &amp; jumps (Waiman Long) [1543022 1535645]
- [watchdog] hpwdt: remove indirect call in drivers/watchdog/hpwdt.c (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: cleanup __ptrace_may_access (Waiman Long) [1543022 1535645]
- [x86] bugs: Drop one "mitigation" from dmesg (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: fix ptrace IBPB optimization (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Avoid returns in IBRS-disabled regions (Waiman Long) [1543022 1535645]
- [x86] spectre/meltdown: avoid the vulnerability directory to weaken kernel security (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Update spec_ctrl.txt and kernel-parameters.txt (Waiman Long) [1543022 1535645]
- [x86] Use IBRS for firmware update path (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: stuff RSB on context switch with SMEP enabled (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: use upstream RSB stuffing function (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibrs_enabled=3 (ibrs_user) (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Integrate IBRS with retpoline (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: print features changed by microcode loading (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: refactor the init and microcode loading paths (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move initialization of X86_FEATURE_IBPB_SUPPORT (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove SPEC_CTRL_PCP_IBPB bit (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibrs_enabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add ibp_disabled variable (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: add X86_FEATURE_IBP_DISABLE (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove IBP disable for AMD model 0x16 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove performance measurements from documentation (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: make ipbp_enabled read-only (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: remove ibpb_enabled=2 mode (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: Enable spec_ctrl functions for x86-32 (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: move vmexit rmb in the last branch before IBRS (Waiman Long) [1543022 1535645]
- [x86] spec_ctrl: satisfy the barrier like semantics of IBRS (Waiman Long) [1543022 1535645]
- [x86] spectre_v1: Mark it as mitigated (Waiman Long) [1543022 1535645]
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1543022 1535645]
- [x86] mce: Make machine check speculation protected (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add LFENCE to the retpoline/RSB filling RSB macros (Waiman Long) [1543022 1535645]
- [x86] retpoline: Fill return stack buffer on vmexit (Waiman Long) [1543022 1535645]
- [x86] retpoline/irq32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/checksum32: Convert assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] retpoline/entry: Convert entry assembler indirect (Waiman Long) [1543022 1535645]
- [x86] retpoline/crypto: Convert crypto assembler indirect jumps (Waiman Long) [1543022 1535645]
- [x86] spectre: Add boot time option to select Spectre v2 mitigation (Waiman Long) [1543022 1535645]
- [x86] retpoline: Add initial retpoline support (Waiman Long) [1543022 1535645]
- [x86] cpu: Implement CPU vulnerabilites sysfs functions (Waiman Long) [1543022 1535645]
- [base] sysfs/cpu: Add vulnerability folder (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_SPECTRE_V[12] (Waiman Long) [1543022 1535645]
- [x86] pti: Add the pti= cmdline option and documentation (Waiman Long) [1543022 1535645]
- [x86] cpufeatures: Add X86_BUG_CPU_MELTDOWN (Waiman Long) [1543022 1535645]
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1543022 1535645]
- [x86] cpu: Expand cpufeature facility to include cpu bugs (Waiman Long) [1543022 1535645]
- [x86] cpu: Merge bugs.c and bugs_64.c (Waiman Long) [1543022 1535645]
- [x86] cpu/intel: Introduce macros for Intel family numbers (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add missing '\n' at end of ALTERNATIVE inline asm (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix alt_max_short macro to really be a max() (Waiman Long) [1543022 1535645]
- [x86] asm: Make asm/alternative.h safe from assembly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Document macros (Waiman Long) [1543022 1535645]
- [x86] alternatives: Fix ALTERNATIVE_2 padding generation properly (Waiman Long) [1543022 1535645]
- [x86] alternatives: Add instruction padding (Waiman Long) [1543022 1535645]
- [x86] alternative: Add header guards to &lt;asm/alternative-asm.h&gt; (Waiman Long) [1543022 1535645]
- [x86] alternative: Use .pushsection/.popsection (Waiman Long) [1543022 1535645]
- [x86] copy_user_generic: Optimize copy_user_generic with CPU erms feature (Waiman Long) [1543022 1535645]
- [x86] Make .altinstructions bit size neutral (Waiman Long) [1543022 1535645]
- [x86] pti: Rework the trampoline stack switching code (Waiman Long) [1543022 1535645]
- [x86] pti: Disable interrupt before trampoline stack switching (Waiman Long) [1543022 1535645]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.24.1.el6]" date="1520942400">- [kernel] sched/core: Rework rq-&gt;clock update skips (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Remove useless code in yield_to() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched: Set skip_clock_update in yield_task_fair() (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] sched, rt: Update rq clock when unthrottling of an otherwise idle CPU (Lauro Ramos Venancio) [1551475 1212959]
- [kernel] lockdep: Fix lock_is_held() on recursion (Lauro Ramos Venancio) [1551475 1212959]
- [net] bonding: discard lowest hash bit for 802.3ad layer3+4 (Hangbin Liu) [1550103 1532167]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.25.1.el6]" date="1521460800">- [net] packet: Allow packets with only a header (but no payload) (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet too small warning match condition (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: bail out of packet_snd() if L2 header creation fails (Lorenzo Bianconi) [1557896 1535024]
- [net] packet: make packet_snd fail on len smaller than l2 header (Lorenzo Bianconi) [1557896 1535024]
- [net] dccp: use-after-free in DCCP code (Stefano Brivio) [1520818 1520817] {CVE-2017-8824}
- [fs] nfsd: check for oversized NFSv2/v3 arguments (J. Bruce Fields) [1447640 1447641] {CVE-2017-7645}
- [netdrv] be2net: Fix UE detection logic for BE3 (Ivan Vecera) [1552706 1437991]
- [x86] skip check for spurious faults for non-present faults (Daniel Vacek) [1551471 1495167]
- [x86] mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds() (Daniel Vacek) [1551471 1495167]
- [scsi] lpfc: Null pointer dereference when log_verbose is set to 0xffffffff (Dick Kennedy) [1540481 1538340]
- [mm] prevent concurrent unmap_mapping_range() on the same inode (Miklos Szeredi) [1538654 1408108]
- [s390] fix transactional execution control register handling (Hendrik Brueckner) [1538591 1520862]
- [netdrv] bnx2x: prevent crash when accessing PTP with interface down (Michal Schmidt) [1538586 1518669]
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [v4l] media: v4l2-compat-ioctl32.c: refactor compat ioctl32 logic (Jarod Wilson) [1548429 1548432] {CVE-2017-13166}
- [net] netfilter: xt_TCPMSS: add more sanity tests on tcph-&gt;doff (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: fix handling of malformed TCP header and options (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] netfilter: xt_TCPMSS: SYN packets are allowed to contain data (Florian Westphal) [1543089 1543091] {CVE-2017-18017}
- [net] bluetooth: Prevent uninitialized data (Gopal Tiwari) [1519627 1519626] {CVE-2017-1000410}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.26.1.el6]" date="1522238400">- [s390] qeth: check not more than 16 SBALEs on the completion queue (Hendrik Brueckner) [1557477 1520860]
- [x86] pti: Disable kaiser_add_mapping if X86_FEATURE_NOPTI (Waiman Long) [1561441 1557562] {CVE-2017-5754}
