# changelog

author: Stef Walter <<stefw@redhat.com>> - 138-1
changelog:
  - Only allow mdraid disk removal when it won't destroy data
  - Allow DN style usernames in the Kubernetes dashboard
  - Simplify protocol that cockpit talks to session authentication processes


author: Martin Pitt <martin@piware.de> - 166-1
changelog:
  - Kubernetes: Add creation of Virtual Machines
  - Realms: Automatically set up Kerberos keytab for Cockpit web server
  - Numbers now get formatted correctly for the selected language


author: Martin Pitt <martin@piware.de> - 169-1
changelog:
  - Storage: Offer installation of NFS client support
  - System: Request FreeIPA SSL certificate for Cockpit's web server
  - Services: Show unit relationships
  - Provide motd help about how to access cockpit


author: Martin Pitt <martin@piware.de> - 172-1
changelog:
  - System: Offer installation of PCP
  - Software Updates: Improve layout in mobile mode
  - Remove ability to drop privileges from navigation bar
  - API: Introduce flow control for all channels
  - Python 3 support


author: Sanne Raymaekers <sanne.raymaekers@gmail.com> - 176-1
changelog:
  - Login: Suggest other browser when browser is unsupported
  - PackageKit: Install auto-updates backend on demand


author: Sanne Raymaekers <sanne.raymaekers@gmail.com> - 193-1
changelog:
  - Machines: iSCSI direct storage pools
  - Storage: The "Format" button is no longer hidden
  - Storage: Improve performance with many block devices


author: Paolo Bonzini <pbonzini@redhat.com> - 20130515svn14365-6
changelog:
  - Revert previous change; firmware packages should be noarch, and building
    BaseTools twice is simply wrong.


author: Paolo Bonzini <pbonzini@redhat.com> - 20140328svn15376-3
changelog:
  - Rebase to get GCC48 configuration
  - Package EDK_TOOLS_PATH as /usr/share/edk2
  - Package "build" and LzmaF86Compress too, as well as the new
    tools Ecc and TianoCompress.


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 3.7.2-2
changelog:
  - workaround for %ghost %{_sharedstatedir}/glusterd/hooks/1/delete/post
    pending correct fix that also packages the .pyc and .pyo files.


author: Miroslav Rezanina <mrezanin@redhat.com> 2.4-2
changelog:
  - gperf-allow-customizing-trace-filename.patch [bz#1232702]
  - Resolves: bz#1232702
    (gperftools: tcmalloc debug version uses hard-coded path /tmp/google.alloc)


author: Saggi Mizrahi <smizrahi@redhat.com> 0.6.1-1
changelog:
  - Reduced logging even for debug level
  - Added support for block sizes other than 512
  - Added the --max-queued-requests argument


author: Saggi Mizrahi <smizrahi@redhat.com> 0.14.0-1
changelog:
  - Fix poll timeout
  - Add support for zombiereaper where available
  - Fix IOProcesses being referenced by commincation thread
  - build: update INSTALL
  - specfile: Add missing dependency to glib2


author: Yaniv Bronhaim <ybronhei@redhat.com> - 0.15.0-3
changelog:
  - Rebuild for ovirt 3.6.1
  - Add debug logging
  - Fix memory and cpu leak
  - Set cpu affinity to run ioprocess on any cpu


author: Nir Soffer <nsoffer@redhat.com> 0.16.1-1
changelog:
  - ioprocess: Fix logging of file descriptor path
  - ioprocess: Fix logger initialization
  - binding: Fix race between _run and close
  - binding: Add optional ioprocess name
  - ioprocess: Fix fd leak in truncate and touch (Resolves BZ#1339777)
  - python3: Initial port
  - build: Switch to pytest and tox
  - bindings: Use only daemon threads
  - use LDADD instead of LDFLAGS to fix failure to build with ld
    --as-needed (Logan Rosen)


author: Nir Soffer <nsoffer@redhat.com> 1.0.0-1
changelog:
  - ioprocess: Fix fsyncPath #BZ1536261
  - ioprocess: Wait until writefile completes #BZ1535429
  - spec: Rename python binding to python2-ioprocess
  - spec: Remove leftovers from RHEL 6
  - python: Close unneeded fds before executing child
  - python: Add a test for closing unrelated fds
  - automation: Add missing repositories
  - python: Replace cpopen with subprocess32
  - python: Wait for child process on close
  - python: Increase the start timeout #BZ1414604
  - python: Rename threads to match vdsm thread names #BZ1392214
  - python: Set system thread names if possible #BZ1392214
  - python: Log unhandled errors in threads #BZ1392214
  - python: Require ioprocess of same version


author: Nir Soffer <nsoffer@redhat.com> 1.1.1-1
changelog:
  - python: Log client name in all messages #BZ1550106
  - ioprocess: Add lstat() #BZ1564515
  - binding: Do not read from stdout


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.5.1-1
changelog:
  - New upstream release
  - Updated nopprof patch to match new release
  - Fixed a few bogus changelog entries


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-1056.el7]
changelog:
  - [infiniband] ib/mlx5: Allow modify AV in DCI QP to RTR (Alaa Hleihel) [1714002]
  - [scsi] core: Allow state transitions from OFFLINE to BLOCKED (Ewan Milne) [1631136]
  - [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1705210]
  - [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1705210]
  - [edac] amd64: Recognize x16 symbol size (Gary Hook) [1705210]
  - [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1705210]
  - [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1705210]
  - [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1705210]
  - [vhost] vsock: add weight support (Jason Wang) [1702943] {CVE-2019-3900}
  - [vhost] vhost_net: fix possible infinite loop (Jason Wang) [1702943] {CVE-2019-3900}
  - [vhost] introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
  - [vhost] vhost_net: introduce vhost_exceeds_weight() (Jason Wang) [1702943] {CVE-2019-3900}
  - [vhost] vhost_net: use packet weight for rx handler, too (Jason Wang) [1702943] {CVE-2019-3900}
  - [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Jason Wang) [1702943] {CVE-2019-3900}
  - [vhost] don't read and process iotlb message with bad lenth (Jason Wang)
  - [vhost] correctly check the return value of translate_desc() in log_used() (Jason Wang) [1657577]
  - [vhost] log dirty page correctly (Jason Wang) [1657577]
  - [vhost] fix OOB in get_rx_bufs() (Jason Wang) [1710182]
  - [vhost] reject zero size iova range (Jason Wang)
  - [vhost] Fix Spectre V1 vulnerability (Jason Wang) [1672554]
  - [vhost] vhost_net: flush batched heads before trying to busy polling (Jason Wang) [1710182]
  - [vhost] vhost_net: batch used ring update in rx (Jason Wang) [1710182]
  - [x86] mark AMD Rome processors supported (David Arcari) [1543509]
  - [x86] microcode: Only load the microcode once on AMD systems (Prarit Bhargava) [1710942]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-1057.el7]
changelog:
  - [fs] ext4: zero out the unused memory region in the extent tree block (Lukas Czerner) [1715280] {CVE-2019-11833}
  - [fs] revert "lockd: Show pid of lockd for remote locks" (Benjamin Coddington) [1717377]
  - [scsi] qla2xxx: Allow IRQ balance to spread vectors across multiple CPU (Himanshu Madhani) [1713412]
  - [netdrv] i40e: Do not check VF state in i40e_ndo_get_vf_config (Stefan Assmann) [1701191]
  - [netdrv] qed: Backport missing hw ptp config hunks (Manish Chopra) [1712585]
  - [infiniband] rdma/qedr: Fix incorrect device rate (Manish Chopra) [1713577]
  - [watchdog] core: Add watchdog_thresh command line parameter (Prarit Bhargava) [1714612]
  - [x86] kvm: x86: Sync the pending Posted-Interrupts (Peter Xu) [1719525]
  - [x86] kvm: vmx: remove WARN_ON_ONCE in kvm_vcpu_trigger_posted_interrupt (Peter Xu) [1719525]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-1058.el7]
changelog:
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719915] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719915] {CVE-2019-11479}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719595] {CVE-2019-11477}
  - [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719595] {CVE-2019-11477}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719850] {CVE-2019-11478}
  - [fs] Revert "Fix default behaviour for empty domains and add domainauto option" (Leif Sahlberg) [1710421]
  - [fs] libceph: handle an empty authorize reply (Ilya Dryomov) [1718305]
  - [scsi] qla2xxx: Mark NVMe/FC initiator mode usage as technology preview (Ewan Milne) [1721655]
  - [nvme] Removing DMA_ATTR_NO_WARN for dma_alloc_attrs (Gopal Tiwari) [1715433]
  - [netdrv] qlcnic: fix Tx descriptor corruption on 82xx devices (Manish Chopra) [1715481]
  - [mm] mincore.c: make mincore() more conservative (Rafael Aquini) [1664199] {CVE-2019-5489}
  - [kernel] pm/hibernate: exclude all PageOffline() pages (David Hildenbrand) [1718771]
  - [hv] hv_balloon: mark inflated pages PG_offline (David Hildenbrand) [1718771]
  - [kernel] kexec: export PG_offline to VMCOREINFO (David Hildenbrand) [1718771]
  - [kernel] mm: convert PG_balloon to PG_offline (David Hildenbrand) [1718771]
  - [kernel] mm: split page_type out from _mapcount (David Hildenbrand) [1718771]
  - [kernel] mm: clean up non-standard page->_mapcount users (David Hildenbrand) [1718771]
  - [kernel] mm: consolidate all page-flags helpers in <linux/page-flags.h> (David Hildenbrand) [1718771]
  - [kernel] mm: page-flags: clean up the page flag test, set, clear macros (David Hildenbrand) [1718771]
  - [kernel] alarmtimer: Prevent overflow for relative nanosleep (Artem Savkov) [1653677] {CVE-2018-13053}
  - [kernel] module.c: Only return -EEXIST for modules that have finished loading part II (Prarit Bhargava) [1704844]
  - [x86] mm: Create an SME workarea in the kernel for early encryption (Lianbo Jiang) [1718348]
  - [x86] mm: Identify the end of the kernel area to be reserved (Lianbo Jiang) [1718348]
  - [x86] kdump: Export the SME mask to vmcoreinfo (Lianbo Jiang) [1718348]
  - [fs] proc/vmcore: Fix i386 build error of missing copy_oldmem_page_encrypted() (Lianbo Jiang) [1718348]
  - [x86] kdump, proc/vmcore: Enable kdumping encrypted memory with SME enabled (Lianbo Jiang) [1718348]
  - [iommu] amd: Remap the IOMMU device table with the memory encryption mask for kdump (Lianbo Jiang) [1718348]
  - [kernel] kexec: Allocate decrypted control pages for kdump if SME is enabled (Lianbo Jiang) [1718348]
  - [x86] ioremap: Add an ioremap_encrypted() helper (Lianbo Jiang) [1718348]
  - [x86] pti: Do not create debugfs for the pti_enabled when SME is active (Lianbo Jiang) [1720997]
  - [x86] resctrl: Prevent NULL pointer dereference when local MBM is disabled (Prarit Bhargava) [1713547]
  - [s390] pkey: Indicate old mkvp only if old and current mkvp are different (Hendrik Brueckner) [1720388]
  - [s390] qdio: clear intparm during shutdown (Hendrik Brueckner) [1720390]
  - [s390] Remove VLAIS in ptff() and clear_table() (Yauheni Kaliuta) [1691710]
  - [s390] remove 31 bit support (Yauheni Kaliuta) [1691710]
  - [s390] timex: fix get_tod_clock_ext() inline assembly (Yauheni Kaliuta) [1691710]
  - [s390] Use for_each_set_bit_inv instead of for_each_set_bit_left (Yauheni Kaliuta) [1691710]
  - [s390] bitops: add for_each_set_bit_inv helper (Yauheni Kaliuta) [1691710]
  - [s390] bitops: rename find_first_bit_left() to find_first_bit_inv() (Yauheni Kaliuta) [1691710]
  - [s390] bitops: use flogr instruction to implement __ffs, ffs, __fls, fls and fls64 (Yauheni Kaliuta) [1691710]
  - [s390] bitops: use generic find bit functions / reimplement _left variant (Yauheni Kaliuta) [1691710]
  - [s390] bitops: remove CONFIG_SMP / simplify non-atomic bitops (Yauheni Kaliuta) [1691710]
  - [s390] bitops: make use of interlocked-access facility 1 instructions (Yauheni Kaliuta) [1691710]
  - [s390] bitops: fix inline assembly constraints (Yauheni Kaliuta) [1691710]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-1059.el7]
changelog:
  - [scsi] scsi: megaraid_sas: return error when create DMA pool failed (Tomas Henzl) [1712861] {CVE-2019-11810}
  - [fs] cifs: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM (Leif Sahlberg) [1714220]
  - [fs] cifs: add more spinlocks to pretect against races (Leif Sahlberg) [1580165]
  - [fs] xfs: serialize unaligned dio writes against all other dio writes (Brian Foster) [1699800]
  - [fs] xfs: disable copy_file_range() to avoid broken splice copy (Brian Foster) [1688067]
  - [fs] ext4: check superblock mapped prior to committing (Lukas Czerner) [1721737]
  - [sound] alsa: alsa: hda - do not use ALC255_FIXUP_MIC_MUTE_LED for Huawei laptops (Jaroslav Kysela) [1721867]
  - [sound] alsa: revert "[sound] alsa: hda - Support led audio trigger" (Jaroslav Kysela) [1721867]
  - [mm] memory_hotplug: fix scan_movable_pages() for gigantic hugepages (Rafael Aquini) [1721503]
  - [mm] page_alloc: fix has_unmovable_pages for HugePages (Rafael Aquini) [1721503]
  - [mm] memory_hotplug: check zone_movable in has_unmovable_pages (Rafael Aquini) [1721503]
  - [mm] memory_hotplug: make has_unmovable_pages more robust (Rafael Aquini) [1721503]
  - [kernel] workqueue: Fix NULL pointer dereference (Denys Vlasenko) [1655834]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-1060.el7]
changelog:
  - [char] random: move FIPS continuous test to output functions (Herbert Xu) [1723910]
  - [netdrv] i40e: fix WoL support check (Stefan Assmann) [1720021]
  - [fs] revert "gfs2: Use d_materialise_unique instead of d_splice_alias" (Robert S Peterson) [1677686]
  - [mm] vmpressure: make sure there are no events queued after memcg is offlined (Vratislav Bendel) [1685447]
  - [mm] revert "mm: split page_type out from _mapcount" (David Hildenbrand) [1723689]
  - [mm] huge_memory: make pmd huge before dirty (Rafael Aquini) [1720278]
  - [mm] revert "don't split THP page when MADV_FREE syscall is called" (Rafael Aquini) [1720278]
  - [mm] revert "fix incorrect unlock error path in madvise_free_huge_pmd" (Rafael Aquini) [1720278]
  - [mm] revert "pmd dirty emulation in page fault handler" (Rafael Aquini) [1720278]
  - [mm] revert "thp: fix crash due race in MADV_FREE handling" (Rafael Aquini) [1720278]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-1061.el7]
changelog:
  - [linux] efi: Disable local interrupts across efi run-time calls (Lenny Szubowicz) [1716252]
  - [net] tcp: refine memory limit test in tcp_fragment() (Florian Westphal) [1723032]
  - [net] tcp: provide TCP_FRAG_IN_WRITE/RTX_QUEUE for tcp_fragment use (Florian Westphal) [1723032]


author: Bruno Meneguele <bmeneg@redhat.com> [3.10.0-1062.1.1.el7]
changelog:
  - [fs] nfsv4.1: Avoid false retries when RPC calls are interrupted (Benjamin Coddington) [1739077 1732427]
  - [fs] NFS4.1 handle interrupted slot reuse from ERR_DELAY (Benjamin Coddington) [1739077 1732427]
  - [fs] nfsv4.1: Fix the client behaviour on NFS4ERR_SEQ_FALSE_RETRY (Benjamin Coddington) [1739077 1732427]
  - [fs] cifs: fix panic in smb2_reconnect (Leif Sahlberg) [1737382 1702264]
  - [scsi] sg: protect against races between mmap() and SG_SET_RESERVED_SIZE (Ewan Milne) [1737380 1710533]
  - [scsi] sg: recheck MMAP_IO request length with lock held (Ewan Milne) [1737380 1710533]
  - [scsi] sg: reset 'res_in_use' after unlinking reserved array (Ewan Milne) [1737380 1710533]
  - [scsi] sg: protect accesses to 'reserved' page array (Ewan Milne) [1737380 1710533]
  - [netdrv] mlx4/en_netdev: allow offloading VXLAN over VLAN (Paolo Abeni) [1734333 1733671]
  - [netdrv] brcmfmac: assure SSID length from firmware is limited (Stanislaw Gruszka) [1704879 1704880] {CVE-2019-9500}
  - [net] tcp: be more careful in tcp_fragment() (Marcelo Leitner) [1739130 1732106]
  - [documentation] Documentation: Add swapgs description to the Spectre v1 documentation (Waiman Long) [1729810 1724510] {CVE-2019-1125}
  - [documentation] Documentation: Add section about CPU vulnerabilities for Spectre (Waiman Long) [1729810 1724510] {CVE-2019-1125}
  - [x86] x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS (Waiman Long) [1729810 1724510] {CVE-2019-1125}
  - [x86] x86/speculation: Enable Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
  - [x86] x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations (Waiman Long) [1729810 1724510] {CVE-2019-1125}
  - [x86] x86/feature: Relocate X86_FEATURE_INVPCID_SINGLE (Waiman Long) [1729810 1724510] {CVE-2019-1125}