- [x86] irq/ioapic: Check for valid irq_cfg pointer in smp_irq_move_cleanup_interrupt (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] efi/64: Fix potential PTI data corruption problem (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Fix machine check with PTI on old AMD CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/mm: Enable PAGE_GLOBAL if not affected by Meltdown (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] retpoline: Avoid retpolines for built-in __init functions (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] kexec/32: Allocate 8k PGD for PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl: Patch out lfence on old 32-bit CPUs (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cpufeature: Blacklist SPEC_CTRL/PRED_CMD on early Spectre v2 microcodes (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Enable IBRS processing on kernel entries &amp; exits (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] spec_ctrl/32: Stuff RSB on kernel entry (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Allow CONFIG_PAGE_TABLE_ISOLATION for x86_32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti/32: Add a PAE specific version of __pti_set_user_pgd (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/dump_pagetables: Support PAE page table dumping (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Use separate kernel PMDs for user page-table (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] mm/pae: Populate valid user PGD entries (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Enable x86-32 for kaiser.c (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Disable PCID handling in x86-32 TLB flushing code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Disable user PGD poisoning for PAE (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move more PTI functions out of pgtable_64.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable: Move pgdp kernel/user conversion functions to pgtable.h (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/32: Allocate 8k page-tables when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pgtable/pae: Unshare kernel PMDs when PTI is enabled (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle debug exception similar to NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switch to non-NMI entry/exit points (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Add PTI cr3 switches to NMI handler code (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Introduce SAVE_ALL_NMI and RESTORE_ALL_NMI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enable the use of trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Change INT80 to be an interrupt gate (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Handle Entry from Kernel-Mode on Entry-Stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Leave the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Enter the kernel via trampoline stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Restore segments before int registers (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Split off return-to-kernel path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Unshare NMI return path (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Put ESPFIX code into a macro (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Load task stack from x86_tss.sp1 in SYSENTER handler (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Rename TSS_sysenter_sp0 to TSS_entry_stack (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] pti: Add X86_FEATURE_NOPTI to permanently disable PTI (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] entry/32: Simplify and fix up the SYSENTER stack #DB/NMI fixup (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] doublefault: Set the right gs register for doublefault (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: int80 must not clobber r12-15 (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] syscall: change ia32_syscall() to create the full register frame in ia32_do_call() (Waiman Long) [1553283 1550599] {CVE-2017-5754}
- [x86] cve: Make all Meltdown/Spectre percpu variables available to x86-32 (Waiman Long) [1553283 1550599] {CVE-2017-5754}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.27.1.el6]" date="1524225600">- [mm] account skipped entries to avoid looping in find_get_pages (Dave Wysochanski) [1565989 1559386]
- [x86] pti/32: Don't use trampoline stack on Xen PV (Waiman Long) [1568327 1562725]
- [x86] pti: Use boot_cpu_has(X86_FEATURE_PTI_SUPPORT) for early call sites (Waiman Long) [1568327 1562725]
- [x86] pti: Set X86_FEATURE_PTI_SUPPORT early (Waiman Long) [1568327 1562725]
- [x86] pti: Rename X86_FEATURE_NOPTI to X86_FEATURE_PTI_SUPPORT (Waiman Long) [1568327 1562725]
- [x86] pti/32: Fix setup_trampoline_page_table() bug (Waiman Long) [1568327 1562725]
- [x86] entry: Remove extra argument in call instruction (Waiman Long) [1568332 1562552]
- [x86] syscall: Fix ia32_ptregs handling bug in 64-bit kernel (Waiman Long) [1568332 1562552]
- [x86] efi/64: Align efi_pgd on even page boundary (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Use separate kernel PMDs for user page-table" (Waiman Long) [1568535 1558845]
- [x86] pgtable/pae: Revert "Unshare kernel PMDs when PTI is enabled" (Waiman Long) [1568535 1558845]
- [x86] mm: Dump both kernel &amp; user page tables at fault (Waiman Long) [1568535 1558845]
- [x86] entry/32: Fix typo in PARANOID_EXIT_TO_KERNEL_MODE (Waiman Long) [1568535 1558845]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.28.1.el6]" date="1524744000">- [x86] entry/64: Don't use IST entry for #BP stack (Waiman Long) [1567078 1567079] {CVE-2018-8897}
- [x86] xen: do not use xen_info on HVM, set pv_info name to "Xen HVM" (Vitaly Kuznetsov) [1569141 1568241]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.29.1.el6]" date="1526299200">- [x86] x86/spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Rename _RDS to _SSBD (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [kernel] prctl: Add speculation control prctls (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/kvm: Expose the RDS bit to the guest (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs/AMD: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Expose the /sys/../spec_store_bypass and X86_BUG_SPEC_STORE_BYPASS (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] cpu/intel: Knight Mill and Moorefield update to intel-family.h (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/speculation: Update Speculation Control microcode blacklist (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Clean up Spectre v2 related CPUID flags (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add AMD feature bits for Speculation Control (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add Intel feature bits for Speculation (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpufeatures: Add CPUID_7_EDX CPUID leaf (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] x86/cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] Extend RH cpuinfo to 10 extra words (Waiman Long) [1566893 1566899] {CVE-2018-3639}
- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573176 1572487]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [2.6.32-696.30.1.el6]" date="1526644800">- [x86] x86/kvm: fix CPUID_7_EDX (word 18) mask (Jan Stancek) [1566893 1566899] {CVE-2018-3639}</changelog>
</package>
<package pkgid="718bfd7dd791c440d27716f51b2d42dc0dfed27b65900b2796cd915ce618e47b" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="2.6.32" rel="696.6.3.el6"/>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-695.el6]" date="1487246400">- [block] nvme: Don't poll device being removed (David Milburn) [1422521]</changelog>
  <changelog author="Phillip Lougher &lt;plougher@redhat.com&gt; [2.6.32-696.el6]" date="1487592000">- [net] dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Hannes Frederic Sowa) [1424628] {CVE-2017-6074}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.1.1.el6]" date="1490097600">- [block] fix use-after-free in seq file (Denys Vlasenko) [1418548 1418549] {CVE-2016-7910}
- [firmware] Replacing the chelsio firmware (t4,t5)fw-1.15.37.0 (Sai Vemuri) [1433865 1425749]
- [kernel] genirq: Avoid taking sparse_irq_lock for non-existent irqs (Dave Wysochanski) [1428106 1360930]
- [tty] n_hdlc: get rid of racy n_hdlc.tbuf (Herton R. Krzesinski) [1429917 1429918] {CVE-2017-2636}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.2.1.el6]" date="1490702400">- [sched] fair: Rework throttle_count sync (Jiri Olsa) [1436241 1250762]