author: Bruno Meneguele <bmeneg@redhat.com> [3.10.0-1062.5.1.el7]
changelog:
  - [netdrv] ixgbe: Prevent u8 wrapping of ITR value to something less than 10us (Ken Cox) [1757350 1750856]


author: Bruno Meneguele <bmeneg@redhat.com> [3.10.0-1062.6.1.el7]
changelog:
  - [virt] KVM: coalesced_mmio: add bounds checking (Bandan Das) [1746797 1746798] {CVE-2019-14821}
  - [fs] xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT (Brian Foster) [1764245 1759117]
  - [powerpc] powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration (Desnes Augusto Nunes do Rosario) [1763625 1720930]
  - [powerpc] powerpc/pseries/mobility: prevent cpu hotplug during DT update (Desnes Augusto Nunes do Rosario) [1763625 1720930]
  - [powerpc] powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild (Desnes Augusto Nunes do Rosario) [1763625 1720930]
  - [crypto] crypto: vmx - ghash: do nosimd fallback manually (Desnes Augusto Nunes do Rosario) [1763621 1739765]
  - [crypto] crypto: vmx - Remove overly verbose printk from AES init routines (Desnes Augusto Nunes do Rosario) [1763621 1739765]
  - [crypto] powerpc: Create disable_kernel_{fp, altivec, vsx, spe}() (Desnes Augusto Nunes do Rosario) [1763621 1739765]
  - [crypto] crypto: vmx - CTR: always increment IV as quadword (Desnes Augusto Nunes do Rosario) [1763621 1739765]
  - [crypto] crypto: vmx - fix copy-paste error in CTR mode (Desnes Augusto Nunes do Rosario) [1763621 1739765]
  - [crypto] vmac - separate tfm and request context (Vladis Dronov) [1763620 1733561]
  - [crypto] crypto: blkcipher - fix crash flushing dcache in error path (Vladis Dronov) [1761804 1741525]
  - [crypto] crypto: remove direct blkcipher_walk dependency on transform (Vladis Dronov) [1761804 1741525]
  - [crypto] crypto: user - prevent operating on larval algorithms (Vladis Dronov) [1761804 1741525]
  - [netdrv] net/mlx5e: Support LAG TX port affinity distribution (Alaa Hleihel) [1759449 1724344]
  - [netdrv] net/mlx5e: Expose new function for TIS destroy loop (Alaa Hleihel) [1759449 1724344]
  - [include] net/mlx5: Add lag_tx_port_affinity capability bit (Alaa Hleihel) [1759449 1724344]
  - [netdrv] net/mlx5e: Re-work TIS creation functions (Alaa Hleihel) [1759449 1724344]
  - [netdrv] net/mlx5e: Disallow tc redirect offload cases we don't support (Alaa Hleihel) [1759003 1721626]
  - [netdrv] net/mlx5e: Support ndo_get_phys_port_name for PF under switchdev mode (Alaa Hleihel) [1759003 1721626]
  - [netdrv] net/mlx5e: Expose same physical switch_id for all representors (Alaa Hleihel) [1759003 1721626]
  - [net] tcp: reset sk_send_head in tcp_write_queue_purge (Marcelo Leitner) [1748357 1748358] {CVE-2019-15239}
  - [x86] kvm: x86: vmx: fix vpid leak (Vitaly Kuznetsov) [1755781 1716188]
  - [kvm] kvm/x86: Move MSR_IA32_ARCH_CAPABILITIES to array emulated_msrs (Paul Lai) [1757757 1708465]
  - [kvm] kvm: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts (Paul Lai) [1757757 1708465]
  - [kvm] kvm: vmx: Tell the nested hypervisor to skip L1D flush on vmentry (Paul Lai) [1757757 1708465]
  - [kvm] kvm: vmx: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR (Paul Lai) [1757757 1708465]
  - [kvm] kvm: x86: Introduce kvm_get_msr_feature() (Paul Lai) [1757757 1708465]
  - [kvm] kvm: x86: Add a framework for supporting MSR-based features (Paul Lai) [1757757 1708465]
  - [nvme] nvme: don't ask blk-mq to handle timed-out request (Ming Lei) [1758051 1750202]
  - [block] blk-mq: mark request as REQ_TIMEOUT when .timeout() is called (Ming Lei) [1758051 1750202]
  - [block] blk-mq: introduce blk_mq_clear_rq_complete() (Ming Lei) [1758051 1750202]
  - [block] blk-mq: remove 'sync' argument from __blk_mq_complete_request() (Ming Lei) [1758051 1750202]
  - [nvme] blk-mq: remove blk_mq_complete_request_sync (Ming Lei) [1763624 1730922]
  - [nvme] nvme: wait until all completed request's complete fn is called (Ming Lei) [1763624 1730922]
  - [nvme] nvme: don't abort completed request in nvme_cancel_request (Ming Lei) [1763624 1730922]
  - [block] blk-mq: introduce blk_mq_tagset_wait_completed_request() (Ming Lei) [1763624 1730922]
  - [block] blk-mq: introduce blk_mq_request_completed() (Ming Lei) [1763624 1730922]
  - [scsi] scsi: qla2xxx: Use correct size in call to dma_free_coherent() in qla2400_sp_unmap() (Himanshu Madhani) [1759447 1668767]
  - [scsi] scsi: qla2xxx: Fix different size DMA Alloc/Unmap (Himanshu Madhani) [1759447 1668767]
  - [scsi] scsi: qla2xxx: Fix DMA unmap leak (Himanshu Madhani) [1759447 1668767]
  - [scsi] scsi: qla2xxx: Prevent memory leak for CT req/rsp allocation (Himanshu Madhani) [1759447 1668767]
  - [scsi] scsi: fnic: fix msix interrupt allocation (Govindarajulu Varadarajan) [1754836 1745053]
  - [scsi] scsi: fnic: print port speed only at driver init or speed change (Govindarajulu Varadarajan) [1754836 1745053]
  - [nvme] nvme-scsi: updating struct nvme_ctrl (Gopal Tiwari) [1752423 1749524]


author: Bruno Meneguele <bmeneg@redhat.com> [3.10.0-1062.7.1.el7]
changelog:
  - [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
  - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
  - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [kernel] sched/fair: Fix endless loop in idle_balance() (Phil Auld) [1766087 1740941]
  - [kernel] sched: Skip double execution of pick_next_task_fair() (Phil Auld) [1766098 1750819]
  - [kernel] sched/fair: Prevent throttling in early pick_next_task_fair() (Phil Auld) [1756267 1740038]
  - [kernel] sched: Check for stop task appearance when balancing happens (Phil Auld) [1756267 1740038]
  - [kernel] sched/core: Fix endless loop in pick_next_task() (Phil Auld) [1756267 1740038]
  - [kernel] sched/fair: Push down check for high priority class task into idle_balance() (Phil Auld) [1756267 1740038]
  - [kernel] sched/rt: Fix picking RT and DL tasks from empty queue (Phil Auld) [1756267 1740038]
  - [kernel] sched/core: Allow __sched_setscheduler() in interrupts when PI is not used (Phil Auld) [1756265 1722234]
  - [kernel] sched, dl: Convert switched_{from, to}_dl() / prio_changed_dl() to balance callbacks (Phil Auld) [1756265 1722234]
  - [kernel] sched,dl: Remove return value from pull_dl_task() (Phil Auld) [1756265 1722234]
  - [kernel] sched, rt: Convert switched_{from, to}_rt() / prio_changed_rt() to balance callbacks (Phil Auld) [1756265 1722234]
  - [kernel] sched,rt: Remove return value from pull_rt_task() (Phil Auld) [1756265 1722234]
  - [kernel] sched: Allow balance callbacks for check_class_changed() (Phil Auld) [1756265 1722234]
  - [kernel] sched: Use replace normalize_task() with __sched_setscheduler() (Phil Auld) [1756265 1722234]
  - [kernel] sched: Handle priority boosted tasks proper in setscheduler() (Phil Auld) [1756265 1722234]
  - [kernel] sched: Fix broken setscheduler() (Phil Auld) [1756265 1722234]
  - [kernel] sched: Consider pi boosting in setscheduler() (Phil Auld) [1756265 1722234]
  - [kernel] sched: Replace post_schedule with a balance callback list (Phil Auld) [1756265 1722234]
  - [kernel] sched: Guarantee task priority in pick_next_task() (Phil Auld) [1756265 1722234]
  - [kernel] sched: Remove some #ifdeffery (Phil Auld) [1756265 1722234]
  - [kernel] sched: Clean up idle task SMP logic (Phil Auld) [1756265 1722234]
  - [kernel] sched: Fix hotplug task migration (Phil Auld) [1756265 1722234]
  - [kernel] sched/fair: Remove idle_balance() declaration in sched.h (Phil Auld) [1756265 1722234]
  - [kernel] sched: Push down pre_schedule() and idle_balance() (Phil Auld) [1756265 1722234]
  - [kernel] sched/fair: Optimize cgroup pick_next_task_fair() (Phil Auld) [1756265 1722234]
  - [kernel] sched/fair: Clean up the __clear_buddies_*() functions (Phil Auld) [1756265 1722234]
  - [kernel] sched: Push put_prev_task() into pick_next_task() (Phil Auld) [1756265 1722234]
  - [kernel] sched: Move rq->idle_stamp up to the core (Phil Auld) [1756265 1722234]
  - [kernel] sched: Fix race in idle_balance() (Phil Auld) [1756265 1722234]
  - [kernel] sched: Remove 'cpu' parameter from idle_balance() (Phil Auld) [1756265 1722234]
  - [kernel] sched/fair: Reset se-depth when task switched to FAIR (Phil Auld) [1756265 1722234]
  - [kernel] sched/fair: Track cgroup depth (Phil Auld) [1756265 1722234]


author: Bruno Meneguele <bmeneg@redhat.com> [3.10.0-1062.8.1.el7]
changelog:
  - [kernel] sched/fair: Fix low cpu usage with high throttling by removing expiration of cpu-local slices (Phil Auld) [1770738 1752136]


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-1062.9.1.el7]
changelog:
  - [kernel] sched: Fix race between task_group and sched_task_group (Oleksandr Natalenko) [1778545 1738415]


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-1062.10.1.el7]
changelog:
  - [net] netfilter: masquerade: don't flush all conntracks if only one address deleted on device (Patrick Talbert) [1779564 1771396]
  - [net] netfilter: conntrack: resched in nf_ct_iterate_cleanup (Patrick Talbert) [1779564 1771396]


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-1062.11.1.el7]
changelog:
  - [tty] TTY: serial_core, add ->install (Kenneth Yin) [1780163 1443152]
  - [net] gro: fix use-after-free read in napi_gro_frags() (Paolo Abeni) [1780033 1750810]
  - [net] cfg80211: wext: avoid copying malformed SSIDs (Stanislaw Gruszka) [1778631 1778632]
  - [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777351 1749766]
  - [fs] gfs2: Use async glocks for rename (Robert S Peterson) [1777297 1677686]
  - [fs] gfs2: create function gfs2_glock_update_hold_time (Robert S Peterson) [1777297 1677686]
  - [fs] gfs2: separate holder for rgrps in gfs2_rename (Robert S Peterson) [1777297 1677686]
  - [wireless] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Stanislaw Gruszka) [1776615 1776616]
  - [x86] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1776289 1771849]
  - [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1776289 1756843]
  - [wireless] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Stanislaw Gruszka) [1776205 1776206]
  - [wireless] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Stanislaw Gruszka) [1776156 1776157] {CVE-2019-14901}
  - [fs] vfs: Fix EOVERFLOW testing in put_compat_statfs64 (Eric Sandeen) [1775678 1758001]
  - [x86] x86/atomic: Fix smp_mb__{before,after}_atomic() (Prarit Bhargava) [1772812 1769569]
  - [mm] mm-vmstat-reduce-zone-lock-holding-time-by-proc-pagetypeinfo-fix (Waiman Long) [1770732 1757943]
  - [mm] mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (Waiman Long) [1770732 1757943]
  - [mm] mm, vmstat: hide /proc/pagetypeinfo from normal users (Waiman Long) [1770732 1757943]
  - [md] dm rq: fix handling underlying queue busy (Ming Lei) [1770113 1767482]
  - [pci] hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1766097 1634251]
  - [pci] hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1766097 1634251]
  - [pci] hv: Serialize the present and eject work items (Mohammed Gamal) [1766097 1634251]
  - [netdrv] hv_netvsc: fix network namespace issues with VF support (Mohammed Gamal) [1766093 1741334]
  - [netdrv] hv_netvsc: move VF to same namespace as netvsc device (Mohammed Gamal) [1766093 1741334]
  - [netdrv] hv_netvsc: set master device (Mohammed Gamal) [1766093 1741334]
  - [pci] PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it (Mohammed Gamal) [1766089 1737567]


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-1062.12.1.el7]
changelog:
  - [powerpc] powerpc/pseries: Remove confusing warning message (Gustavo Duarte) [1780148 1748306]
  - [powerpc] powerpc/pseries: Call H_BLOCK_REMOVE when supported (Gustavo Duarte) [1780148 1748306]
  - [powerpc] powerpc/pseries: Read TLB Block Invalidate Characteristics (Gustavo Duarte) [1780148 1748306]
  - [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1776290 1750577]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1776290 1750577]
  - [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1776290 1750577]
  - [scsi] scsi: bnx2fc: remove set but not used variable 'fh' (Nilesh Javali) [1776290 1750577]
  - [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1767621 1764567]


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-1062.14.1.el7]
changelog:
  - [s390] jump_label: replace stop_machine with smp_call_function (Hendrik Brueckner) [1787559 1720387]
  - [s390] kernel: avoid cpu yield in SMT environment (Philipp Rudo) [1787558 1777876]
  - [x86] mm: serialize against gup_fast in pmdp_splitting_flush() (Vitaly Kuznetsov) [1783177 1674266]


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-1062.15.1.el7]
changelog:
  - [tools] perf top: Fix global-buffer-overflow issue (Michael Petlan) [1793581 1757325]
  - [tools] perf top: Always sample time to satisfy needs of use of ordered queuing (Michael Petlan) [1793581 1757325]


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-1062.16.1.el7]
changelog:
  - [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1796798 1794812]
  - [kernel] sched: Fix schedule_tail() to disable preemption (Phil Auld) [1796261 1771094]


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-1062.17.1.el7]
changelog:
  - [kvm] kvm: x86: always expose VIRT_SSBD to guests (Eduardo Habkost) [1797511 1744281]
  - [kvm] kvm: x86: fix reporting of AMD speculation bug CPUID leaf (Eduardo Habkost) [1797511 1744281]