- [sched] fair: Reorder cgroup creation code (Jiri Olsa) [1436241 1250762]
- [sched] fair: Initialize throttle_count for new task-groups lazily (Jiri Olsa) [1436241 1250762]
- [sched] fair: Do not announce throttled next buddy in dequeue_task_fair() (Jiri Olsa) [1436241 1250762]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.3.1.el6]" date="1492689600">- [netdrv] be2net: Fix endian issue in logical link config command (Ivan Vecera) [1442979 1436527]
- [scsi] lpfc: update for rhel6 11.0.0.6 (Maurizio Lombardi) [1439636 1429881]
- [scsi] lpfc: The lpfc driver does not issue RFF_ID and RFT_ID in the correct sequence (Maurizio Lombardi) [1439636 1429881]
- [x86] vmalloc_sync: avoid syncing vmalloc area on crashing cpu (Pingfan Liu) [1443499 1146727]
- [kernel] audit: plug cred memory leak in audit_filter_rules (Richard Guy Briggs) [1443234 1434560]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430577 1430578] {CVE-2017-6214}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.4.1.el6]" date="1493380800">- [fs] xfs: handle array index overrun in xfs_dir2_leaf_readbuf() (Carlos Maiolino) [1445179 1440361]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.5.1.el6]" date="1495022400">- [fs] sunrpc: Ensure that we wait for connections to complete before retrying (Dave Wysochanski) [1450850 1448170]
- [net] ipv6: check raw payload size correctly in ioctl (Jamie Bainbridge) [1450870 1441909]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.1.el6]" date="1496404800">- [netdrv] ixgbe: fix setup_fc for x550em (Ken Cox) [1457347 1442030]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup (J. Bruce Fields) [1449274 1446755] {CVE-2017-7895}
- [scsi] libfc: quarantine timed out xids (Chris Leech) [1455550 1431440]
- [fs] nfsv4: fix getacl ERANGE for some ACL buffer sizes (J. Bruce Fields) [1449096 869942]
- [fs] nfsv4: fix getacl head length estimation (J. Bruce Fields) [1449096 869942]
- [mm] hugetlb: check for pte NULL pointer in page_check_address() (Herton R. Krzesinski) [1444351 1431508]</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.2.el6]" date="1496836800">- [mm] enlarge stack guard gap (Larry Woodman) [1452729 1452730] {CVE-2017-1000364 CVE-2017-1000366}</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; [2.6.32-696.6.3.el6]" date="1498824000">- [mm] allow JVM to implement its own stack guard pages (Larry Woodman) [1466667 1464237]
- [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]
- Revert: [mm] enlarge stack guard gap (Larry Woodman) [1466667 1464237]</changelog>
</package>
<package pkgid="cccc80eb546f0a38908c647b471ef33b8bc8b406462dd13ef7564639dfc96136" name="python-rhsm-debuginfo" arch="i686">
  <version epoch="0" ver="1.18.7" rel="1.el6_9"/>
  <changelog author="Darin Lively &lt;darinlively@gmail.com&gt; 1.17.3-0" date="1463054400">- Added basic SLES build compatibilty</changelog>
  <changelog author="Vritant Jain &lt;vrjain@redhat.com&gt; 1.17.4-1" date="1466510400">- 1346417: Allow users to set socket timeout. (awood@redhat.com)
- Fix Flake8 Errors (bcourt@redhat.com)
- Add Fedora 24 to the branch list. (awood@redhat.com)
- Added basic SLES compatibilty. Tested against SLES 11 SP3
  (darinlively@gmail.com)</changelog>
  <changelog author="Vritant Jain &lt;vrjain@redhat.com&gt; 1.17.5-1" date="1467288000">- 1104332: Separate out the rhsm certs into a separate RPM (vrjain@redhat.com)</changelog>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.18.1-1" date="1468584000">- Bump version to 1.18 (vrjain@redhat.com)</changelog>
  <changelog author="Alex Wood &lt;awood@redhat.com&gt; 1.18.2-1" date="1474027200">- 1176219: Raise ProxyException in Restlib (khowell@redhat.com)
- 1367243: Handle RestlibException 404 in refresh (khowell@redhat.com)
- 1367243: Fix 404 check in regen entitlement funcs (khowell@redhat.com)
- Revert "1367243: Fix 404 check in regen entitlement funcs"
  (khowell@redhat.com)
- 1367243: Fix 404 check in regen entitlement funcs (khowell@redhat.com)
- Ensure both cert regen methods succeed despite BadStatusLine from server
  (csnyder@redhat.com)
- Update fix to include BadStatusLine responses from the server
  (csnyder@redhat.com)
- 1366301: Entitlement regeneration no longer propagates server errors
  (crog@redhat.com)
- 1365280: Update default_log_level to INFO (csnyder@redhat.com)
- 1334916: Add rhsm.conf logging section defaults (csnyder@redhat.com)
- 1360909: Added functionality for regenerating entitlement certificates
  (crog@redhat.com)
- 1315901: Exception handling for PEM cert read (wpoteat@redhat.com)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.3-1" date="1476619200">- 1320371: Fix case of retry-after header handling (khowell@redhat.com)
- Fedora 22 is end-of-life. (awood@redhat.com)
- 1311429: Honor no_proxy environment variable (khowell@redhat.com)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.4-1" date="1476619201">- Added 6.9 releaser (adarshvritant@gmail.com)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.5-1" date="1480075200">- 1396405: Use an int for port on connections (csnyder@redhat.com)
- 1393010: Correlate request ID, method and handler in logs
  (csnyder@redhat.com)
- 1394776: Fix port, insecure, and handler options on M2Crypto wrapper
  (csnyder@redhat.com)
- 1394351: Add httplib constants to m2cryptohttp (khowell@redhat.com)
- 1390688: Add missing socket import (khowell@redhat.com)
- Reduce usage of m2crypto (#184) (kevin@kahowell.net)</changelog>
  <changelog author="Vritant Jain &lt;adarshvritant@gmail.com&gt; 1.18.6-1" date="1481284800">- 1400719: Proxy host not available for release command (wpoteat@redhat.com)
- 1397201: Expose classes in m2crypto wrapper (khowell@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 1.18.7-1" date="1496664000">- 1435475: Support older versions of M2Crypto (awood@redhat.com)</changelog>
</package>
<package pkgid="a8e4233ecfeeadc8f399c50b656112014c40c9b326d2b624623a7cdb76884ee6" name="rpcbind-debuginfo" arch="i686">
  <version epoch="0" ver="0.2.0" rel="13.el6_9.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-6" date="1279022400">- Made initscript LSB compliant (bz 578415)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-7" date="1279195200">- More initscript LSB compliant updates (bz 578415)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-8" date="1281960000">- Moved caching files to /var/cache (bz 599705)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-9" date="1331208000">- Drop supplemental groups (bz 726954)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-10" date="1345464000">- Make is_loopback check more permissive (bz 731542)
- Removed the rpcbind(3) reference in the man page (bz 813898)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-11" date="1350993600">- Stop rpcbind from "swallowing" broadcast RPC replies (bz 864056)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-12" date="1447416000">- Fix memory corruption in PMAP_CALLIT code (bz 1186933)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-13" date="1467028800">- Soft static allocate rpc uid/gid (bz 1300533)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-13_9" date="1495108800">- Fix for CVE-2017-8779 (bz 1449461)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-13_9.1" date="1496145600">- Stop freeing static memory (bz 1458240)</changelog>
</package>
<package pkgid="fa91b909f91d10a0983d054d96f469a657bd83bfaabf4c21aa761175a81d012d" name="rpcbind-debuginfo" arch="i686">
  <version epoch="0" ver="0.2.0" rel="13.el6_9"/>
  <changelog author="Jeff Layton &lt;jlayton@redhat.com&gt; - 0.2.0-5" date="1275566400">- set SO_REUSEADDR on NC_TPI_COTS sockets (bz 597356)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-6" date="1279022400">- Made initscript LSB compliant (bz 578415)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-7" date="1279195200">- More initscript LSB compliant updates (bz 578415)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-8" date="1281960000">- Moved caching files to /var/cache (bz 599705)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-9" date="1331208000">- Drop supplemental groups (bz 726954)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-10" date="1345464000">- Make is_loopback check more permissive (bz 731542)
- Removed the rpcbind(3) reference in the man page (bz 813898)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-11" date="1350993600">- Stop rpcbind from "swallowing" broadcast RPC replies (bz 864056)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-12" date="1447416000">- Fix memory corruption in PMAP_CALLIT code (bz 1186933)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-13" date="1467028800">- Soft static allocate rpc uid/gid (bz 1300533)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; - 0.2.0-13_9" date="1495108800">- Fix for CVE-2017-8779 (bz 1449461)</changelog>
</package>
<package pkgid="8a5302b4bf14cd39258a72fea079b53f991a2142a4ad3550e9f8a6ee6faa240f" name="rsh-debuginfo" arch="i686">
  <version epoch="0" ver="0.17" rel="64.el6_9.1"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; 0.17-56" date="1249992000">- remove URL from rexec source, it is no longer publicly available</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 0.17-57" date="1250856000">- rebuilt with new audit</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 0.17-58" date="1253102400">- use password-auth common PAM configuration instead of system-auth</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.17-59" date="1263384000">- rebuild against new audit</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.17-60" date="1265716800">- merge review related fixes (#226379)
- remove unused patches
  - netkit-rsh-0.16-pamfix.patch
  - netkit-rsh-0.16-jbj2.patch
  - netkit-rsh-0.16-jbj3.patch</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.17-61" date="1399291200">- remove unneeded call to setpwnet and getpwent (#749283)
- use upper bound for cmdbuflen (#802367)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.17-62" date="1399464000">- disable strict aliasing optimizations (#1094360)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.17-63" date="1400500800">- close pam session properly (#1098955)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.17-64" date="1400500801">- include missing header file</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 0.17-64.1" date="1494849600">- Resolves: #1450821 - rlogin fails to connect rsh-server after updating util-linux-ng from version 2.17.2-12.18.el6 to 2.17.2-12.24.el6</changelog>
</package>
<package pkgid="292ea7172f4c2385b04b5482af0b8378d733861ead8bebc2d10f9398891abc80" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="3.6.23" rel="42.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-32" date="1460376000">- related: #1322687 - Update manpages</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-33" date="1460462400">- related: #1322687 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-34" date="1461240000">- resolves: #1327697 - Fix netlogon credential checks
- resolves: #1327746 - Fix dcerpc trailer verificaton</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-35" date="1464091200">- resolves: #1282289 - Fix winbind memory leak with each cached creds login</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-37" date="1475668800">- resolves: #1380151 - Fix memory leak in idmap_ad module
- resolves: #1333561 - Fix smbclient connection issues to DFS shares
- resolves: #1372611 - Allow ntlmsssp session key setup without signing
                       (Workaround for broken NetApp and EMC NAS)</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-38" date="1478174400">- resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                       empty list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
</package>
<package pkgid="74cac9d730bf1688414f0a3e73aa091755386518df20041812d9428edb79dfd2" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="3.6.23" rel="43.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-33" date="1460462400">- related: #1322687 - Update CVE patchset</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-34" date="1461240000">- resolves: #1327697 - Fix netlogon credential checks
- resolves: #1327746 - Fix dcerpc trailer verificaton</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-35" date="1464091200">- resolves: #1282289 - Fix winbind memory leak with each cached creds login</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-37" date="1475668800">- resolves: #1380151 - Fix memory leak in idmap_ad module
- resolves: #1333561 - Fix smbclient connection issues to DFS shares
- resolves: #1372611 - Allow ntlmsssp session key setup without signing
                       (Workaround for broken NetApp and EMC NAS)</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-38" date="1478174400">- resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                       empty list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
</package>
<package pkgid="a32940a4a563209bd359b26c86101a27abf4478916ec38be29b768e579bbbf1e" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="3.6.23" rel="44.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-34" date="1461240000">- resolves: #1327697 - Fix netlogon credential checks
- resolves: #1327746 - Fix dcerpc trailer verificaton</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-35" date="1464091200">- resolves: #1282289 - Fix winbind memory leak with each cached creds login</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-37" date="1475668800">- resolves: #1380151 - Fix memory leak in idmap_ad module
- resolves: #1333561 - Fix smbclient connection issues to DFS shares
- resolves: #1372611 - Allow ntlmsssp session key setup without signing
                       (Workaround for broken NetApp and EMC NAS)</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-38" date="1478174400">- resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                       empty list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
</package>
<package pkgid="ff33061f29db885e3e9baa072e471bbdd5c3e2ba3800da14d7af42f8ec480f48" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="3.6.23" rel="45.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-35" date="1464091200">- resolves: #1282289 - Fix winbind memory leak with each cached creds login</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-37" date="1475668800">- resolves: #1380151 - Fix memory leak in idmap_ad module
- resolves: #1333561 - Fix smbclient connection issues to DFS shares
- resolves: #1372611 - Allow ntlmsssp session key setup without signing
                       (Workaround for broken NetApp and EMC NAS)</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-38" date="1478174400">- resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                       empty list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="bbe023eae567280590956e613669628ccb2a2b4281d7b7c8ffe621d1d65d552a" name="samba-debuginfo" arch="i686">
  <version epoch="0" ver="3.6.23" rel="46.el6_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-37" date="1475668800">- resolves: #1380151 - Fix memory leak in idmap_ad module
- resolves: #1333561 - Fix smbclient connection issues to DFS shares
- resolves: #1372611 - Allow ntlmsssp session key setup without signing
                       (Workaround for broken NetApp and EMC NAS)</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-38" date="1478174400">- resolves: #1347843 - Fix RPC queryUserList returning NO_MEMORY for
                       empty list</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-39" date="1478606400">- resolves: #1297805 - Fix issues with printer unpublishing from AD</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-40" date="1481889600">- resolves: #1405356 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-41" date="1484740800">- resolves: #1413672 - Auth regression after secret changed</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.23-42" date="1486641600">- resolves: #1428835 - Performance issues with vfs_dirsort and extended
                       attributes</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-43" date="1495108800">- resolves: #1450782 - Fix CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-44" date="1500379200">- resolves: #1471662 - Fix trusted domain handling in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-45" date="1505390400">- resolves: #1491210 - CVE-2017-2619 CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 3.6.24-46" date="1510056000">- resolves: #1511879 - Fix regression of CVE-2017-2619</changelog>
</package>