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-1062.18.1.el7]
changelog:
  - [x86] x86/boot/64: Round memory hole size up to next PMD page (Frank Ramsay) [1798163 1773762]
  - [x86] x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (Frank Ramsay) [1798163 1773762]
  - [fs] gfs2: Use d_materialise_unique instead of d_splice_alias (2) (Andreas Grunbacher) [1796431 1784550]
  - [fs] gfs2: gfs2_create_inode(): don't bother with d_splice_alias() (Andreas Grunbacher) [1796431 1784550]
  - [fs] gfs2: bugger off early if O_CREAT open finds a directory (Andreas Grunbacher) [1796431 1784550]
  - [scsi] scsi: hpsa: remove printing internal cdb on tag collision (Joseph Szczypek) [1793579 1741355]
  - [scsi] scsi: hpsa: correct scsi command status issue after reset (Joseph Szczypek) [1793579 1741355]
  - [infiniband] IB/mlx5: Fix MR registration flow to use UMR properly (Alaa Hleihel) [1792371 1741343]
  - [scsi] qedf: Initialize rport while creation of vport (Nilesh Javali) [1791825 1760746]
  - [scsi] scsi: hpsa: add missing hunks in reset-patch (Joseph Szczypek) [1791782 1761978]
  - [block] block: don't change REQ_NR_BITS (Ming Lei) [1791781 1779712]
  - [scsi] scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show (Himanshu Madhani) [1791595 1729270]
  - [drm] drm/radeon: fix si_enable_smc_cac() failed issue (Dave Airlie) [1789744 1780026]
  - [scsi] scsi: bnx2fc: timeout calculation invalid for bnx2fc_eh_abort() (Nilesh Javali) [1784824 1772966]
  - [md] md/raid10: prevent access of uninitialized resync_pages offset (Nigel Croxon) [1781584 1767935]
  - [fs] fix inode leaks on d_splice_alias() failure exits (Miklos Szeredi) [1781159 1749390]
  - [fs] cachefiles: Fix page leak in cachefiles_read_backing_file while vmscan is active (David Howells) [1780149 1765975]
  - [mm] mm: swap: clean up swap readahead (Rafael Aquini) [1780035 1725396]
  - [mm] mm: do_swap_page: clean up parameter list passing a pointer to struct vm_fault (Rafael Aquini) [1780035 1725396]
  - [mm] mm: __handle_mm_fault: introduce explicit barrier after orig_pte dereference (Rafael Aquini) [1780035 1725396]
  - [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1779766 1779768]
  - [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1779766 1779768] {CVE-2019-19338}
  - [x86] kvm: x86: Mark expected switch fall-throughs (Paolo Bonzini) [1779766 1779768] {CVE-2019-19338}
  - [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1779766 1779768] {CVE-2019-19338}
  - [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1779766 1779768] {CVE-2019-19338}
  - [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1779766 1779768] {CVE-2019-19338}
  - [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1779766 1779768] {CVE-2019-19338}
  - [s390] scsi: zfcp: fix reaction on bit error threshold notification (Philipp Rudo) [1778691 1765123]
  - [net] ipv6: Rewind hlist offset on interrupted /proc/net/if_inet6 read (Stefano Brivio) [1778084 1753480]
  - [net] revert "[net] ipv6: Display all addresses in output of /proc/net/if_inet6" (Stefano Brivio) [1778084 1753480]
  - [wireless] rtlwifi: Fix potential overflow on P2P code (Josef Oskera) [1775235 1775236] {CVE-2019-17666}
  - [md] md: improve handling of bio with REQ_PREFLUSH in md_flush_request() (Xiao Ni) [1773482 1752061]
  - [fs] fscache: Don't use a constructor function on the slab allocator (David Howells) [1793086 1739996]
  - [mm] mm: fix insert_pfn regression (Jeff Moyer) [1793088 1739889]
  - [mm] mm/page_idle.c: fix oops because end_pfn is larger than max_pfn (Rafael Aquini) [1768386 1730471]
  - [mm] mm/mlock.c: mlockall error for flag MCL_ONFAULT (Rafael Aquini) [1768386 1730471]
  - [mm] hugetlb: use same fault hash key for shared and private mappings (Rafael Aquini) [1768386 1730471]
  - [mm] hugetlbfs: on restore reserve error path retain subpool reservation (Rafael Aquini) [1768386 1730471]
  - [mm] mm/memory.c: fix modifying of page protection by insert_pfn() (Rafael Aquini) [1768386 1730471]
  - [mm] mm, swap: bounds check swap_info array accesses to avoid NULL derefs (Rafael Aquini) [1768386 1730471]
  - [mm] mm/slub.c: remove an unused addr argument (Rafael Aquini) [1768386 1730471]
  - [mm] hugetlbfs: fix races and page leaks during migration (Rafael Aquini) [1768386 1730471]
  - [mm] mm, oom: fix use-after-free in oom_kill_process (Rafael Aquini) [1768386 1730471]
  - [mm] percpu: convert spin_lock_irq to spin_lock_irqsave (Rafael Aquini) [1768386 1730471]
  - [mm] mm/swapfile.c: use kvzalloc for swap_info_struct allocation (Rafael Aquini) [1768386 1730471]
  - [mm] hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! (Rafael Aquini) [1768386 1730471]
  - [mm] mm: Fix warning in insert_pfn() (Rafael Aquini) [1768386 1730471]
  - [mm] hugetlbfs: dirty pages as they are added to pagecache (Rafael Aquini) [1768386 1730471]
  - [mm] mm/swapfile.c: fix swap_count comment about nonexistent SWAP_HAS_CONT (Rafael Aquini) [1768386 1730471]
  - [mm] slab: __GFP_ZERO is incompatible with a constructor (Rafael Aquini) [1768386 1730471]
  - [mm] mm: fix the NULL mapping case in __isolate_lru_page() (Rafael Aquini) [1768386 1730471]
  - [mm] mm/filemap.c: fix NULL pointer in page_cache_tree_insert() (Rafael Aquini) [1768386 1730471]
  - [fs] block_invalidatepage(): only release page if the full page was invalidated (Rafael Aquini) [1768386 1730471]
  - [mm] mm/mempolicy.c: avoid use uninitialized preferred_node (Rafael Aquini) [1768386 1730471]
  - [mm] mm: pin address_space before dereferencing it while isolating an LRU page (Rafael Aquini) [1768386 1730471]
  - [fs] fs/hugetlbfs/inode.c: change put_page/unlock_page order in hugetlbfs_fallocate() (Rafael Aquini) [1768386 1730471]
  - [mm] mm: do not rely on preempt_count in print_vma_addr (Rafael Aquini) [1768386 1730471]
  - [mm] mm, swap: fix race between swap count continuation operations (Rafael Aquini) [1768386 1730471]
  - [mm] mm: meminit: mark init_reserved_page as __meminit (Rafael Aquini) [1768386 1730471]
  - [mm] mm/vmstat.c: fix wrong comment (Rafael Aquini) [1768386 1730471]
  - [mm] mm, hugetlb: do not allocate non-migrateable gigantic pages from movable zones (Rafael Aquini) [1768386 1730471]
  - [mm] mm: always flush VMA ranges affected by zap_page_range (Rafael Aquini) [1768386 1730471]
  - [mm] mm/mremap: fail map duplication attempts for private mappings (Rafael Aquini) [1768386 1730471]
  - [mm] mm/mmap.c: do not blow on PROT_NONE MAP_FIXED holes in the stack (Rafael Aquini) [1768386 1730471]
  - [mm] mm: numa: avoid waiting on freed migrated pages (Rafael Aquini) [1768386 1730471]
  - [mm] mm/memory-failure.c: use compound_head() flags for huge pages (Rafael Aquini) [1768386 1730471]
  - [fs] fs/block_dev: always invalidate cleancache in invalidate_bdev() (Rafael Aquini) [1768386 1730471]
  - [mm] percpu: remove unused chunk_alloc parameter from pcpu_get_pages() (Rafael Aquini) [1768386 1730471]
  - [mm] percpu: acquire pcpu_lock when updating pcpu_nr_empty_pop_pages (Rafael Aquini) [1768386 1730471]
  - [mm] mm: do not access page->mapping directly on page_endio (Rafael Aquini) [1768386 1730471]
  - [mm] mm/page_alloc: fix nodes for reclaim in fast path (Rafael Aquini) [1768386 1730471]
  - [mm] mm: alloc_contig_range: allow to specify GFP mask (Rafael Aquini) [1768386 1730471]
  - [mm] mm: vmscan: scan dirty pages even in laptop mode (Rafael Aquini) [1768386 1730471]
  - [mm] mm/mempolicy.c: do not put mempolicy before using its nodemask (Rafael Aquini) [1768386 1730471]
  - [mm] mm: fix set pageblock migratetype in deferred struct page init (Rafael Aquini) [1768386 1730471]
  - [mm] mm: delete unnecessary and unsafe init_tlb_ubc() (Rafael Aquini) [1768386 1730471]
  - [kernel] mm, mempolicy: task->mempolicy must be NULL before dropping final reference (Rafael Aquini) [1768386 1730471]
  - [mm] mm: use phys_addr_t for reserve_bootmem_region() arguments (Rafael Aquini) [1768386 1730471]
  - [mm] mm/huge_memory: replace VM_NO_THP VM_BUG_ON with actual VMA check (Rafael Aquini) [1768386 1730471]
  - [mm] mm: soft-offline: check return value in second __get_any_page() call (Rafael Aquini) [1768386 1730471]
  - [include] include/linux/memblock.h: fix ordering of 'flags' argument in comments (Rafael Aquini) [1768386 1730471]
  - [mm] rmap: fix theoretical race between do_wp_page and shrink_active_list (Rafael Aquini) [1768386 1730471]
  - [mm] mm/mremap.c: clean up goto just return ERR_PTR (Rafael Aquini) [1768386 1730471]
  - [mm] mremap should return -ENOMEM when __vm_enough_memory fail (Rafael Aquini) [1768386 1730471]
  - [mm] writeback: fix possible underflow in write bandwidth calculation (Rafael Aquini) [1768386 1730471]
  - [mm] writeback: add missing INITIAL_JIFFIES init in global_update_bandwidth() (Rafael Aquini) [1768386 1730471]
  - [mm] mm/memory.c: actually remap enough memory (Rafael Aquini) [1768386 1730471]
  - [mm] mm/compaction: fix wrong order check in compact_finished() (Rafael Aquini) [1768386 1730471]
  - [mm] mm, vmscan: prevent kswapd livelock due to pfmemalloc-throttled process being killed (Rafael Aquini) [1768386 1730471]
  - [mm] mm: fix anon_vma_clone() error treatment (Rafael Aquini) [1768386 1730471]
  - [mm] mm, thp: fix collapsing of hugepages on madvise (Rafael Aquini) [1768386 1730471]
  - [mm] cgroup/kmemleak: add kmemleak_free() for cgroup deallocations (Rafael Aquini) [1768386 1730471]
  - [mm] OOM, PM: OOM killed task shouldn't escape PM suspend (Rafael Aquini) [1768386 1730471]
  - [mm] mm, compaction: pass gfp mask to compact_control (Rafael Aquini) [1768386 1730471]
  - [mm] mm: page_alloc: abort fair zone allocation policy when remotes nodes are encountered (Rafael Aquini) [1768386 1730471]
  - [mm] mm: vmscan: only update per-cpu thresholds for online CPU (Rafael Aquini) [1768386 1730471]
  - [mm] mm, thp: replace smp_mb after atomic_add by smp_mb__after_atomic (Rafael Aquini) [1768386 1730471]
  - [mm] mm, thp: move invariant bug check out of loop in __split_huge_page_map (Rafael Aquini) [1768386 1730471]
  - [mm] thp: consolidate assert checks in __split_huge_page() (Rafael Aquini) [1768386 1730471]
  - [mm] mm: fix sleeping function warning from __put_anon_vma (Rafael Aquini) [1768386 1730471]
  - [mm] mm: cleanup add_to_page_cache_locked() (Rafael Aquini) [1768386 1730471]
  - [mm] mm: mempolicy: turn vma_set_policy() into vma_dup_policy() (Rafael Aquini) [1768386 1730471]
  - [powerpc] powerpc/pseries: correctly track irq state in default idle (Steve Best) [1767620 1751970]
  - [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705004 1705005] {CVE-2019-11487}
  - [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705004 1705005] {CVE-2019-11487}


author: Bruno Meneguele <bmeneg@redhat.com> [3.10.0-1062.2.1.el7]
changelog:
  - [x86] aesni: initialize gcm(aes) cryptd child's key/authsize (Sabrina Dubroca) [1744442 1698551]
  - [netdrv] bnx2x: Disable multi-cos feature (Manish Chopra) [1741926 1704157]


author: Bruno Meneguele <bmeneg@redhat.com> [3.10.0-1062.3.1.el7]
changelog:
  - [net] Bluetooth: Fix faulty expression for minimum encryption key size check (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
  - [net] Bluetooth: Fix regression with minimum encryption key size alignment (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
  - [net] Bluetooth: Align minimum encryption key size for LE and BR/EDR connections (Gopal Tiwari) [1743084 1743085] {CVE-2019-9506}
  - [net] macvlan: Support bonding events (Davide Caratti) [1751579 1733589]
  - [wireless] mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [wireless] mwifiex: Mark expected switch fall-through (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [wireless] mwifiex: Fix skipped vendor specific IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [wireless] mwifiex: fix 802.11n/WPA detection (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [wireless] mwifiex: Don't abort on small, spec-compliant vendor IEs (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [wireless] mwifiex: Abort at too short BSS descriptor element (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [wireless] mwifiex: Fix possible buffer overflows at parsing bss descriptor (Stanislaw Gruszka) [1714469 1721742 1714470 1721743] {CVE-2019-10126 CVE-2019-3846}
  - [net] sunrpc: Fix possible autodisconnect during connect due to old last_used (Dave Wysochanski) [1749290 1723537]
  - [drm] drm/ast: Fixed reboot test may cause system hanged (Dave Airlie) [1749296 1739971]
  - [block] block: blk_init_allocated_queue() set q->fq as NULL in the fail case (Ming Lei) [1739326 1739327] {CVE-2018-20856}
  - [pci] PCI: hv: Fix a use-after-free bug in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: Add hv_pci_remove_slots() when we unload the driver (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: Fix a memory leak in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: support reporting serial number as slot information (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: Remove unused reason for refcount handler (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: Convert hv_pci_dev.refs from atomic_t to refcount_t (Mohammed Gamal) [1748239 1732924]
  - [pci] PCI: hv: Remove the bogus test in hv_eject_device_work() (Mohammed Gamal) [1748239 1732924]
  - [fs] NFSv4: Replace closed stateids with the "invalid special stateid" (Steve Dickson) [1744946 1733347]
  - [nvme] nvme-rdma: use dynamic dma mapping per command (David Milburn) [1744444 1637693]
  - [nvme] nvme-rdma: remove redundant reference between ib_device and tagset (David Milburn) [1744444 1637693]
  - [nvme] nvme-rdma: always have a valid trsvcid (David Milburn) [1744443 1717536]
  - [nvme] nvme-rdma: use inet_pton_with_scope helper (David Milburn) [1744443 1717536]
  - [nvme] nvmet-rdma: use generic inet_pton_with_scope (David Milburn) [1744443 1717536]
  - [iommu] x86/hyper-v: add msi_setup_irq/msi_alloc_irq stubs to fix x2apic mode (Vitaly Kuznetsov) [1743324 1736750]
  - [mm] slub: make dead caches discard free slabs immediately (Aristeu Rozanski) [1741920 1649189]
  - [mm] mm: charge/uncharge kmemcg from generic page allocator paths (Aristeu Rozanski) [1741920 1649189]
  - [mm] memcg: do not account memory used for cache creation (Aristeu Rozanski) [1741920 1649189]
  - [mm] memcg: also test for skip accounting at the page allocation level (Aristeu Rozanski) [1741920 1649189]
  - [fs] kmemcg: account certain kmem allocations to memcg (Aristeu Rozanski) [1741920 1649189]
  - [mm] vmalloc: allow to account vmalloc to memcg (Aristeu Rozanski) [1741920 1649189]
  - [mm] slab: add SLAB_ACCOUNT flag (Aristeu Rozanski) [1741920 1649189]
  - [include] memcg: only account kmem allocations marked as __GFP_ACCOUNT (Aristeu Rozanski) [1741920 1649189]
  - [include] mm: get rid of __GFP_KMEMCG (Aristeu Rozanski) [1741920 1649189]
  - [mm] slb: charge slabs to kmemcg explicitly (Aristeu Rozanski) [1741920 1649189]
  - [mm] mm: rename allocflags_to_migratetype for clarity (Rafael Aquini) [1741920 1730471]
  - [x86] cpuidle-haltpoll: disable host side polling when kvm virtualized (Marcelo Tosatti) [1740192 1734501]
  - [kvm] kvm: x86: add host poll control msrs (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: add haltpoll governor (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] governors: unify last_state_idx (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: add poll_limit_ns to cpuidle_device structure (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] add cpuidle-haltpoll driver (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: poll_state: Fix default time limit (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: poll_state: Disregard disable idle states (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: poll_state: Revise loop termination condition (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: menu: Fix wakeup statistics updates for polling state (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: poll_state: Avoid invoking local_clock() too often (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: poll_state: Add time limit to poll_idle() (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: Move polling state initialization code to separate file (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: Remove time measurement in poll state (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: Set polling in poll_idle (Marcelo Tosatti) [1740192 1734501]
  - [cpuidle] cpuidle: dont call poll_idle_init() for every cpu (Marcelo Tosatti) [1740192 1734501]
  - [hv] hv: vmbus: Implement Direct Mode for stimer0 (Vitaly Kuznetsov) [1740188 1712344]
  - [kernel] sched: Reduce contention in update_cfs_rq_blocked_load() (Marcelo Tosatti) [1740180 1734515]
  - [ipc] ipc: drop non-RCU allocation (Vladis Dronov) [1740178 1733016]
  - [ipc] ipc/util.c: use kvfree() in ipc_rcu_free() (Vladis Dronov) [1740178 1733016]
  - [ipc] tree wide: use kvfree() than conditional kfree()/vfree() (Vladis Dronov) [1740178 1733016]
  - [ipc] standardize code comments (Waiman Long) [1740178 1373519]
  - [ipc] whitespace cleanup (Waiman Long) [1740178 1373519]
  - [fs] gfs2: gfs2_walk_metadata fix (Andreas Grunbacher) [1737373 1724362]
  - [fs] gfs2: Inode dirtying fix (Andreas Grunbacher) [1737373 1724362]
  - [fs] gfs2: Fix rounding error in gfs2_iomap_page_prepare (Andreas Grunbacher) [1737373 1724362]
  - [fs] iomap: fix page_done callback for short writes (Andreas Grunbacher) [1737373 1724362]
  - [fs] fs: fold __generic_write_end back into generic_write_end (Andreas Grunbacher) [1737373 1724362]
  - [fs] iomap: don't mark the inode dirty in iomap_write_end (Andreas Grunbacher) [1737373 1724362]
  - [fs] gfs2: Fix iomap write page reclaim deadlock (Andreas Grunbacher) [1737373 1724362]
  - [fs] iomap: Add a page_prepare callback (Andreas Grunbacher) [1737373 1724362]
  - [fs] iomap: Fix use-after-free error in page_done callback (Andreas Grunbacher) [1737373 1724362]
  - [fs] fs: Turn __generic_write_end into a void function (Andreas Grunbacher) [1737373 1724362]
  - [fs] iomap: Clean up __generic_write_end calling (Andreas Grunbacher) [1737373 1724362]