<package pkgid="a4f6b23a0ef6f3424db1041720ee72f1b1aafaa7769c7df098159d30fa00ee9d" name="samba4-debuginfo" arch="i686">
  <version epoch="0" ver="4.2.10" rel="10.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-1" date="1459771200">- resolves: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-2" date="1459944000">- Remove ldb modules which only needed for DC build
- resolves: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-3" date="1460030400">- Make sure the package owns /var/lib/samba and uses it for cache purposes
- resolves: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
</package>
<package pkgid="d52771d6706614446626b572bce4b1057af5ca7c42018016c028f33fb542eb89" name="samba4-debuginfo" arch="i686">
  <version epoch="0" ver="4.2.10" rel="11.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-2" date="1459944000">- Remove ldb modules which only needed for DC build
- resolves: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-3" date="1460030400">- Make sure the package owns /var/lib/samba and uses it for cache purposes
- resolves: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
</package>
<package pkgid="681f3eb6cb3a9b4d89b1df4639cea480a52c3a99aa56c81404f7bf5f04767e45" name="samba4-debuginfo" arch="i686">
  <version epoch="0" ver="4.2.10" rel="12.el6_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-3" date="1460030400">- Make sure the package owns /var/lib/samba and uses it for cache purposes
- resolves: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-4" date="1460116800">- Fix LDAP SASL handling for arcfour-hmac-md5
- resolves: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-5" date="1460376000">- Fix crash in smb.conf processing
- Related: #1322689</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-6" date="1460462400">- Fix domain member winbind not being able to talk to trusted domains' DCs
- Related: #1322689</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-7" date="1467720000">- resolves: #1351959 - Fix CVE-2016-2119</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.2.10-8" date="1477915200">- Synchronize patches for Samba 4.2.10 with RHEL 7.2.z
- Resolves: #1383685 - Update samba4 to be on par with RHEL 7.2.z</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-9" date="1481889600">- resolves: #1405358 - CVE-2016-2125 CVE-2016-2126</changelog>
  <changelog author="Guenther Deschner &lt;gdeschner@redhat.com&gt; - 4.2.10-10" date="1495108800">- resolves: #1450779 - Security fix for CVE-2017-7494</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-11" date="1505390400">- resolves: #1491212 - CVE-2017-12150 CVE-2017-12163</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.2.10-12" date="1510920000">- resolves: #1514315 - Fix CVE-2017-14746 and CVE-2017-15275</changelog>
</package>
<package pkgid="254c3896c8049792f3cfab6e2ddde03a5a6878594dd55f21e20505daae3aee00" name="scl-utils-debuginfo" arch="i686">
  <version epoch="0" ver="20120927" rel="29.el6_9"/>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-19" date="1405598400">- register and deregister: include bash completion and help</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-20" date="1406894400">- register and deregister: if there is an error registering or deregistering
  one or more collection, skip it but return non-zero return code
- fix the problem with metapackage dependencies when BuildArch is specified</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-21" date="1409054400">- fix an obscure segfault when listing collections on i386
- fix registration to work with slash-ended paths
- add the %scl_dependency_generators macro
- drop recursive ownership of /usr/lib within SCL root</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-22" date="1411646400">- Add execution of register and deregister scripts during registration
  and deregistration if they exist.
- Add capability to make collection nfs mountable using macro nfsmountable.
- removed the dependency generators and all related changes
  (maintainers' demands)</changelog>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com - 20120927-23" date="1412769600">- Modified paths of state and conf files
- Add owning and creating of state and conf files if nfsmountable is defined
- Add printing file names in error messages</changelog>
  <changelog author="Jan Zeleny &lt;jzeleny@redhat.com&gt; - 20120927-24" date="1420545600">- Reflect the state of %nfsmountable macro in collections' rpm macro files</changelog>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20120927-25" date="1422360000">- Creating filelist in build subdirectory instead of build directory.
- Removing filelist before build.</changelog>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20120927-26" date="1423137600">- Remove /scls/ from macros  _sysconfdir, _sharedstatedir and _localstatedir</changelog>
  <changelog author="Lubos Kardos &lt;lkardos@redhat.com&gt; - 20120927-27" date="1426075200">- If macro buildsubdir doesn't exist then replace it with empty string.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 20120927-29" date="1481630400">- fix "scl enable" usage in shebang lines (#1371936)</changelog>
</package>
<package pkgid="4ab13a6dfd08bea8144083e7c1a55295f6c4e4b46cfbcc7be6a4fdd2dd2baf93" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="1.13.3" rel="57.el6_9"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-48" date="1479988800">- Fix a coverity warning
- Related: rhbz#1382395 - sudo: ignore case on case insensitive domains</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-49" date="1480593600">- Require the matching version of ding-libs
- Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-50" date="1481025600">- Related: rhbz#1369921 - Members of nested netgroups configured in IdM
                          cannot be seen by getent on clients</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-51" date="1481112000">- Revert the ding-libs requirement
- Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-52" date="1481284800">- Resolves: rhbz#1393592 - SSH-CERT: always initialize cert_verify_opts</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-53" date="1481630400">- Resolves: rhbz#1400643 - sssd prevents sudo from getting data from LDAP</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-54" date="1481889600">- Apply several more smartcard-related patches.
- Related: rhbz#1300421 - Screen locks and smart card is removed - must
                          show a message to insert the correct smartcard</changelog>
  <changelog author="Lukas Slebodnik &lt;lslebodn@redhat.com&gt; - 1.13.3-55" date="1485518400">- Resolves: rhbz#1415785 - ldap_child does not remove temporary files
                           when it's killed with  SIGTERM</changelog>
  <changelog author="Lukas Slebodnik &lt;lslebodn@redhat.com&gt; - 1.13.3-56" date="1485518401">- Resolves: rhbz#1404697 - SSSD does not skip GPO if no gpcFunctionalityVersion present
- Resolves: rhbz#1374813 - SSSD fails to process GPO from Active Directory</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-57" date="1501156800">- Resolves: rhbz#1473005 - The originalMemberOf attribute disappears from
                           the cache, causing intermittent HBAC issues</changelog>
</package>
<package pkgid="85cbeeda8892f5ef09f68b8d03dc9297707bf9bf7f0347185b84141ad8489a7f" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="1.13.3" rel="58.el6_9"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-49" date="1480593600">- Require the matching version of ding-libs
- Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-50" date="1481025600">- Related: rhbz#1369921 - Members of nested netgroups configured in IdM
                          cannot be seen by getent on clients</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-51" date="1481112000">- Revert the ding-libs requirement
- Related: rhbz#1374813 - SSSD fails to process GPO from Active Directory.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-52" date="1481284800">- Resolves: rhbz#1393592 - SSH-CERT: always initialize cert_verify_opts</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-53" date="1481630400">- Resolves: rhbz#1400643 - sssd prevents sudo from getting data from LDAP</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-54" date="1481889600">- Apply several more smartcard-related patches.