author: Bruno Meneguele <bmeneg@redhat.com> [3.10.0-1062.4.2.el7]
changelog:
  - [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
  - [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756815 1756816] {CVE-2019-0154}
  - [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915/cmdparser: Use explicit goto for error paths (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756882 1756883] {CVE-2019-0155}
  - [x86] tsx: Add config options to set tsx=on|off|auto (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] tsx: Add "auto" option to the tsx= cmdline parameter (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] cpu: Add a "tsx=" cmdline option with TSX disabled by default (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [x86] msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766539 1766540] {CVE-2019-11135}
  - [documentation] documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: mmu: Recovery of shattered NX large pages (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [virt] kvm: Add helper function for creating VM worker threads (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [kernel] cpu/speculation: Uninline and export CPU mitigations helpers (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] cpu: Add Tremont to the cpu vulnerability whitelist (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: vmx, svm: always run with EFER.NXE=1 when shadow paging is active (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: add tracepoints around __direct_map and FNAME(fetch) (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: mmu: Do not release the page inside mmu_set_spte() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: x86: mmu: Remove unused parameter of __direct_map() (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [virt] kvm: Convert kvm_lock to a mutex (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [x86] kvm: mmu: drop vcpu param in gpte_access (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}
  - [virt] kvm: x86, powerpc: do not allow clearing largepages debugfs entry (Paolo Bonzini) [1733009 1690343] {CVE-2018-12207}


author: Bruno Meneguele <bmeneg@redhat.com> [3.10.0-1062.4.3.el7]
changelog:
  - [drm] drm/i915/cmdparser: Fix jump whitelist clearing (Dave Airlie) [1756882 1756883] {CVE-2019-0155}


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.3.1.el7]
changelog:
  - [md] md/raid6: Set R5_ReadError when there is read failure on parity disk (Xiao Ni) [1810062 1804569]
  - [kernel] blktrace: fix dereference after null check (Ming Lei) [1806367 1798318] {CVE-2019-19768}
  - [kernel] blktrace: Protect q->blk_trace with RCU (Ming Lei) [1806367 1798318] {CVE-2019-19768}
  - [kernel] blktrace: fix trace mutex deadlock (Ming Lei) [1806367 1798318] {CVE-2019-19768}
  - [kernel] blktrace: fix unlocked registration of tracepoints (Ming Lei) [1806367 1798318] {CVE-2019-19768}
  - [kernel] blktrace: fix unlocked access to init/start-stop/teardown (Ming Lei) [1806367 1798318] {CVE-2019-19768}


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.4.1.el7]
changelog:
  - [x86] kvm: x86: do not reset microcode version on INIT or RESET (Paolo Bonzini) [1814003 1801852]
  - [x86] kvm: x86: list MSR_IA32_UCODE_REV as an emulated MSR (Paolo Bonzini) [1814003 1801852]
  - [x86] kvm: x86: Allow userspace to define the microcode version (Paolo Bonzini) [1814003 1801852]


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.5.1.el7]
changelog:
  - [netdrv] hv/netvsc: Fix NULL dereference at single queue mode fallback (Mohammed Gamal) [1817935 1806488]
  - [netdrv] hv/netvsc: fix handling of fallback to single queue mode (Mohammed Gamal) [1817935 1806488]
  - [netdrv] hv_netvsc: Fix unwanted rx_table reset (Mohammed Gamal) [1817935 1806488]
  - [netdrv] hv_netvsc: Fix tx_table init in rndis_set_subchannel() (Mohammed Gamal) [1817935 1806488]
  - [netdrv] hv_netvsc: fix typos in code comments (Mohammed Gamal) [1817935 1806488]
  - [netdrv] hv_netvsc: Fix a deadlock by getting rtnl lock earlier in netvsc_probe() (Mohammed Gamal) [1817935 1806488]
  - [netdrv] hv_netvsc: Fix hash key value reset after other ops (Mohammed Gamal) [1817935 1806488]
  - [netdrv] hv_netvsc: Refactor assignments of struct netvsc_device_info (Mohammed Gamal) [1817935 1806488]
  - [netdrv] hv_netvsc: split sub-channel setup into async and sync (Mohammed Gamal) [1817935 1806488]
  - [netdrv] hv_netvsc: Fix send_table offset in case of a host bug (Mohammed Gamal) [1817935 1806488]
  - [netdrv] hv_netvsc: Add NetVSP v6 and v6.1 into version negotiation (Mohammed Gamal) [1817935 1806488]
  - [netdrv] hv_netvsc: Fix offset usage in netvsc_send_table() (Mohammed Gamal) [1817935 1806488]
  - [netdrv] hv_netvsc: simplify receive side calling arguments (Mohammed Gamal) [1817935 1806488]


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.6.1.el7]
changelog:
  - [x86] x86/debug: Extend the lower bound of crash kernel low reservations (Pingfan Liu) [1817502 1811511]


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.7.1.el7]
changelog:
  - [net] sched: flower: insert new filter to idr after setting its mask (Davide Caratti) [1824548 1785141]
  - [netdrv] r8169: fix network stalls due to missing bit TXCFG_AUTO_FIFO (Corinna Vinschen) [1822548 1787263]
  - [net] net_sched: remove a bogus warning in hfsc (Davide Caratti) [1821262 1781323]
  - [net] tcp: make tcp_space() aware of socket backlog (Guillaume Nault) [1817499 1790840]
  - [scsi] iscsi: Avoid potential deadlock in iscsi_if_rx func (Oleksandr Natalenko) [1817497 1715986]
  - [scsi] scsi: avoid repetitive logging of device offline messages (Nilesh Javali) [1815596 1798042]
  - [scsi] qla2xxx: Fix I/Os being passed down when FC device is being deleted (Nilesh Javali) [1815596 1798042]
  - [scsi] scsi: qla2xxx: Fix unbound sleep in fcport delete path (Nilesh Javali) [1815596 1798042]
  - [scsi] scsi: qla2xxx: Fix hang in fcport delete path (Nilesh Javali) [1815596 1798042]
  - [scsi] scsi: qla2xxx: Fix stuck session in GNL (Nilesh Javali) [1815596 1798042]
  - [scsi] scsi: qla2xxx: Correct fcport flags handling (Nilesh Javali) [1815596 1798042]
  - [scsi] scsi: qla2xxx: Remove defer flag to indicate immeadiate port loss (Nilesh Javali) [1815596 1798042]
  - [scsi] scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Tomas Henzl) [1813249 1807077]
  - [md] dm mpath: call clear_request_fn_mpio() in multipath_release_clone() (Mike Snitzer) [1812937 1806400]
  - [scsi] scsi: implement .cleanup_rq callback (Mike Snitzer) [1812937 1806400]
  - [md] blk-mq: add callback of .cleanup_rq (Mike Snitzer) [1812937 1806400]
  - [md] dm rq: fix checking of dm_dispatch_clone_request's return value (Ming Lei) [1814537 1805401]


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.9.1.el7]
changelog:
  - [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827239 1827240] {CVE-2020-10711}
  - [scsi] scsi: qla2xxx: Fix a NULL pointer dereference in an error path (Nilesh Javali) [1832221 1808129]
  - [scsi] scsi: qla2xxx: Use common routine to free fcport struct (Nilesh Javali) [1832221 1808129]
  - [block] blk-mq: fix hang caused by freeze/unfreeze sequence (Ming Lei) [1824546 1821718]


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.10.1.el7]
changelog:
  - [fs] revert "[fs] xfs: catch bad stripe alignment configurations" (Carlos Maiolino) [1839697 1836292]
  - [netdrv] hv_netvsc: Fix error handling in netvsc_set_features() (Mohammed Gamal) [1838600 1821814]
  - [netdrv] hv_netvsc: Sync offloading features to VF NIC (Mohammed Gamal) [1838600 1821814]
  - [netdrv] hv_netvsc: Fix IP header checksum for coalesced packets (Mohammed Gamal) [1838600 1821814]
  - [netdrv] hv_netvsc: Fix rndis_per_packet_info internal field initialization (Mohammed Gamal) [1838600 1821814]
  - [netdrv] hv_netvsc: Add handler for LRO setting change (Mohammed Gamal) [1838600 1821814]
  - [netdrv] hv_netvsc: Add support for LRO/RSC in the vSwitch (Mohammed Gamal) [1838600 1821814]
  - [netdrv] hv_netvsc: Add handlers for ethtool get/set msg level (Mohammed Gamal) [1838600 1821814]
  - [netdrv] hv_netvsc: Fix the variable sizes in ipsecv2 and rsc offload (Mohammed Gamal) [1838600 1821814]
  - [lib] kobject: don't use WARN for registration failures (Ewan Milne) [1836890 1756495]
  - [lib] lib/kobject: Join string literals back (Ewan Milne) [1836890 1756495]
  - [scsi] Fix abort timeouts in CQ Full conditions (Dick Kennedy) [1835675 1802654]


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.11.1.el7]
changelog:
  - [fs] cachefiles: Fix race between read_waiter and read_copier involving op->to_do (Dave Wysochanski) [1839757 1829662]


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.12.1.el7]
changelog:
  - [x86] x86/speculation: Prevent deadlock on ssb_state::lock (Waiman Long) [1841121 1836322]
  - [vfio] vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson) [1837297 1820632] {CVE-2020-12888}
  - [vfio] vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson) [1837297 1820632] {CVE-2020-12888}
  - [vfio] vfio/type1: Support faulting PFNMAP vmas (Alex Williamson) [1837297 1820632] {CVE-2020-12888}
  - [vfio] vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Alex Williamson) [1837297 1820632] {CVE-2020-12888}
  - [vfio] vfio/pci: call irq_bypass_unregister_producer() before freeing irq (Alex Williamson) [1837297 1820632] {CVE-2020-12888}
  - [vfio] vfio_pci: Enable memory accesses before calling pci_map_rom (Alex Williamson) [1837297 1820632] {CVE-2020-12888}


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.13.1.el7]
changelog:
  - [x86] x86/speculation: Support old struct x86_cpu_id & x86_match_cpu() kABI (Waiman Long) [1827187 1827188] {CVE-2020-0543}
  - [documentation] x86/speculation: Add Ivy Bridge to affected list (Waiman Long) [1827187 1827188] {CVE-2020-0543}
  - [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Waiman Long) [1827187 1827188] {CVE-2020-0543}
  - [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Waiman Long) [1827187 1827188] {CVE-2020-0543}
  - [x86] x86/cpu: Add 'table' argument to cpu_matches() (Waiman Long) [1827187 1827188] {CVE-2020-0543}
  - [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Waiman Long) [1827187 1827188] {CVE-2020-0543}
  - [x86] x86/cpu/bugs: Convert to new matching macros (Waiman Long) [1827187 1827188] {CVE-2020-0543}
  - [x86] x86/cpu: Add consistent CPU match macros (Waiman Long) [1827187 1827188] {CVE-2020-0543}
  - [cpufreq] x86/devicetable: Move x86 specific macro out of generic code (Waiman Long) [1827187 1827188] {CVE-2020-0543}
  - [x86] x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header (Waiman Long) [1827187 1827188] {CVE-2020-0543}


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.14.1.el7]
changelog:
  - [fs] NFS: Fix a race between mmap() and O_DIRECT (Benjamin Coddington) [1845520 1813803]
  - [fs] NFS: Remove a redundant call to unmap_mapping_range() (Benjamin Coddington) [1845520 1813803]
  - [fs] NFS: Remove redundant waits for O_DIRECT in fsync() and write_begin() (Benjamin Coddington) [1845520 1813803]
  - [fs] NFS: Cleanup nfs_direct_complete() (Benjamin Coddington) [1845520 1813803]
  - [fs] NFS: Do not serialise O_DIRECT reads and writes (Benjamin Coddington) [1845520 1813803]
  - [fs] NFS: Move buffered I/O locking into nfs_file_write() (Benjamin Coddington) [1845520 1813803]
  - [fs] bdi: make inode_to_bdi() inline (Benjamin Coddington) [1845520 1813803]
  - [fs] NFS: Remove racy size manipulations in O_DIRECT (Benjamin Coddington) [1845520 1813803]
  - [fs] NFS: Don't hold the inode lock across fsync() (Benjamin Coddington) [1845520 1813803]
  - [fs] nfs: remove nfs_inode_dio_wait (Benjamin Coddington) [1845520 1813803]
  - [fs] nfs: remove nfs4_file_fsync (Benjamin Coddington) [1845520 1813803]
  - [fs] NFS: Kill NFS_INO_NFS_INO_FLUSHING: it is a performance killer (Benjamin Coddington) [1845520 1813803]
  - [infiniband] RDMA/bnxt_re: Fix chip number validation Broadcom's Gen P5 series (Jonathan Toppins) [1834190 1823679]


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.15.1.el7]
changelog:
  - [fs] ext4: fix setting of referenced bit in ext4_es_lookup_extent() (Lukas Czerner) [1847343 1663720]
  - [fs] ext4: introduce aging to extent status tree (Lukas Czerner) [1847343 1663720]
  - [fs] ext4: cleanup flag definitions for extent status tree (Lukas Czerner) [1847343 1663720]
  - [fs] ext4: limit number of scanned extents in status tree shrinker (Lukas Czerner) [1847343 1663720]
  - [fs] ext4: move handling of list of shrinkable inodes into extent status code (Lukas Czerner) [1847343 1663720]
  - [fs] ext4: change LRU to round-robin in extent status tree shrinker (Lukas Czerner) [1847343 1663720]
  - [net] netfilter: nat: never update the UDP checksum when it's 0 (Guillaume Nault) [1847333 1834278]
  - [char] ipmi_si: Only schedule continuously in the thread in maintenance mode (Alexey Klimov) [1841825 1837127]
  - [scsi] scsi: ibmvfc: Fix NULL return compiler warning (Steve Best) [1830889 1810643]
  - [scsi] scsi: ibmvfc: Avoid loss of all paths during SVC node reboot (Steve Best) [1830889 1810643]
  - [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1803448 1814257] {CVE-2019-19527}
  - [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1803448 1814257] {CVE-2019-19527}


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.16.1.el7]
changelog:
  - [kernel] sched/fair: Scale bandwidth quota and period without losing quota/period ratio precision (Artem Savkov) [1850500 1752067]
  - [block] virtio-blk: improve virtqueue error to BLK_STS (Philipp Rudo) [1842994 1818001]
  - [block] virtio-blk: fix hw_queue stopped on arbitrary error (Philipp Rudo) [1842994 1818001]


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.17.1.el7]
changelog:
  - [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1852245 1820632]
  - [fs] aio: fix inconsistent ring state (Jeff Moyer) [1850055 1845326]
  - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844069 1844070] {CVE-2020-12654}
  - [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844025 1844026] {CVE-2020-12653}
  - [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843436 1843437] {CVE-2020-10757}
  - [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843436 1843437] {CVE-2020-10757}
  - [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843436 1843437] {CVE-2020-10757}
  - [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843436 1843437] {CVE-2020-10757}


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.18.1.el7]
changelog:
  - [fs] locks: allow filesystems to request that ->setlease be called without i_lock (Jeff Layton) [1838602 1830606]
  - [fs] locks: move fasync setup into generic_add_lease (Jeff Layton) [1838602 1830606]


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.18.2.el7]
changelog:
  - [crypto] pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1837429 1837430] {CVE-2020-10713}
  - [kernel] Move to dual-signing to split signing keys up better (pjones) [1837429 1837430] {CVE-2020-10713}


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.19.1.el7]
changelog:
  - [mm] memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event (Waiman Long) [1867441 1842715]
  - [mm] memcg: only free spare array when readers are done (Waiman Long) [1867441 1842715]
  - [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1866971 1862840]
  - [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1866971 1862840]
  - [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1866971 1862840]


author: Augusto Caringi <acaringi@redhat.com> [3.10.0-1127.1.1.el7]
changelog:
  - [net] openvswitch: support asymmetric conntrack (Aaron Conole) [1806447 1757759]
  - [kernel] audit: CONFIG_CHANGE don't log internal bookkeeping as an event (Richard Guy Briggs) [1806430 1777239]
  - [kernel] tracing: Fix possible double free on failure of allocating trace buffer (Jerome Marchand) [1803010 1803011] {CVE-2017-18595}
  - [kernel] tracing: Fix crash when it fails to alloc ring buffer (Jerome Marchand) [1803010 1803011] {CVE-2017-18595}
  - [base] of: to support binding numa node to specified device in devicetree (Jeff Moyer) [1801699 1791883]
  - [ptp] ptp: free ptp device pin descriptors properly (Vladis Dronov) [1798396 1774657]
  - [ptp] ptp: fix the race between the release of ptp_clock and cdev (Vladis Dronov) [1798396 1774657]
  - [ptp] ptp: Fix pass zero to ERR_PTR() in ptp_clock_register (Vladis Dronov) [1798396 1774657]
  - [ptp] ptp: create "pins" together with the rest of attributes (Vladis Dronov) [1798396 1774657]
  - [ptp] ptp: use is_visible method to hide unused attributes (Vladis Dronov) [1798396 1774657]
  - [ptp] ptp: use kcalloc when allocating arrays (Vladis Dronov) [1798396 1774657]
  - [ptp] ptp: do not explicitly set drvdata in ptp_clock_register() (Vladis Dronov) [1798396 1774657]
  - [ptp] drivers/ptp: Fix kernel memory disclosure (Vladis Dronov) [1798396 1774657]
  - [ptp] ptp: Fix resource leak in case of error (Vladis Dronov) [1798396 1774657]
  - [netdrv] ptp: drivers: set the number of programmable pins (Vladis Dronov) [1798396 1774657]
  - [ptp] ptp: expose the programmable pins via sysfs (Vladis Dronov) [1798396 1774657]
  - [documentation] ptp: add the pin GET/SETFUNC ioctls to the testptp program (Vladis Dronov) [1798396 1774657]
  - [documentation] ptp: Allow selecting trigger/event index in testptp (Vladis Dronov) [1798396 1774657]
  - [documentation] ptp: add the PTP_SYS_OFFSET ioctl to the testptp program (Vladis Dronov) [1798396 1774657]
  - [netdrv] ixgbevf: Use cached link state instead of re-reading the value for ethtool (Ken Cox) [1796799 1794812]
  - [kernel] sched: Fix schedule_tail() to disable preemption (Phil Auld) [1796262 1771094]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1119.el7]
changelog:
  - [x86] mm: serialize against gup_fast in pmdp_splitting_flush() (Vitaly Kuznetsov) [1674266]
  - [vhost] vsock: split packets to send using multiple buffers (Stefano Garzarella) [1777349]
  - [md] md/raid10: prevent access of uninitialized resync_pages offset (Nigel Croxon) [1767935]
  - [x86] perf/x86: Modify error message in virtualized environment (Michael Petlan) [1759758]
  - [fs] cifs: Fix infinite loop when using hard mount option (Dave Wysochanski) [1770404]
  - [wireless] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Stanislaw Gruszka) [1776157] {CVE-2019-14901}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1120.el7]
changelog:
  - [md] raid5: need to set STRIPE_HANDLE for batch head (Xiao Ni) [1774330]
  - [drm] drm/radeon: fix si_enable_smc_cac() failed issue (Dave Airlie) [1780026]
  - [block] block: don't change REQ_NR_BITS (Ming Lei) [1779712]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1121.el7]
changelog:
  - [platform] thinkpad_acpi: Don't yell on unsupported brightness interfaces (Lyude Paul) [1305619]
  - [platform] thinkpad-acpi: fix handle locate for video and query of _BCL (Lyude Paul) [1305619]
  - [s390] kernel: avoid cpu yield in SMT environment (Philipp Rudo) [1777876]
  - [scsi] scsi: qla2xxx: Fix incorrect SFUB length used for Secure Flash Update MB Cmd (Himanshu Madhani) [1783016]
  - [scsi] scsi: qla2xxx: Added support for MPI and PEP regions for ISP28XX (Himanshu Madhani) [1783016]
  - [scsi] scsi: qla2xxx: Correctly retrieve and interpret active flash region (Himanshu Madhani) [1783016]
  - [powerpc] KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel (Gustavo Duarte) [1777710]
  - [powerpc] powerpc/book3s64: Fix link stack flush on context switch (Gustavo Duarte) [1777710]
  - [powerpc] powerpc/64s: support nospectre_v2 cmdline option (Gustavo Duarte) [1777710]
  - [net] openvswitch: fix flow command message size (Paolo Abeni) [1776578]
  - [block] brd: re-enable __GFP_HIGHMEM in brd_insert_page() (Jeff Moyer) [1781298]
  - [block] brd: remove dax support (Jeff Moyer) [1781298]
  - [nvme] nvme: don't access the inlined bio after nvmet request is completed (Ming Lei) [1631120]
  - [fs] epoll: fix race between ep_poll_callback(POLLFREE) and ep_free()/ep_remove() (Miklos Szeredi) [1780128]
  - [nvme] nvme: fix NULL pointer dereference in nvme_init_subsystem (Ewan Milne) [1781316]
  - [nvme] nvme-fabrics: allow duplicate connections to the discovery controller (Ewan Milne) [1781316]
  - [scsi] scsi: bnx2fc: timeout calculation invalid for bnx2fc_eh_abort() (Nilesh Javali) [1772966]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1122.el7]
changelog:
  - [drm] drm/amd/powerplay: use hardware fan control if no powerplay fan table (Lyude Paul) [1729286]
  - [nvme] nvme-fc: fix double-free scenarios on hw queues (Ewan Milne) [1731286]
  - [x86] kvm: vmx: use MSR_IA32_TSX_CTRL to hard-disable TSX on guest that lack it (Paolo Bonzini) [1779768]
  - [x86] kvm: vmx: implement MSR_IA32_TSX_CTRL disable RTM functionality (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm: x86: Mark expected switch fall-throughs (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm: x86: implement MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm: x86: do not modify masked bits of shared MSRs (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm: x86: fix presentation of TSX feature in ARCH_CAPABILITIES (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [x86] kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Paolo Bonzini) [1779768] {CVE-2019-19338}
  - [s390] s390/qeth: ensure linear access to packet headers (Philipp Rudo) [1782927]
  - [s390] s390/qeth: guard against runt packets (Philipp Rudo) [1782927]
  - [s390] s390/qeth: consolidate skb allocation (Philipp Rudo) [1782927]
  - [s390] s390/qeth: clean up page frag creation (Philipp Rudo) [1782927]
  - [netdrv] i40e: Fix for persistent lldp support (Stefan Assmann) [1782689]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1123.el7]
changelog:
  - [mm] mm: prevent get_user_pages() from overflowing page refcount (Aristeu Rozanski) [1705005] {CVE-2019-11487}
  - [mm] mm/hugetlb.c: __get_user_pages ignores certain follow_hugetlb_page errors (Aristeu Rozanski) [1705005] {CVE-2019-11487}
  - [fs] CIFS: avoid using MID 0xFFFF (Leif Sahlberg) [1771255]
  - [net] netfilter: xt_TRACE: add explicitly nf_logger_find_get call (Phil Sutter) [1774444]
  - [wireless] rtlwifi: Fix potential overflow on P2P code (Josef Oskera) [1775236] {CVE-2019-17666}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1124.el7]
changelog:
  - [s390] s390: wire up sys_renameat2 (Miklos Szeredi) [1773504]
  - [net] ipvs: do not use random local source address for tunnels (Xin Long) [1786676]
  - [misc] mei: me: add cannon point device ids for 4th device (Jerry Snitselaar) [1745139]
  - [misc] mei: me: add cannon point device ids (Jerry Snitselaar) [1745139]
  - [netdrv] bnxt_en: Support all variants of the 5750X chip family (Jonathan Toppins) [1789345]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-1125.el7]
changelog:
  - [fs] mark struct file that had write access grabbed by open() (Miklos Szeredi) [1679829]
  - [fs] fold __get_file_write_access() into its only caller (Miklos Szeredi) [1679829]
  - [powerpc] get rid of DEBUG_WRITECOUNT (Miklos Szeredi) [1679829]
  - [fs] don't bother with {get, put}_write_access() on non-regular files (Miklos Szeredi) [1679829]
  - [fs] gfs2: Use d_materialise_unique instead of d_splice_alias (2) (Andreas Grunbacher) [1784550]
  - [fs] gfs2: gfs2_create_inode(): don't bother with d_splice_alias() (Andreas Grunbacher) [1784550]
  - [fs] gfs2: bugger off early if O_CREAT open finds a directory (Andreas Grunbacher) [1784550]
  - [fs] libceph: fix PG split vs OSD (re)connect race (Ilya Dryomov) [1785656]
  - [scsi] Fix driver intialization failure for sli4 non nvme (Dick Kennedy) [1783899]
  - [netdrv] hv_netvsc: fix race that may miss tx queue wakeup (Mohammed Gamal) [1781322]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-862.8.1.el7]
changelog:
  - [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
  - [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
  - [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-862.9.1.el7]
changelog:
  - [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-862.10.1.el7]
changelog:
  - [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
  - [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
  - [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
  - [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
  - [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
  - [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
  - [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
  - [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
  - [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
  - [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
  - [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
  - [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
  - [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
  - [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
  - [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
  - [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
  - [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
  - [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
  - [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
  - [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
  - [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
  - [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
  - [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
  - [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
  - [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
  - [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
  - [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
  - [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
  - [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
  - [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
  - [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
  - [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
  - [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
  - [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-862.11.1.el7]
changelog:
  - [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
  - [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
  - [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
  - [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
  - [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
  - [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
  - [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
  - [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
  - [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
  - [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
  - [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [perf] core: Fix possible Spectre-v1 indexing for ->aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [include] nospec: Include <asm/barrier.h> dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
  - [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-862.11.2.el7]
changelog:
  - [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-862.11.3.el7]
changelog:
  - [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-862.11.4.el7]
changelog:
  - [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}


author: Frantisek Hrbata <fhrbata@hrbata.com> [3.10.0-862.11.5.el7]
changelog:
  - [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-862.11.6.el7]
changelog:
  - [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-862.12.1.el7]
changelog:
  - [fs] CIFS: Fix NULL pointer deref on SMB2_tcon() failure (Leif Sahlberg) [1609159 1591092]
  - [net] multicast: do not restore deleted record source filter mode to new one (Hangbin Liu) [1610380 1586321]
  - [net] multicast: remove useless parameter for group add (Hangbin Liu) [1610380 1586321]
  - [net] ipv6/mcast: init as INCLUDE when join SSM INCLUDE group (Hangbin Liu) [1610380 1586321]
  - [net] ipv4/igmp: init group mode as INCLUDE when join source group (Hangbin Liu) [1610380 1586321]
  - [net] ipv6: mcast: fix unsolicited report interval after receiving querys (Hangbin Liu) [1610380 1586321]
  - [net] ipv6: refactor ipv6_dev_mc_inc() (Hangbin Liu) [1610380 1586321]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-862.13.1.el7]
changelog:
  - [infiniband] ib/ipoib: Fix race condition in neigh creation (Don Dutile) [1616164 1520300]
  - [gpu] qxl: hook monitors_config updates into crtc, not encoder (Gerd Hoffmann) [1614349 1544322]
  - [gpu] qxl: move qxl_send_monitors_config() (Gerd Hoffmann) [1614349 1544322]
  - [gpu] qxl: remove qxl_io_log() (Gerd Hoffmann) [1614349 1544322]
  - [kernel] locking: Introduce smp_mb__after_spinlock() (Steve Best) [1613814 1496574]
  - [scsi] ibmvfc: Avoid unnecessary port relogin (Steve Best) [1613202 1605080]
  - [powerpc] stf-barrier: update (rfi_)enabled_flush_types as in upstream (Gustavo Duarte) [1612353 1585297]
  - [powerpc] stf-barrier: update debugfs as in upstream (Gustavo Duarte) [1612353 1585297]
  - [powerpc] stf-barrier: update handle_ssbd() as in upstream (Gustavo Duarte) [1612353 1585297]
  - [powerpc] stf-barrier: update stf_barrier_enable() as in upstream (Gustavo Duarte) [1612353 1585297]
  - [powerpc] stf-barrier: add cpu_show_spec_store_bypass() as in upstream (Gustavo Duarte) [1612353 1585297]
  - [powerpc] stf-barrier: add comment as in upstream (Gustavo Duarte) [1612353 1585297]
  - [powerpc] stf-barrier: move code from setup_64.c to security.c as in upstream (Gustavo Duarte) [1612353 1585297]
  - [powerpc] stf-barrier: move code from setup.h to security_features.h as in upstream (Gustavo Duarte) [1612353 1585297]
  - [powerpc] stf-barrier: update fallback routine as in upstream (Gustavo Duarte) [1612353 1585297]
  - [powerpc] stf-barrier: update entry barrier slot as in upstream (Gustavo Duarte) [1612353 1585297]
  - [nvmet-fc] move tech preview warning to nvmet_fc_register_targetport call (Ewan Milne) [1610381 1608947]
  - [nvme-fc] move tech preview warning to nvme_fc_register_localport call (Ewan Milne) [1610381 1608947]
  - [block] blk-throttle: check stats_cpu before reading it from sysfs (Ming Lei) [1608228 1567748]
  - [powerpc] signals: Discard transaction state from signal frames (Steve Best) [1608227 1586153]
  - [ipc] shm.c: add split function to shm_vm_ops (Desnes Augusto Nunes do Rosario) [1608225 1586152]
  - [scsi] lpfc: Fix port initialization failure (Dick Kennedy) [1605235 1584377]
  - [vmbus] fix the missed signaling in hv_signal_on_read() (Vitaly Kuznetsov) [1605089 1591976]
  - [infiniband] ib/ipoib: Fix for potential no-carrier state (Donald Dutile) [1601935 1548474]
  - [vmwgfx] refuse to hibernate if we have any resources. (v2) (Dave Airlie) [1601516 1595136]
  - [netdrv] sfc: stop the TX queue before pushing new buffers (Xin Long) [1601353 1445576]
  - [lib] rhashtable: Fix rhlist duplicates insertion (Xin Long) [1601009 1559106]
  - [kernel] hrtimer: Allow concurrent hrtimer_start() for self restarting timers (Oleksandr Natalenko) [1600911 1574387]
  - [iommu] amd: Add NULL sanity check for struct irq_2_irte.ir_data (Suravee Suthikulpanit) [1600661 1542697]
  - [hid] wacom: Correct logical maximum Y for 2nd-gen Intuos Pro large (Benjamin Tissoires) [1600660 1591499]
  - [md] avoid NULL dereference to queue pointer (Ming Lei) [1600056 1581845]
  - [scsi] qla2xxx: Fix NULL pointer access for fcport structure (Himanshu Madhani) [1597546 1547714]
  - [scsi] csiostor: Add a soft dep on cxgb4 driver (Arjun Vynipadath) [1597529 1584003]
  - [mm] initialize pages on demand during boot (Masayoshi Mizuma) [1588366 1496330]
  - [mm] split deferred_init_range into initializing and freeing parts (Masayoshi Mizuma) [1588366 1496330]
  - [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}
  - [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
  - [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}
  - [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] speculation/l1tf: Fix up pte->pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
  - [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-862.14.1.el7]
changelog:
  - [x86] microcode: Allow late microcode loading with SMT disabled (Josh Poimboeuf) [1619622 1614515]
  - [infiniband] core: Fix nospec regression (Josh Poimboeuf) [1619624 1616346]
  - [x86] microcode/amd: Do not load when running on a hypervisor (Vitaly Kuznetsov) [1618390 1607899]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-862.14.2.el7]
changelog:
  - [uio] fix possible circular locking dependency (Xiubo Li) [1608677 1560418]
  - [scsi] tcmu: Don't pass KERN_ERR to pr_err (Xiubo Li) [1608677 1560418]
  - [scsi] tcmu: add module wide block/reset_netlink support (Xiubo Li) [1608677 1560418]
  - [scsi] tcmu: simplify nl interface (Xiubo Li) [1608677 1560418]
  - [scsi] tcmu: track nl commands (Xiubo Li) [1608677 1560418]
  - [scsi] tcmu: delete unused __wait (Xiubo Li) [1608677 1560418]
  - [uio] fix crash after the device is unregistered (Xiubo Li) [1608677 1560418]
  - [uio] change to use the mutex lock instead of the spin lock (Xiubo Li) [1608677 1560418]
  - [uio] Prevent device destruction while fds are open (Xiubo Li) [1608677 1560418]
  - [uio] Reduce return paths from uio_write() (Xiubo Li) [1608677 1560418]
  - [uio] fix incorrect memory leak cleanup (Xiubo Li) [1608677 1560418]
  - [uio] add missing error codes (Xiubo Li) [1608677 1560418]
  - [uio] fix false positive __might_sleep warning splat (Xiubo Li) [1608677 1560418]
  - [uio] Destroy uio_idr on module exit (Xiubo Li) [1608677 1560418]
  - [uio] don't free irq that was not requested (Xiubo Li) [1608677 1560418]
  - [uio] support memory sizes larger than 32 bits (Xiubo Li) [1608677 1560418]
  - [uio] we cannot mmap unaligned page contents (Xiubo Li) [1608677 1560418]
  - [uio] Pass pointers to virt_to_page(), not integers (Xiubo Li) [1608677 1560418]
  - [uio] fix memory leak (Xiubo Li) [1608677 1560418]
  - [uio] Request/free irq separate from dev lifecycle (Xiubo Li) [1608677 1560418]
  - [uio] Simplify uio error path by using devres functions (Xiubo Li) [1608677 1560418]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-862.14.3.el7]
changelog:
  - [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625980 1625991] {CVE-2018-14634}
  - [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625980 1625991] {CVE-2018-14634}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-862.14.4.el7]
changelog:
  - [scsi] Revert: lpfc: Fix port initialization failure (Radomir Vrbovsky) [1605235 1584377]
  - [scsi] Revert: qla2xxx: Fix NULL pointer access for fcport structure (Radomir Vrbovsky) [1597546 1547714]