- Related: rhbz#1300421 - Screen locks and smart card is removed - must
                          show a message to insert the correct smartcard</changelog>
  <changelog author="Lukas Slebodnik &lt;lslebodn@redhat.com&gt; - 1.13.3-55" date="1485518400">- Resolves: rhbz#1415785 - ldap_child does not remove temporary files
                           when it's killed with  SIGTERM</changelog>
  <changelog author="Lukas Slebodnik &lt;lslebodn@redhat.com&gt; - 1.13.3-56" date="1485518401">- Resolves: rhbz#1404697 - SSSD does not skip GPO if no gpcFunctionalityVersion present
- Resolves: rhbz#1374813 - SSSD fails to process GPO from Active Directory</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-57" date="1501156800">- Resolves: rhbz#1473005 - The originalMemberOf attribute disappears from
                           the cache, causing intermittent HBAC issues</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.13.3-58" date="1515758400">- Resolves: rhbz#1534618 - ABRT crash - /usr/libexec/sssd/sssd_nss
                           [rhel-6.9.z]</changelog>
</package>
<package pkgid="78d6e9a7f1647b573a195d250c1c55e1e768ad9992526dfee3e0ab38693bb26e" name="sudo-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.6p3" rel="28.el6_9"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-21" date="1449576000">- RHEL-6.8 erratum
  - fixed ldap's and sssd's sudoOption value and remove quotes
  - fixed ldap's and sssd's sudoOption whitespaces parse problem
  Resolves: rhbz#1144422
  Resolves: rhbz#1279447</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-21" date="1450094400">- RHEL-6.8 erratum
  - search also by user id when fetching rules from LDAP
  Resolves: rhbz#1135531</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-21" date="1450180800">- RHEL-6.8 erratum
  - fixed sssd's detection of user with zero rules
  Resolves: rhbz#1220480</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-22" date="1453291200">- RHEL-6.8 erratum
  - fixed potential getcwd failure, resulting in Null pointer exception 
  Resolves: rhbz#1284886</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-23" date="1456401600">- RHEL-6.8 erratum
  - fixed handling of closefrom_override defaults option
  Resolves: rhbz#1309976</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-24" date="1456833600">- RHEL-6.8 erratum
  - fixed a bug causing that non-root users can list privileges of
    other users
  Resolves: rhbz#1312481</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.6p3-25" date="1475755200">- RHEL-6.9 erratum
  - Fix "sudo -l command" in the LDAP and SSS backends when the command
    is not allowed.
  Resolves: rhbz#1374410
  - Fix sudo log file wrong group ownership
  Resolves: rhbz#1330001
  - Fix sudo parsing sudoers with user's locale
  Resolves: rhbz#1318374</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.6p3-26" date="1476792000">- RHEL-6.9 erratum
  - Fix race condition when creating /var/log/sudo-io direcotry
  Resolves: rhbz#1365156</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-27" date="1479988800">- Update noexec syscall blacklist
- Fixes CVE-2016-7032 and CVE-2016-7076
  Resolves: rhbz#1391938</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-28" date="1496059200">- Fixes CVE-2017-1000367
  Resolves: rhbz#1455399</changelog>
</package>
<package pkgid="1efe76c69bccdbe1f9435d32cda89f3f36a215c1c7f82973570fb87025e8aafe" name="sudo-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.6p3" rel="29.el6_9"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-21" date="1450094400">- RHEL-6.8 erratum
  - search also by user id when fetching rules from LDAP
  Resolves: rhbz#1135531</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-21" date="1450180800">- RHEL-6.8 erratum
  - fixed sssd's detection of user with zero rules
  Resolves: rhbz#1220480</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-22" date="1453291200">- RHEL-6.8 erratum
  - fixed potential getcwd failure, resulting in Null pointer exception 
  Resolves: rhbz#1284886</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-23" date="1456401600">- RHEL-6.8 erratum
  - fixed handling of closefrom_override defaults option
  Resolves: rhbz#1309976</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-24" date="1456833600">- RHEL-6.8 erratum
  - fixed a bug causing that non-root users can list privileges of
    other users
  Resolves: rhbz#1312481</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.6p3-25" date="1475755200">- RHEL-6.9 erratum
  - Fix "sudo -l command" in the LDAP and SSS backends when the command
    is not allowed.
  Resolves: rhbz#1374410
  - Fix sudo log file wrong group ownership
  Resolves: rhbz#1330001
  - Fix sudo parsing sudoers with user's locale
  Resolves: rhbz#1318374</changelog>
  <changelog author="Tomas Sykora &lt;tosykora@redhat.com&gt; - 1.8.6p3-26" date="1476792000">- RHEL-6.9 erratum
  - Fix race condition when creating /var/log/sudo-io direcotry
  Resolves: rhbz#1365156</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-27" date="1479988800">- Update noexec syscall blacklist
- Fixes CVE-2016-7032 and CVE-2016-7076
  Resolves: rhbz#1391938</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.6p3-28" date="1496059200">- Fixes CVE-2017-1000367
  Resolves: rhbz#1455399</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.6p3-29" date="1496836800">- Fixes CVE-2017-1000368
  Resolves: rhbz#1459408</changelog>
</package>
<package pkgid="3b5c319d92afc6c2b8db8ae927837facf1eaa4a97e6a93f26b4c34097d69845e" name="sysstat-debuginfo" arch="i686">
  <version epoch="0" ver="9.0.4" rel="33.el6_9.1"/>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 9.0.4-25" date="1400846400">- related: #921612
  reverted the boundary when the sa data files are stored in directories
  and default history value back to 28. Without the revert, backward
  compatibility could be broken in some cases.</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 9.0.4-26" date="1403265600">- resolves: #1110851
  added sysstat(5) man page describing /etc/sysconfig/sysstat file
- resolves: #1102603
  added possibility to set compress method in /etc/sysconfig/sysstat file</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 9.0.4-27" date="1407153600">- resolves: #1124180
  added workaround for dyn-tick kernel feature which makes /proc/stat file
  unreliable under certain circumstances</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 9.0.4-28" date="1448625600">- resolves: #1224878
  fixed bug when pidstat could run out of pre-allocated space for PIDs
- resolves: #887231
  fixed segfaults on bogus localtime input
- resolves: #1185057
  added two new columns to iostat: r_await and w_await
- resolves: #1188612
  fixed description of %util field in sar(1) and iostat(1) man pages</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 9.0.4-29" date="1455624000">- resolves: #1308862
  fixed bug when iostat didn't display the full device name if it's too long</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 9.0.4-30" date="1455624001">- related: #1308862
  fixed buffer size when using strncpy</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 9.0.4-31" date="1457438400">- related: #1224878
  in some corner cases, pidstat could still output values for % CPU bigger
  than 100; this commit fixes the issue</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 9.0.4-32" date="1474027200">- cifsiostat: report correct number of open/closed files (#1346844)
- sar: output timestamps when running with ko_KR.UTF-8 locale (#1363947)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 9.0.4-33" date="1475668800">- fix possible buffer overrun (#1363947)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 9.0.4-33.1" date="1510574400">- fix mapping of device mapper ids greater than 256 (#1512573)</changelog>
</package>