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> [3.10.0-859.el7]
changelog:
  - [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
  - [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
  - [fs] Revert dcache_readdir back to ->readdir() ("Eric W. Biederman") [1525541]
  - [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
  - [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
  - [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
  - [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
  - [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
  - [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
  - [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
  - [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
  - [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
  - [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
  - [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
  - [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
  - [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
  - [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
  - [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
  - [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
  - [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
  - [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
  - [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
  - [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
  - [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
  - [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
  - [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
  - [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
  - [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
  - [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
  - [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
  - [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
  - [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> [3.10.0-860.el7]
changelog:
  - [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
  - [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
  - [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> [3.10.0-861.el7]
changelog:
  - [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
  - [nvme] validate admin queue before unquiesce (David Milburn) [1549733]


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> [3.10.0-862.el7]
changelog:
  - [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
  - [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
  - [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
  - [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-862.1.1.el7]
changelog:
  - [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
  - [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
  - [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
  - [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
  - [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
  - [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
  - [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
  - [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
  - [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
  - [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
  - [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
  - [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
  - [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
  - [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags & wrapper (Mauricio Oliveira) [1563096 1553927]
  - [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
  - [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
  - [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
  - [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
  - [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
  - [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
  - [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
  - [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
  - [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
  - [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
  - [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
  - [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
  - [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
  - [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
  - [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
  - [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
  - [crypto] chelsio: make skb_put & friends return void pointers (Arjun Vynipadath) [1561899 1548047]
  - [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
  - [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
  - [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
  - [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
  - [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
  - [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
  - [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
  - [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
  - [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
  - [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-862.2.1.el7]
changelog:
  - [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
  - [crypto] aesni: Add support for 192 & 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-862.3.1.el7]
changelog:
  - [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
  - [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
  - [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
  - [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-862.3.2.el7]
changelog:
  - [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] spec_ctrl: Clean up entry code & remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
  - [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [3.10.0-862.3.3.el7]
changelog:
  - [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-952.el7]
changelog:
  - [netdrv] mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: Present SW stats when state is not opened (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: Avoid reset netdev stats on configuration changes (Alaa Hleihel) [1618609]
  - [netdrv] mlx5e: Use bool as return type for mlx5e_xdp_handle (Alaa Hleihel) [1618609]
  - [netdrv] net: aquantia: memory corruption on jumbo frames (Igor Russkikh) [1628238]
  - [kernel] revert "platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]
  - [x86] revert "mm: probe memory block size for generic x86 64bit" (Baoquan He) [1625143]
  - [x86] revert "mm: Use 2GB memory block size on large-memory x86-64 systems" (Baoquan He) [1625143]
  - [x86] revert "mm: Streamline and restore probe_memory_block_size()" (Baoquan He) [1625143]
  - [x86] revert "mm/memory_hotplug: determine block size based on the end of boot memory" (Baoquan He) [1625143]
  - [mm] revert "memory_hotplug: do not fail offlining too early" (Baoquan He) [1625143]
  - [mm] revert "memory_hotplug: remove timeout from __offline_memory" (Baoquan He) [1625143]
  - [kernel] revert "x86/platform/uv: Add adjustable set memory block size function" (Baoquan He) [1625143]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-953.el7]
changelog:
  - [cdrom] information leak in cdrom_ioctl_media_changed() (Sanskriti Sharma) [1578207] {CVE-2018-10940}
  - [mm] mlock: remove lru_add_drain_all() (Oleksandr Natalenko) [1624765]
  - [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1619988]
  - [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1619988]
  - [block] blk-mq: fix sysfs inflight counter (Ming Lei) [1548261]
  - [block] blk-mq: count allocated but not started requests in iostats inflight (Ming Lei) [1548261]
  - [block] fix a crash caused by wrong API (Ming Lei) [1548261]
  - [block] blk-mq: enable checking two part inflight counts at the same time (Ming Lei) [1548261]
  - [block] blk-mq: provide internal in-flight variant (Ming Lei) [1548261]
  - [block] make part_in_flight() take an array of two ints (Ming Lei) [1548261]
  - [block] pass in queue to inflight accounting (Ming Lei) [1548261]
  - [x86] Mark Intel Cascade Lake supported (Steve Best) [1584343]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-954.el7]
changelog:
  - [fs] exec: Limit arg stack to at most 75 of _STK_LIM (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
  - [fs] exec: account for argv/envp pointers (Yauheni Kaliuta) [1625991] {CVE-2018-14634}
  - [kernel] revert "sched/topology: Introduce NUMA identity node sched domain" (Gustavo Duarte) [1620031]
  - [powerpc] revert "powernv: Add a virtual irqchip for opal events" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv: Reorder OPAL subsystem initialisation" (Gustavo Duarte) [1617966]
  - [char] revert "ipmi/powernv: Convert to irq event interface" (Gustavo Duarte) [1617966]
  - [tty] revert "hvc: Convert to using interrupts instead of opal events" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv/eeh: Update the EEH code to use the opal irq domain" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv/opal: Convert opal message events to opal irq domain" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv/elog: Convert elog to opal irq domain" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv/opal-dump: Convert to irq domain" (Gustavo Duarte) [1617966]
  - [powerpc] revert "opal: Remove events notifier" (Gustavo Duarte) [1617966]
  - [powerpc] revert "powernv: Increase opal-irqchip initcall priority" (Gustavo Duarte) [1617966]
  - [powerpc] revert "opal-irqchip: Fix double endian conversion" (Gustavo Duarte) [1617966]
  - [powerpc] revert "opal-irqchip: Fix deadlock introduced by "Fix double endian conversion"" (Gustavo Duarte) [1617966]
  - [sound] alsa: hda/realtek - two more lenovo models need fixup of MIC_LOCATION (Jaroslav Kysela) [1611958]
  - [sound] alsa: hda/realtek - Fix the problem of two front mics on more machines (Jaroslav Kysela) [1611958]
  - [sound] alsa: hda/realtek - Enable mic-mute hotkey for several Lenovo AIOs (Jaroslav Kysela) [1611958]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-955.el7]
changelog:
  - [netdrv] net/mlx5e: IPoIB, Set the netdevice sw mtu in ipoib enhanced flow (Alaa Hleihel) [1633652]
  - [netdrv] net/mlx5e: Fix traffic between VF and representor (Alaa Hleihel) [1633652]
  - [mm] vmscan: do not loop on too_many_isolated for ever (Waiman Long) [1632050]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-956.el7]
changelog:
  - [block] blk-mq: fix hctx debugfs entry related race between update hw queues and cpu hotplug (Ming Lei) [1619988]
  - [nvme] nvme-pci: unquiesce dead controller queues (Ming Lei) [1632424]