<package pkgid="a6bf984c583e9f99d6d13c1983547f940aac211b39e7c9419da70210ac4382c6" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.1.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.2-1" date="1467201600">- Update to 45.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.3.0-1" date="1472212800">- Update to 45.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-1" date="1475150400">- Update to 45.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1479470400">- Update to 45.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
</package>
<package pkgid="ec481c6f6c9c003004819eab7a9df99c31ff61eebd73333313f66f536f69a546" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.2.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.3.0-1" date="1472212800">- Update to 45.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.4.0-1" date="1475150400">- Update to 45.4.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1479470400">- Update to 45.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
</package>
<package pkgid="d179f939da0914c35160c56fbfcc64f463ca928ad618657bb807778e2358abed" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.3.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.0-1" date="1479470400">- Update to 45.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
</package>
<package pkgid="2c3451cba05824658e34c0f27e59c27f36dbed002c51cb8860b6577ce5761120" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.4.0" rel="2.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.5.1-1" date="1480593600">- Update to 45.5.1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
</package>
<package pkgid="7154d492949632ce96ce7e713085524b3de7631c2cb156b70214bc0425550981" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.5.0" rel="1.el6_9"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 45.6.0-1" date="1481889600">- Update to the latest upstream (45.6.0)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
</package>
<package pkgid="5452b2133bb0ad3d2a6378951fea131a49173f2b5ef15b0e01dfc6bcd4706d68" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.5.2" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.7.0-1" date="1485432000">- Update to 45.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
</package>
<package pkgid="39587d8842a064cd74246c18770334a0bdc34d3c95db56af0a0db24d5c793ea4" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.6.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 45.8.0-1" date="1488888000">- Update to 45.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
</package>
<package pkgid="e6760a8c2a2b97d4fcb378480f25756fdeff4b66b0198238ac618334ae75f961" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.7.0" rel="1.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.0.1-1" date="1492084800">- Update to 52.0.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
</package>
<package pkgid="4920c60c2b08f4b9db8be9122c0c5010dfa4f125af3581477625e39491a95a99" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.8.0" rel="2.el6_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.1.0-1" date="1493726400">- Update to 52.1.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-2" date="1526558400">- Update to 52.8.0</changelog>
</package>
<package pkgid="e2d1b3926cc8e1f5d16cb4c21ca4bb33efc0fcbedbd77455abad8ba8ad165f80" name="unbound-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.20" rel="23.el6_9.4"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.20-18" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.20-19" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.4.20-20" date="1430136000">- Install tmpfiles configuration into /usr/lib/tmpfiles.d (#1180995)
- Fix root key management to comply to RFC5011 (#1180267)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.4.20-21" date="1431432000">- Fix dependencies and minor scriptlet issues due to systemd timer unit (Related: #1180267)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.4.20-22" date="1431518400">- unbound.service now Wants unbound-anchor.timer (Related: #1180267)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.4.20-23" date="1432641600">- Removed usage of DLV from the default configuration (#1223339)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.4.20-23.1" date="1439467200">- port the rhel-7 package version to rhel-6
- add fix for CVE-2014-8602</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.4.20-23.2" date="1449835200">- bumping release to rebuild the package for Base RHEL (#1284964)</changelog>
  <changelog author="Tomas Hozza &lt;thozza@redhat.com&gt; - 1.4.20-23.3" date="1452168000">- Fixed 2 errors found by Static analysis of code (#1296229)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 1.4.20-23.4" date="1495627200">- Update trust anchors (#1458345)
- Update managed keys from trigger
- Fix periodic updates of root.key</changelog>
</package>
<package pkgid="6d81ab9dd65ff4f8cf91aae6cd306fc26db63253986610c38a33c7ba8e036292" name="util-linux-ng-debuginfo" arch="i686">
  <version epoch="0" ver="2.17.2" rel="12.28.el6_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.20" date="1452513600">- add missing function declaration for #1168390 bugfix</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.21" date="1453723200">- fix #1299687 - Partition size is not updated by fdisk "f" subcommand</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.22" date="1455278400">- fix #1023655 - improve the patch to avoid signals by TCSAFLUSH</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.23" date="1457438400">- improve patch for #1122839
- improve patch for #1085062</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.24" date="1458043200">- fix #1316864 - ipcmk fails with "Invalid argument" while creating a shared memory of size 2 GiB</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.25" date="1476273600">- fix #1349192 - RHEL6.8 util-linux-ng requires 642 kernel, but does not specify it as a dependency</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.26" date="1477915200">- fix #1320360 - lscpu shows wrong "Virtualization type" on Xen paravirtualization guest (PV)
- fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
- fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
- fix #1310035 - Hostname not being displayed besides the telnet login prompt
- fix #1310317 - fdisk -l fdisk double open fd
- fix #1337478 - wrong error handler and/or error message on fdisk call as not root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.27" date="1483358400">- fix #1349192 - RHEL6.8 util-linux-ng requires 642 kernel, but does not specify it as a dependency
- fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.28" date="1483444800">- remove dependence on kernel (#1349192)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.28.el6_9.1" date="1509451200">- fix #1448225 - Please add the -H option to login</changelog>
</package>
<package pkgid="7b9365db91883a772649a3fb19021fbd2c2f7a06ea097d9b1ccd58ad9b36ca0a" name="util-linux-ng-debuginfo" arch="i686">
  <version epoch="0" ver="2.17.2" rel="12.28.el6_9.2"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.21" date="1453723200">- fix #1299687 - Partition size is not updated by fdisk "f" subcommand</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.22" date="1455278400">- fix #1023655 - improve the patch to avoid signals by TCSAFLUSH</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.23" date="1457438400">- improve patch for #1122839
- improve patch for #1085062</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.24" date="1458043200">- fix #1316864 - ipcmk fails with "Invalid argument" while creating a shared memory of size 2 GiB</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.25" date="1476273600">- fix #1349192 - RHEL6.8 util-linux-ng requires 642 kernel, but does not specify it as a dependency</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.26" date="1477915200">- fix #1320360 - lscpu shows wrong "Virtualization type" on Xen paravirtualization guest (PV)
- fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