author: Bruno E. O. Meneguele <bmeneg@redhat.com> [3.10.0-957.el7]
changelog:
  - [mm] mlock: avoid increase mm->locked_vm on mlock() when already mlock2(, MLOCK_ONFAULT) (Rafael Aquini) [1633059]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.1.1.el7]
changelog:
  - [x86] boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1644990 1628828]
  - [net] 8021q: create device with all possible features in wanted_features (Davide Caratti) [1644675 1640645]
  - [mm] memcontrol: fix high scheduling latency source in mem_cgroup_reparent_charges (Andrea Arcangeli) [1644673 1632898]
  - [kernel] cpuset: use trialcs->mems_allowed as a temp variable (Aristeu Rozanski) [1644236 1613248]
  - [kernel] cpuset: fix a warning when clearing configured masks in old hierarchy (Aristeu Rozanski) [1644236 1613248]
  - [kernel] cpuset: initialize effective masks when clone_children is enabled (Aristeu Rozanski) [1644236 1613248]
  - [x86] efi: Only load initrd above 4g on second try (Lenny Szubowicz) [1643359 1608955]
  - [x86] efi: Support initrd loaded above 4G (Lenny Szubowicz) [1643359 1608955]
  - [x86] efi: Generalize handle_ramdisks() and rename to handle_cmdline_files() (Lenny Szubowicz) [1643359 1608955]
  - [kernel] sched/fair: Fix throttle_list starvation with low CFS quota (Phil Auld) [1640675 1601153]
  - [target] scsi: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}
  - [target] scsi: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1634711 1627034] {CVE-2018-14633}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.1.2.el7]
changelog:
  - [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
  - [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.2.1.el7]
changelog:
  - [md] Simplify ternary operations (Xiao Ni) [1655046 1627563]
  - [x86] Mark Intel Cascade Lake supported (Steve Best) [1650213 1639980]
  - [net] rtnetlink: give a user socket to get_target_net() (Jiri Benc) [1639635 1630694] {CVE-2018-14646}
  - [net] Add variants of capable for use on on sockets (Jiri Benc) [1639635 1630694] {CVE-2018-14646}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.3.1.el7]
changelog:
  - [mm] userfaultfd: allow get_mempolicy(MPOL_F_NODE|MPOL_F_ADDR) to trigger userfaults (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [mm] userfaultfd: shmem: uffdio_copy: set the page dirty if VM_WRITE is not set (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [mm] userfaultfd: shmem: add i_size checks (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [mm] userfaultfd: shmem/hugetlbfs: only allow to register VM_MAYWRITE vmas (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [mm] userfaultfd: shmem: allocate anonymous memory for MAP_PRIVATE shmem (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [mm] userfaultfd: use ENOENT instead of EFAULT if the atomic copy user fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [fs] userfaultfd: disable irqs when taking the waitqueue lock (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [fs] userfaultfd.c: remove redundant pointer uwq (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [fs] userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [fs] userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [mm] userfaultfd: prevent non-cooperative events vs mcopy_atomic races (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [fs] userfaultfd: convert to use anon_inode_getfd() (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [fs] mm, userfaultfd, thp: avoid waiting when PMD under THP migration (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}
  - [net] packet: fix a race in packet_bind() and packet_notifier() (Andrea Claudi) [1643680 1643681] {CVE-2018-18559}
  - [x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm->vcpus (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
  - [x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
  - [pinctrl] cannonlake: Fix HOSTSW_OWN register offset of H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
  - [pinctrl] cannonlake: Fix gpio base for GPP-E (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
  - [pinctrl] cannonlake: Fix community ordering for H variant (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
  - [pinctrl] intel: Do pin translation in other GPIO operations as well (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
  - [pinctrl] intel: Implement intel_gpio_get_direction callback (Benjamin Tissoires) [1647720 1647717 1609926 1544041]
  - [platform] x86: dell-smbios-wmi: Correct a memory leak (Jarod Wilson) [1647706 1640399]
  - [scsi] qedi: Initialize the stats mutex lock (Chad Dupuis) [1646870 1633638]
  - [s390] facilites: use stfle_fac_list array size for MAX_FACILITY_BIT (Hendrik Brueckner) [1646868 1628088]
  - [netdrv] qed: Add missing device config for RoCE EDPM in UFP mode (Chad Dupuis) [1646866 1631593]
  - [netdrv] qed: Do not add VLAN 0 tag to untagged frames in multi-function mode (Chad Dupuis) [1646866 1631593]
  - [netdrv] qed: Fix populating the invalid stag value in multi function mode (Chad Dupuis) [1646866 1631593]
  - [netdrv] qed: Fix link flap issue due to mismatching EEE capabilities (Chad Dupuis) [1645150 1636398]
  - [netdrv] qed: Fix shmem structure inconsistency between driver and the mfw (Chad Dupuis) [1645149 1634156]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.4.1.el7]
changelog:
  - [net] macsec: let the administrator set UP state even if lowerdev is down (Sabrina Dubroca) [1658970 1626004]
  - [net] macsec: update operstate when lower device changes (Sabrina Dubroca) [1658970 1626004]
  - [fs] nfsv4.x: fix lock recovery during delegation recall (Steve Dickson) [1657840 1634086]
  - [fs] cifs: Fix autonegotiate security settings mismatch (Leif Sahlberg) [1657841 1650148]
  - [md] raid1: panic because of using freed memory (Xiao Ni) [1656500 1632575]
  - [pci] Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1656395 1524000]
  - [pci] Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1656395 1524000]
  - [x86] kvm: vmx: re-add ple_gap module parameter (Gary Hook) [1656393 1652933]
  - [iommu] vt-d: Fix iotlb psi missing for mappings (Peter Xu) [1653592 1623856]
  - [iommu] vt-d: Introduce __mapping_notify_one() (Peter Xu) [1653592 1623856]
  - [scsi] libfc: retry PRLI if we cannot analyse the payload (Chris Leech) [1655045 1631130]
  - [scsi] libfc: Do not drop down to FLOGI for fc_rport_login() (Chris Leech) [1655044 1625721]
  - [scsi] libfc: Do not login if the port is already started (Chris Leech) [1655044 1625721]
  - [scsi] libfc: don't advance state machine for incoming FLOGI (Chris Leech) [1655044 1625721]
  - [gpu] drm/i915: Add short HPD IRQ storm detection for non-MST systems (Lyude Paul) [1654733 1608704]
  - [gpu] drm/i915: Clarify flow for disabling IRQs on storms (Lyude Paul) [1654733 1608704]
  - [gpu] drm/i915: Fix threshold check in intel_hpd_irq_storm_detect() (Lyude Paul) [1654733 1608704]
  - [gpu] drm/i915: Fix NULL deref when re-enabling HPD IRQs on systems with MST (Lyude Paul) [1654733 1608704]
  - [gpu] drm/i915: Fix possible race in intel_dp_add_mst_connector() (Lyude Paul) [1654733 1608704]
  - [iommu] amd: Clear memory encryption mask from physical address (Gary Hook) [1649025 1643293]
  - [security] Make [un]register_lsm_notifier() null ops if !selinux_enabled (Don Dutile) [1648811 1621072]
  - [netdrv] bonding/802.3ad: fix link_failure_count tracking (Jarod Wilson) [1648294 1641660]
  - [block] nvme: do not require GENERIC_HARDIRQ interfaces on s390 (Hendrik Brueckner) [1648239 1637637]
  - [nvme] nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event (David Milburn) [1648240 1630481]
  - [x86] kprobes: Use 5-byte NOP when the code might be modified by ftrace (Josh Poimboeuf) [1647816 1577050]
  - [fs] userfaultfd: check VM_MAYWRITE was set after verifying the uffd is registered (Andrea Arcangeli) [1640518 1640519] {CVE-2018-18397}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.5.1.el7]
changelog:
  - [fs] revert "[fs] sunrpc: Ensure we always close the socket after a connection shuts down" (Dave Wysochanski) [1660784 1657399]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.7.1.el7]
changelog:
  - [scsi] lpfc: do not set queue->page_count to 0 if pc_sli4_params.wqpcnt is invalid (Ewan Milne) [1664067 1657981]
  - [scsi] qla2xxx: Delete session for nport id change (Himanshu Madhani) [1663508 1628301]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.8.1.el7]
changelog:
  - [tty] add rwsem to close race between copy_from_read_buf calls and reset_buffer_flags (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Fix stall at n_tty_receive_char_special() (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] audit: Fix audit source (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Fix auditing support for cannonical mode (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Fix 4096-byte canonical reads (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Remove read_cnt (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Don't wrap input buffer indices at buffer size (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Get read_cnt through accessor (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] Deprecate ldisc .chars_in_buffer() method (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Split n_tty_chars_in_buffer() for reader-only interface (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Line copy to user buffer in canonical mode (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] n_tty: Factor canonical mode copy from n_tty_read() (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] Make ldisc input flow control concurrency-friendly (Christoph von Recklinghausen) [1660815 1649343]
  - [tty] Simplify tty buffer/ldisc interface with helper function (Christoph von Recklinghausen) [1660815 1649343]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.9.1.el7]
changelog:
  - [input] psmouse: fix button reporting for basic protocols (Benjamin Tissoires) [1662848 1658669]
  - [input] psmouse: add support for 2nd wheel on A4Tech Dual-Scroll wheel mice (Benjamin Tissoires) [1662848 1658669]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.10.1.el7]
changelog:
  - [fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
  - [fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
  - [acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
  - [acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
  - [x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
  - [x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
  - [scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
  - [block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
  - [block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
  - [powerpc] rtas: Fix a potential race between CPU-Offline & Migration (Steve Best) [1669044 1650249]
  - [powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
  - [md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
  - [lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
  - [kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
  - [kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
  - [fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
  - [fs] proc: use "unsigned int" for /proc/*/stack (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
  - [fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
  - [scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
  - [pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
  - [pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
  - [pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
  - [mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
  - [net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
  - [kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
  - [nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
  - [fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
  - [fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
  - [net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
  - [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.11.1.el7]
changelog:
  - [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
  - [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
  - [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
  - [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.12.1.el7]
changelog:
  - [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
  - [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
  - [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
  - [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
  - [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
  - [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
  - [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
  - [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
  - [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
  - [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
  - [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
  - [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
  - [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
  - [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
  - [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
  - [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
  - [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
  - [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
  - [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
  - [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
  - [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
  - [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
  - [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
  - [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
  - [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
  - [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
  - [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
  - [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
  - [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
  - [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
  - [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
  - [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
  - [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
  - [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
  - [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
  - [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.12.2.el7]
changelog:
  - [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130}
  - [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}
  - [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1690335 1690348 1690358] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.14.1.el7]
changelog:
  - [fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
  - [fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
  - [fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
  - [fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
  - [fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
  - [fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
  - [fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
  - [fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
  - [fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.15.1.el7]
changelog:
  - [fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
  - [net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.16.1.el7]
changelog:
  - [netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
  - [netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
  - [netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
  - [netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
  - [netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
  - [netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
  - [netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
  - [x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
  - [net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
  - [fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
  - [fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
  - [x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
  - [sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
  - [sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
  - [block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
  - [fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.19.1.el7]
changelog:
  - [security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
  - [block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
  - [block] wakeup tasks blocked on q->mq_freeze_wq (Ming Lei) [1702921 1701348]
  - [fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
  - [fs] xfs: hold xfs_buf locked between shortform->leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
  - [fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
  - [fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
  - [char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
  - [char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
  - [char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
  - [security] xattr: Constify ->name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
  - [net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
  - [s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
  - [md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
  - [fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
  - [fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
  - [fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
  - [powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
  - [powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
  - [powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
  - [powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
  - [powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
  - [powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
  - [fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
  - [nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.20.1.el7]
changelog:
  - [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.21.1.el7]
changelog:
  - [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.21.2.el7]
changelog:
  - [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.21.3.el7]
changelog:
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
  - [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.22.1.el7]
changelog:
  - [md] raid: raid5 preserve the writeback action after the parity check (Nigel Croxon) [1698109 1701350]
  - [net] route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race (Xin Long) [1709727 1630136]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.23.1.el7]
changelog:
  - [md] dm thin metadata: do not write metadata if no changes occurred (Mike Snitzer) [1713800 1710051]
  - [md] dm thin metadata: add wrappers for managing write locking of metadata (Mike Snitzer) [1713800 1710051]
  - [md] dm thin metadata: check __commit_transaction()'s return (Mike Snitzer) [1713800 1710051]
  - [md] dm space map common: zero entire ll_disk (Mike Snitzer) [1713800 1710051]
  - [scsi] smartpqi: correct lun reset issues (Don Brace) [1709469 1641112]
  - [net] openvswitch: Remove padding from packet before L3+ conntrack processing (Eelco Chaudron) [1713562 1684518]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.26.1.el7]
changelog:
  - [x86] kvm: x86: Add AMD's EX_CFG to the list of ignored MSRs (Eduardo Habkost) [1716306 1593190]
  - [x86] kvm/mmu: reset MMU context when 32-bit guest switches PAE (Vitaly Kuznetsov) [1702172 1703797]
  - [x86] kvm: x86: fix handling of role.cr4_pae and rename it to 'gpte_size' (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Do not inherit quadrant and invalid for the root shadow EPT (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: fix switch between root and guest MMUs (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: NMI-window and interrupt-window exiting should wake L2 from HLT (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: nsvm: fix switch to guest mmu (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Fix race in emulated page table writes (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx/nsvm: Fix bug which sets vcpu->arch.tsc_offset to L1 tsc_offset (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: reintroduce pte_list_remove, but including mmu_spte_clear_track_bits (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: rename pte_list_remove to __pte_list_remove (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: check if MMU reconfiguration is needed in init_kvm_nested_mmu() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: check if tdp/shadow MMU reconfiguration is needed (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/nvmx: introduce source data cache for kvm_init_shadow_ept_mmu() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: make space for source data caching in struct kvm_mmu (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: get rid of redundant kvm_mmu_setup() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: introduce guest_mmu (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu.c: add kvm_mmu parameter to kvm_mmu_free_roots() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu.c: set get_pdptr hook in kvm_init_shadow_ept_mmu() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: make vcpu->mmu a pointer to the current MMU (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: move vmcs12 EPTP consistency check to check_vmentry_prereqs() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: move host EFER consistency checks to VMFail path (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: return 0 in case kvm_mmu_memory_cache has min number of objects (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Clear reserved bits of #DB exit qualification (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: restore host state in nested_vmx_vmexit for VMFail (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: fix entry with pending interrupt if APICv is enabled (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: hide flexpriority from guest when disabled at the module level (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: check for existence of secondary exec controls before accessing (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Wake blocked vCPU in guest-mode if pending interrupt in virtual APICv (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: don't reset root in kvm_mmu_setup() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/lapic: always disable MMIO interface in x2APIC mode (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix loss of pending IRQ/NMI before entering L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Skip pae_root shadow allocation if tdp enabled (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: Combine flushing remote tlb in mmu_set_spte() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add multi-entry LRU cache for previous CR3s (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Support selectively freeing either current or previous MMU root (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add a root_hpa parameter to kvm_mmu->invlpg() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add ability to skip TLB flush when switching CR3 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Use fast CR3 switch for nested VMX (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Support resetting the MMU context without resetting roots (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add support for fast CR3 switch across different MMU modes (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Introduce KVM_REQ_LOAD_CR3 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Introduce kvm_mmu_calc_root_page_role() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add fast CR3 switch code path (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Avoid taking MMU lock in kvm_mmu_sync_roots if no sync is needed (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Make sync_page() flush remote TLBs once only (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Restore exit qual for VM-entry failure due to MSR loading (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Nested VM-entry prereqs for event inj (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Don't expose private memslots to L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Add guest_mode to kvm_mmu_page_role (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Basic APIC virtualization controls have three settings (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Eliminate APIC access page sharing between L1 and L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Introduce lapic_mode enumeration (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Refactor mmu_free_roots() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: move MSR_IA32_TSC handling to x86.c (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: Properly update 'tsc_offset' to represent the running guest (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] Add check for APIC access address for vmentry of L2 guests (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Do not load EOI-exitmap while running L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: don't configure EPT identity map for unrestricted guest (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Update the exit_qualification access bits while walking an address (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Enforce NMI controls on vmentry of L2 guests (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Don't halt vcpu when L1 is injecting events to L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: shadow more fields that are read/written on every vmexits (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix bug of injecting L2 exception into L1 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm mmu: check pending exception before injecting APF (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: svm: prepare for new bit definition in nested_ctl (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix vmx_check_nested_events() return value in case an event was reinjected to L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: ioapic: Preserve read-only values in the redirection table (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: ioapic: Clear Remote IRR when entry is switched to edge-triggered (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: ioapic: Remove redundant check for Remote IRR in ioapic_set_irq (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: ioapic: Don't fire level irq when Remote IRR set (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix mmu context after VMLAUNCH/VMRESUME failure (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Validate the IA32_BNDCFGS on nested VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: extend usage of RET_MMIO_PF_* constants (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] arch/x86: remove redundant null checks before kmem_cache_destroy (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: cleanup init_rmode_identity_map() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: free_page can handle NULL (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix nested #PF intends to break L1's vmlauch/vmresume (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Handle deferred early VMLAUNCH/VMRESUME failure properly (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Handle VMLAUNCH/VMRESUME failure properly (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Remove nested_vmx_succeed after successful VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: async_pf: Fix #DF due to inject "Page not Present" and "Page Ready" exceptions simultaneously (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Validate the virtual-APIC address on nested VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix trying to cancel vmlauch/vmresume (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: use kvm_event_needs_reinjection (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Fix loss of exception which has not yet been injected (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: fix use of L1 MMIO areas in nested guests (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Avoid guest page table walk when gpa_available is set (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: simplify ept_misconfig (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Disallow illegal IA32_APIC_BASE MSR values (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Bail out immediately if there is no available mmu page (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: validate eptp pointer (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Add support for fast unprotection of nested guest page tables (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: svm: Limit PFERR_NESTED_GUEST_PAGE error_code check to L1 guest (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: fixes to nested virt interrupt injection (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: do not fill vm_exit_intr_error_code in prepare_vmcs12 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Disallow VM-entry in MOV-SS shadow (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: async_pf: Force a nested vmexit if the injected #PF is async_pf (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: async_pf: Add L1 guest async_pf #PF vmexit handler (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Simplify kvm_x86_ops->queue_exception parameter list (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix nested_vmx_check_msr_bitmap_controls (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Validate the I/O bitmaps on nested VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Don't set vmcs12 to "launched" when VMLAUNCH fails (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Validate CR3 target count on nested VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Flush TLB when the APIC-access address changes (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: VMCLEAR should not cause the vCPU to shut down (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Use the hardware provided GPA instead of page walk (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: svm: Use the hardware provided GPA instead of page walk (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: svm: Add support for additional SVM NPF error codes (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: CPUID.01H:EDX.APIC[bit 9] should mirror IA32_APIC_BASE[11] (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fetch VM_INSTRUCTION_ERROR from vmcs02 on vmx->fail (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/x86: Replace smp_mb() with smp_store_mb/release() in the walk_shadow_page_lockless_begin/end() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: coalesce more page zapping in mmu_sync_children (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: move zap/flush to kvm_mmu_get_page (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: invert return value of mmu.sync_page and *kvm_sync_page* (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: cleanup __kvm_sync_page and its callers (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: use kvm_sync_page in kvm_sync_pages (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: move TLB flush out of __kvm_sync_page (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: introduce kvm_mmu_flush_or_zap (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Fix ubsan warnings (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Remove unused parameter parent_pte from kvm_mmu_get_page() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Use for_each_rmap_spte macro instead of pte_list_walk() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Move parent_pte handling from kvm_mmu_get_page() to link_shadow_page() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Move initialization of parent_ptes out from kvm_mmu_alloc_page() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Make mmu_set_spte() return emulate value (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Add helper function to clear a bit in unsync child bitmap (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] mce: Handle varying MCA bank counts (David Arcari) [1715868 1693352]
  - [drm] drm/i915/gvt: Fix mmap range check (Alex Williamson) [1713566 1713567] {CVE-2019-11085}
  - [nvme] cancel request synchronously (Ming Lei) [1715320 1688518]
  - [block] blk-mq: introduce blk_mq_complete_request_sync() (Ming Lei) [1715320 1688518]
  - [char] ipmi_si: fix use-after-free of resource->name (Tony Camuso) [1714407 1714408] {CVE-2019-11811}
  - [fs] sunrpc: make visible processing error in bc_svc_process() ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] sunrpc: remove unused xpo_prep_reply_hdr callback ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] sunrpc: remove svc_tcp_bc_class ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] sunrpc: replace svc_serv->sv_bc_xprt by boolean flag ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] sunrpc: use-after-free in svc_process_common() ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] svcauth_gss: Close connection when dropping an incoming message ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [tty] Fix low_latency BUG (Aristeu Rozanski) [1715331 1710039]
  - [tty] n_tty: Fix termios_rwsem lockdep false positive (Artem Savkov) [1715328 1712744]
  - [tty] Fix lock order in tty_do_resize() (Aristeu Rozanski) [1708063 1684982]
  - [tty] n_tty: Access termios values safely (Aristeu Rozanski) [1708063 1684982]
  - [tty] Convert termios_mutex to termios_rwsem (Aristeu Rozanski) [1708063 1684982]
  - [md] batch flush requests. (Xiao Ni) [1713564 1576466]
  - [md] revert "md: fix lock contention for flush bios" (Xiao Ni) [1713564 1576466]
  - [mm] tlb: Remove tlb_remove_table() non-concurrent condition (Vitaly Kuznetsov) [1712766 1448188]
  - [kernel] sched/fair: Do not re-read ->h_load_next during hierarchical load calculation (Phil Auld) [1712764 1707397]
  - [x86] livepatch: apply alternatives and paravirt patches after relocations (Artem Savkov) [1712761 1706733]
  - [block] blk-mq: fix IO accounting in case of none io scheduler (Ming Lei) [1711013 1669684]
  - [net] netfilter: ipv6: Don't preserve original oif for loopback address (Florian Westphal) [1709186 1701496]
  - [net] netfilter: ipv6: Preserve link scope traffic original oif (Florian Westphal) [1709186 1701496]
  - [x86] mce/amd, edac/mce_amd: Add new error descriptions for some SMCA bank types (Gary Hook) [1703376 1685269]
  - [edac] x86/mce/amd, edac/mce_amd: Add new McaTypes for CS, PSP, and SMU units (Gary Hook) [1703376 1685269]
  - [edac] x86/mce/amd, edac/mce_amd: Add new MP5, NBIO, and PCIE SMCA bank types (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Fix the thresholding machinery initialization order (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Read MCx_MISC block addresses on any CPU (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Cache SMCA MISC block addresses (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Carve out SMCA get_block_address() code (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Get address from already initialized block (Gary Hook) [1703376 1685269]
  - [edac] x86/mce/amd, edac/mce_amd: Enumerate Reserved SMCA bank type (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Pass the bank number to smca_get_bank_type() (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Define a function to get SMCA bank type (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Allow any CPU to initialize the smca_banks array (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Carve out SMCA bank configuration (David Arcari) [1712763 1676301]
  - [x86] mce: Convert threshold_bank.cpus from atomic_t to refcount_t (David Arcari) [1712763 1676301]
  - [x86] ras/amd: Make sysfs names of banks more user-friendly (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Make the init code more robust (David Arcari) [1712763 1676301]
  - [x86] ras: Hide SMCA bank names (David Arcari) [1712763 1676301]
  - [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1708546 1694459]
  - [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1708546 1694459]
  - [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1708546 1694459]
  - [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1708546 1694459]
  - [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1708546 1694459]
  - [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Add support for software count cache flush (Gustavo Duarte) [1708546 1694459]
  - [powerpc] Introduce asm-prototypes.h (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1708546 1694459]
  - [powerpc] asm: Add a patch_site macro & helpers for patching instructions (Gustavo Duarte) [1708546 1694459]
  - [powerpc] Add helper to check if offset is within relative branch range (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1708546 1694459]
  - [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Patch barrier_nospec in modules (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Add barrier_nospec (Gustavo Duarte) [1708546 1694459]
  - [powerpc] reuse asm-generic/barrier.h (Gustavo Duarte) [1708546 1694459]
  - [x86] locking/arch: Rename set_mb() to smp_store_mb() (Waiman Long) [1708546 1522387]
  - [kernel] locking/arch: Add WRITE_ONCE() to set_mb() (Waiman Long) [1708546 1522387]
  - [kernel] rcu: Don't wake rcuc/X kthreads on NOCB CPUs (Daniel Bristot de Oliveira) [1711325 1626129]
  - [x86] Update stepping values for coffee lake desktop (David Arcari) [1710803 1704812]
  - [security] selinux: overhaul sidtab to fix bug and improve performance (Ondrej Mosnacek) [1710468 1335986]
  - [security] selinux: use separate table for initial SID lookup (Ondrej Mosnacek) [1710468 1335986]
  - [security] selinux: refactor sidtab conversion (Ondrej Mosnacek) [1710468 1335986]
  - [nvme] nvme-pci: fix memory leak on probe failure (David Milburn) [1710799 1689008]
  - [nvme] nvme-pci: limit max IO size and segments to avoid high order allocations (David Milburn) [1710799 1689008]
  - [lib] locking/rwsem: Prevent decrement of reader count before increment (Waiman Long) [1709704 1708667]
  - [fs] nfsd: COPY and CLONE operations require the saved filehandle to be set (Scott Mayhew) [1672147 1645353] {CVE-2018-16871}
  - [iommu] amd: Set exclusion range correctly (Jerry Snitselaar) [1698338 1702763]
  - [iommu] amd: Reserve exclusion range in iova-domain (Jerry Snitselaar) [1698338 1691196]
  - [nvdimm] libnvdimm, pmem: Fix badblocks population for 'raw' namespaces (Frank Ramsay) [1708548 1672302]
  - [netdrv] mac80211_hwsim: Fix possible Spectre-v1 for hwsim_world_regdom_custom (Stanislaw Gruszka) [1706698 1639674]
  - [net] nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT (Stanislaw Gruszka) [1706698 1639674]
  - [net] nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (Stanislaw Gruszka) [1706698 1639674]
  - [netdrv] mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl() (Stanislaw Gruszka) [1706698 1626463]
  - [md] dm cache metadata: Fix loading discard bitset (Mike Snitzer) [1703586 1701619]
  - [infiniband] hfi1: Close race condition on user context disable and close (Alex Estrin) [1705369 1680069]
  - [mm] thp: relocate flush_cache_range() in migrate_misplaced_transhuge_page() (Andrea Arcangeli) [1698108 1636066]
  - [mm] thp: fix mmu_notifier in migrate_misplaced_transhuge_page() (Andrea Arcangeli) [1698108 1636066]
  - [mm] thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition (Andrea Arcangeli) [1698108 1636066]
  - [mm] revert "mm: numa: defer TLB flush for THP migration as long as possible" (Andrea Arcangeli) [1698108 1636066]
  - [mm] thp/migration: switch from flush_tlb_range to flush_pmd_tlb_range (Andrea Arcangeli) [1698108 1636066]
  - [mm] migrate.c: stabilise page count when migrating transparent hugepages (Andrea Arcangeli) [1698108 1636066]
  - [mm] numa: add migrated transhuge pages to LRU the same way as base pages (Andrea Arcangeli) [1698108 1636066]
  - [mm] thp: fix MADV_DONTNEED vs. MADV_FREE race (Andrea Arcangeli) [1698108 1636066]
  - [mm] memcg, slab: simplify synchronization scheme (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: do not schedule cache destruction when last page goes away (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: separate memcg vs root cache creation paths (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: cleanup memcg cache creation (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: remove KMEM_ACCOUNTED_ACTIVATED flag (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: RCU protect memcg_params for root caches (Aaron Tomlin) [1691428 1674401]
  - [mm] slab: do not panic if we fail to create memcg cache (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: get rid of kmem_cache_dup() (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: fix possible NULL deref while traversing memcg_slab_caches list (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: fix barrier usage when accessing memcg_caches (Aaron Tomlin) [1691428 1674401]
  - [mm] slab: clean up kmem_cache_create_memcg() error handling (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, kmem: use cache_from_memcg_idx instead of hard code (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, kmem: rename cache_from_memcg to cache_from_memcg_idx (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: make memcg_update_cache_sizes() static (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: fix kmem_account_flags check in memcg_can_account_kmem() (Aaron Tomlin) [1691428 1674401]
  - [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.27.1.el7]
changelog:
  - [x86] Update stepping values for Whiskey Lake U/Y (David Arcari) [1718690 1704810]
  - [x86] perf/amd: Resolve NMI latency issues for active PMCs (David Arcari) [1721611 1696764]
  - [x86] perf/amd: Resolve race condition when disabling PMC (David Arcari) [1721611 1696764]
  - [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1720266 1705210]
  - [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1720266 1705210]
  - [edac] amd64: Recognize x16 symbol size (Gary Hook) [1720266 1705210]
  - [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1720266 1705210]
  - [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1720266 1705210]
  - [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1720266 1705210]
  - [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1720266 1670608]
  - [x86] mark AMD Rome processors supported (David Arcari) [1721604 1543509]
  - [x86] Mark AMD EPYC guests as supported (David Arcari) [1721604 1664507]
  - [x86] mark amd rome as unsupported (David Arcari) [1721604 1638504]
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
  - [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.27.2.el7]
changelog:
  - [x86] hyper-v: fix hyperv.h UAPI header (Vitaly Kuznetsov) [1727109 1692492]
  - [iommu] hyper-v: Add Hyper-V stub IOMMU driver (Vitaly Kuznetsov) [1727109 1661654]
  - [x86] hyper-v: Set x2apic destination mode to physical when x2apic is available (Vitaly Kuznetsov) [1727109 1661654]
  - [x86] hyper-v: Consolidate code for converting cpumask to vpset (Vitaly Kuznetsov) [1727109 1661654]
  - [x86] hyper-v: Fix the circular dependency in IPI enlightenment (Vitaly Kuznetsov) [1727109 1661654]
  - [pci] hv: Refactor hv_irq_unmask() to use cpumask_to_vpset() (Vitaly Kuznetsov) [1727109 1661654]
  - [pci] hv: Replace hv_vp_set with hv_vpset (Vitaly Kuznetsov) [1727109 1661654]
  - [pci] hv: Add __aligned(8) to struct retarget_msi_interrupt (Vitaly Kuznetsov) [1727109 1661654]
  - [hwmon] k10temp: Add support for AMD family 17h, model 30h CPUs (Gary Hook) [1728000 1643292]
  - [x86] amd_nb: Add PCI device IDs for family 17h, model 30h (Gary Hook) [1728000 1643292]
  - [x86] amd_nb: Add support for newer PCI topologies (Gary Hook) [1728000 1643292]
  - [hwmon] k10temp, x86/amd_nb: Consolidate shared device IDs (Gary Hook) [1728000 1643292]
  - [hwmon] (k10temp) Use API function to access System Management Network (Gary Hook) [1728000 1643292]
  - [x86] amd_nb: Add support for Raven Ridge CPUs (Gary Hook) [1728000 1643292]
  - [hwmon] (k10temp) Add support for AMD Ryzen w/ Vega graphics (Gary Hook) [1728000 1643292]
  - [hwmon] (k10temp) Add temperature offset for Ryzen 2700X (Gary Hook) [1728000 1643292]
  - [x86] cpu/amd: Apply the Erratum 688 fix when the BIOS doesn't (Gary Hook) [1728000 1643292]