- fix #1319642 - [util-linux-ng] lscpu: Fix model and model name on Power Systems
- fix #1310035 - Hostname not being displayed besides the telnet login prompt
- fix #1310317 - fdisk -l fdisk double open fd
- fix #1337478 - wrong error handler and/or error message on fdisk call as not root user</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.27" date="1483358400">- fix #1349192 - RHEL6.8 util-linux-ng requires 642 kernel, but does not specify it as a dependency
- fix #1023655 - 'pppd' hangs (uninterruptable) when run on tty</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.28" date="1483444800">- remove dependence on kernel (#1349192)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.28.el6_9.1" date="1509451200">- fix #1448225 - Please add the -H option to login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.17.2-12.28.el6_9.2" date="1512475200">- fix #1448225 - make hostname in login(1) prompt optional</changelog>
</package>
<package pkgid="1e2f269884669b3dfa2b8213129a5d44d3d1f35b4c64b852e5ad958d27388e5b" name="vte-debuginfo" arch="i686">
  <version epoch="0" ver="0.25.1" rel="10.el6_9"/>
  <changelog author="Behdad Esfahbod &lt;behdad@redhat.com&gt; 0.25.1-1" date="1274270400">- Update to 0.25.1-1
- Resolves: #469930</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; 0.25.1-2" date="1275912000">- Fix a strict aliasing issue
Resolves: #599344</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; 0.25.1-3" date="1276516800">- Fix a fullscreen redraw issue
Resolves: #602452</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; 0.25.1-4" date="1277812800">- Package review cleanups
Resolves: #609101</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 0.25.1-5" date="1279540800">- Fix for the CVE-2010-2713 security issue (#615045)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 0.25.1-6" date="1296216000">- Fix extending selection in gnome-terminal does not refresh the buffer (#650884)</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; 0.25.1-7" date="1311854400">- Fix invisible cursor in some applications (#658774)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; 0.25.1-8" date="1367928000">- Fix FD leaks (#732391)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; 0.25.1-9" date="1400673600">- Fix performance regression with only one active terminal widget (#1063741).</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; 0.25.1-10" date="1521028800">- Obscured VteTerminals may become non-responsive until clicked on (#1546615).</changelog>
</package>
<package pkgid="bd47c63ba7e434fe34daa4c520c7d64f7278b38190622d3331d06955b82e0863" name="wpa_supplicant-debuginfo" arch="i686">
  <version epoch="1" ver="0.7.3" rel="9.el6_9.2"/>
  <changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 1:0.7.3-2" date="1320148800">- Backport upstream SME patches for nl80211 roaming improvements (rh #713280)</changelog>
  <changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 1:0.7.3-3" date="1332331200">- Fix signal quality reporting via nl80211 for some drivers (rh #752032)</changelog>
  <changelog author="Dan Williams &lt;dcbw@redhat.com&gt; - 1:0.7.3-4" date="1346932800">- Fix issues with Opportunistic/Proactive Key Caching (OKC) (rh #813579)
- Be less aggressive when choosing to roam (rh #837402)
- Don't install manpage for wpa_gui (rh #672976)</changelog>
  <changelog author="Ji&#x159;&#xED; Klime&#x161; &lt;jklimes@redhat.com&gt; - 1:0.7.3-5" date="1431950400">- Add domain_match config option from upstream (rh #1186806) (rh #1178263)
- Include peer certificate in EAP events for use by clients
- Add dbus signal for information about server certification
- eapol_test: Add option for writing server certificate chain to a file</changelog>
  <changelog author="Ji&#x159;&#xED; Klime&#x161; &lt;jklimes@redhat.com&gt; - 1:0.7.3-6" date="1433160000">- AP WMM: Fix integer underflow in WMM Action frame parser (rh #1221178) (rh #1226396)</changelog>
  <changelog author="Ji&#x159;&#xED; Klime&#x161; &lt;jklimes@redhat.com&gt; - 1:0.7.3-7" date="1439899200">- Do not quote value for 'scan_freq' and 'freq_list' (rh #1254486)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:0.7.3-8" date="1440504000">- Enable syslog logging support (rh #822128)
- Support run-time rotation the debug log file (rh #908306)
- Fix scriptlet dependencies (rh #712848)
- Enable timestampes in logs (rh #1150004)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:0.7.3-9" date="1472126400">- Deauthenticate on reconfiguration (rh #1359044)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:0.7.3-9.1" date="1508068800">- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:0.7.3-9.2" date="1508328000">- Fix backport errors (CVE-2017-13077, CVE-2017-13080)</changelog>
</package>
<package pkgid="e69c9f26a0ab6639f9f57f68ae66129d47e634be5f3b857ce790569e6cc6c9d6" name="xorg-x11-drv-ati-debuginfo" arch="i686">
  <version epoch="0" ver="7.6.1" rel="3.el6_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 7.2.0-1" date="1398254400">- ati 7.2.0</changelog>
  <changelog author="J&#xE9;r&#xF4;me Glisse &lt;jglisse@redhat.com&gt; 7.3.99-1" date="1399291200">- git snapshot ati 7.3.99 and updated firmware</changelog>
  <changelog author="J&#xE9;r&#xF4;me Glisse &lt;jglisse@redhat.com&gt; 7.3.99-2" date="1399636800">- Fix ppc build.</changelog>
  <changelog author="J&#xE9;r&#xF4;me Glisse &lt;jglisse@redhat.com&gt; 7.5.99-1" date="1422532800">- git snapshot ati 7.5.99 and updated firmware and rn50 accel disabled</changelog>
  <changelog author="J&#xE9;r&#xF4;me Glisse &lt;jglisse@redhat.com&gt; 7.5.99-2" date="1424347200">- Fix memory leak (covscan)</changelog>
  <changelog author="J&#xE9;r&#xF4;me Glisse &lt;jglisse@redhat.com&gt; 7.5.99-3" date="1424347201">- Fix the fix memory leak (covscan)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 7.5.99-4" date="1447243200">- New git snap for server 1.17</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 7.6.1-1" date="1447329600">- ati 7.6.1</changelog>
  <changelog author="Lyude Paul &lt;cpaul@redhat.com&gt; 7.6.1-2" date="1457006400">- Fix annoying trailing whitespace after %description
- Update firmware license
- Added missing firmware file TAHITI_vce.bin (#1310823)</changelog>
  <changelog author="Lyude Paul &lt;lyude@redhat.com&gt; 7.6.1-3" date="1492603200">- Add patch for #1425570</changelog>
</package>
<package pkgid="82da8d6189fb5d6369a01a7a97552c92274b757fe020eb2a223d1ce5dbfe17e9" name="xorg-x11-server-debuginfo" arch="i686">
  <version epoch="0" ver="1.17.4" rel="16.el6_9.1"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.17.4-7" date="1449662400">- Add bug-compatibility for exposure event generation for backing store's
  Always mode, and re-enable the feature</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; 1.17.4-8" date="1453291200">- Configurable number of clients (#1179840)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.17.4-9" date="1459512000">- Require mesa-libEGL from Xorg subpackage</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-10" date="1464004800">- Restore indirect GLX by default, and add xorg.conf option for it</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-11" date="1464696000">- Restore listen-on-TCP behaviour</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-12" date="1464782400">- Fix iglx command line parse for xfree86</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-14" date="1477483200">- Fix XDMCP sessions timing out unexpectedly</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-15" date="1478001600">- Fix a crash at application exit when using backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-16" date="1478088000">- Fix generation of GraphicsExposure events for window-&gt;pixmap copies when
  Xinerama is active</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.17.4-16.1" date="1510574400">- Fix ABI bug in Always backing store patch</changelog>
</package>
</otherdata>