author: Johnny Hughes <johnny@centos.org> 4.9.75-30
changelog:
  - Upgraded to upstream 4.9.75
  - Remove Destroy-ldisc-instance-hangup.patch
  - Allow for different c6 and c7 config files for x86_64 arch


author: Karl Johnson <karljohnson.it@gmail.com> 4.9.135-33
changelog:
  - Upgraded to 4.9.135
  - Remove Patch10002 xsa270.patch, rolled in upstream since 4.9.133
  - Build with GCC 7 from devtoolset-7


author: Karl Johnson <karljohnson.it@gmail.com> 4.9.141-34
changelog:
  - Upgraded to 4.9.141
  - Switch CONFIG_BRIDGE and CONFIG_BRIDGE_NETFILTER from m to y
  - Remove Patch10003 tpm-Restore-functionality-to-xen-vtpm-driver, rolled in upstream since 4.9.137


author: Karl Johnson <karljohnson.it@gmail.com> 4.9.165-35
changelog:
  - Upgraded to 4.9.165
  - Revert GCC 7 to base GCC for now as it is not possible to use devtoolset on CBS
  - Revert CONFIG_BRIDGE and CONFIG_BRIDGE_NETFILTER to module


author: Sarah Newman <srn@prgmr.com> 4.9.31-28
changelog:
  - Add debuginfo package
  - Enable additional features during with-perf
  - Apply XSA-216
  - Disable 'xen-nested-dom0-fix', already applied


author: Johnny Hughes <johnny@centos.org> 4.9.37-29
changelog:
  - Upgraded to upstream 4.9.37
  - Remove patch 10004, rolled in upstream
  - Modified x86_64 config to disable CONFIG_IO_STRICT_DEVMEM as it is
    causing issues with some iscsi configs


author: Johnny Hughes <johnny@centos.org> 4.9.39-29
changelog:
  - Upgraded to upstream 4.9.39
  - Switch from CONFIG_SLUB to CONFIG_SLAB to resolve some xen hypervisor
    related memory errors.


author: Johnny Hughes <johnny@centos.org> 4.9.48-29
changelog:
  - Upgraded to upstream 4.9.48
  - Added Destroy-ldisc-instance-hangup.patch
  - Remove XSA-229 patch (rolled in upstream)


author: Johnny Hughes <johnny@centos.org> 4.9.75-30
changelog:
  - Upgraded to upstream 4.9.75
  - Remove Destroy-ldisc-instance-hangup.patch
  - Allow for differnt c6 and c7 config files for x86_64 arch


author: Kaleb S. KEITHLEY <kkeithle at redhat.com> 1.2.1-3
changelog:
  - RHEL 6 finally has new enough cmake
  - use -isystem ... to ensure correct <rpc/rpc*.h> are used
  - ensure -DTIRPC_EPOLL is defined for correct evchan functionality


author: - Andreas Schneider <asn@redhat.com> - 0.6.1-1
changelog:
  - Update to version 0.6.1.
  - resolves: #1056757 - Fix scp mode.
  - resolves: #1053305 - Fix known_hosts heuristic.


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Cole Robinson <crobinso@redhat.com> - 1.2.13-1
changelog:
  - Rebased to version 1.2.13
  - lot of improvements around NUMA code
  - a lot of improvement and bug fixes


author: Cole Robinson <crobinso@redhat.com> - 1.2.14-2
changelog:
  - Fix LXC domain startup (bz #1210397)
  - Fix race starting multiple session daemons (bz #1200149)
  - Fix change-media success messages
  - Strip invalid control codes from XML (bz #1066564, bz #1184131)


author: Daniel Veillard <veillard@redhat.com> - 1.2.16-1
changelog:
  - Introduce pci-serial
  - Introduce virDomainSetUserPassword API
  - libvirt: Introduce protected key mgmt ops
  - add domain vmport feature
  - various bug fixes and improvements


author: Daniel Veillard <veillard@redhat.com> - 1.2.17-1
changelog:
  - numerous improvements and refactoring of the parallels driver
  - hardening of vcpu code
  - hardening of migration code
  - a lot of improvement and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.2.19-1
changelog:
  - Big improvements on ppc64 support
  - New virDomainRename API
  - Support for QEMU new pci emulations
  - a number of improvements and bug fixes


author: Daniel Veillard <veillard@redhat.com> - 1.3.0-1
changelog:
  - virt-admin and administration API
  - various improvements in virtio devices support
  - log daemon, logging improvements and protocol
  - many bug fixes and improvements


author: Cole Robinson <crobinso@redhat.com> - 1.3.4-2
changelog:
  - Fix libxl video config via virt-install (bz #1334557)
  - Advertise fedora edk2 firmware builds to apps (bz #1335395)


author: Richard W.M. Jones <rjones@redhat.com> - 1.3.5-2
changelog:
  - Rebuild against new glibc
    (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/VUOTESHSWFRCYPXIVG6BSMAUITS7QCK2/).


author: Daniel P. Berrange <berrange@redhat.com> - 2.0.0-1
changelog:
  - Rebase to version 2.0.0
  - Temporarily disable wireshark plugin due to broken wireshark headers (rhbz #1351984)


author: Richard W.M. Jones <rjones@redhat.com> - 2.0.0-2
changelog:
  - Rebuild to attempt to fix 'nothing provides libxenctrl.so.4.6()(64bit) needed
    by libvirt-daemon-2.0.0-1.fc25.x86_64'


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-11
changelog:
  - util: storage: Output parsed network backing store string to debug log (rhbz#1461638)
  - util: storage: Add missing return to virStorageSourceParseBackingJSONGluster (rhbz#1461638)
  - util: storage: make virStorageSourceParseBackingJSONGlusterHost universal (rhbz#1461638)
  - util: storage: Add support for type 'inet' in virStorageSourceParseBackingJSONSocketAddress (rhbz#1461638)
  - util: storage: Split out parsing of TCP network host from JSON pseudoprotocol (rhbz#1461638)
  - util: storage: Report errors when source host data is missing (rhbz#1461638)
  - util: storage: Add JSON parser for new options in iSCSI protocol (rhbz#1461638)
  - util: storage: adapt to changes in JSON format for NBD (rhbz#1461638)
  - util: storage: adapt to changes in JSON format for ceph/rbd (rhbz#1461638)
  - util: storage: adapt to changes in JSON format for ssh (rhbz#1461638)
  - util: storage: adapt to changes in JSON format for sheepdog (rhbz#1461638)
  - qemu: Allow live-updates of coalesce settings (rhbz#1414627)
  - qemu: Pass the number of heads even with -vga qxl (rhbz#1283207)
  - util: storage: Export virStorageIsRelative (rhbz#1461303)
  - storage: Add helper to retrieve the backing store string of a storage volume (rhbz#1461303)
  - qemu: snapshot: Load data necessary for relative block commit to work (rhbz#1461303)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.1
changelog:
  - qemu: Don't update CPU when checking ABI stability (rhbz#1470582)
  - cpu_x86: Properly disable unknown CPU features (rhbz#1470582)
  - qemu: Add qemuProcessFetchGuestCPU (rhbz#1470582)
  - qemu: Add qemuProcessVerifyCPU (rhbz#1470582)
  - qemu: Rename qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
  - qemu: Add qemuProcessUpdateLiveGuestCPU (rhbz#1470582)
  - qemu: Export virQEMUCapsGuestIsNative (rhbz#1470582)
  - qemu: Move qemuProcessReconnect to the end of qemu_process.c (rhbz#1470582)
  - qemu: Update host-model CPUs on reconnect (rhbz#1470582)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.2
changelog:
  - qemu: Fix qemuDomainGetBlockInfo allocation value setting (rhbz#1470127)
  - qemuDomainBuildNamespace: Handle special file mount points (rhbz#1471660)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.4
changelog:
  - qemu: Pass virArch * to virQEMUCapsCPUFilterFeatures (rhbz#1508549)
  - qemu: Publish virQEMUCapsCPUFilterFeatures (rhbz#1508549)
  - qemu: Separate CPU updating code from qemuProcessReconnect (rhbz#1508549)
  - conf: Introduce virCPUDefFindFeature (rhbz#1508549)
  - qemu: Filter CPU features when using host CPU (rhbz#1508549)
  - qemu: Fix CPU model broken by older libvirt (rhbz#1508549)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.5
changelog:
  - qemu: block commit: Don't overwrite error when rolling back disk labels (rhbz#1516717)
  - qemu: block commit: Determine relative path of images before initializing (rhbz#1516717)
  - qemu: domain: Don't call namespace setup for storage already accessed by vm (rhbz#1516717)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-7
changelog:
  - qemu: caps: Always assume QEMU_CAPS_SMP_TOPOLOGY (rhbz#1097930)
  - conf: Extract code formatting vCPU info (rhbz#1097930)
  - conf: Rename virDomainVcpuInfoPtr to virDomainVcpuDefPtr (rhbz#1097930)
  - conf: Don't report errors from virDomainDefGetVcpu (rhbz#1097930)
  - tests: qemuxml2xml: Format status XML header dynamically (rhbz#1097930)
  - conf: convert def->vcpus to a array of pointers (rhbz#1097930)
  - conf: Add private data for virDomainVcpuDef (rhbz#1097930)
  - qemu: domain: Add vcpu private data structure (rhbz#1097930)
  - qemu: domain: Extract formating and parsing of vCPU thread ids (rhbz#1097930)
  - qemu: Add cpu ID to the vCPU pid list in the status XML (rhbz#1097930)
  - qemu: Store vCPU thread ids in vcpu private data objects (rhbz#1097930)
  - Fix logic in qemuDomainObjPrivateXMLParseVcpu (rhbz#1097930)
  - qemu: Add qemuProcessSetupPid() and use it in qemuProcessSetupIOThread() (rhbz#1097930)
  - qemu: Use qemuProcessSetupPid() in qemuProcessSetupEmulator() (rhbz#1097930)
  - qemu: Use qemuProcessSetupPid() in qemuProcessSetupVcpu() (rhbz#1097930)
  - qemuBuildCpuCommandLine: Don't leak @buf (rhbz#1097930)
  - conf: Make really sure we don't access non-existing vCPUs (rhbz#1097930)
  - conf: Make really sure we don't access non-existing vCPUs again (rhbz#1097930)
  - qemu: capabilities: Drop unused function virQEMUCapsGetMachineTypes (rhbz#1097930)
  - qemu: caps: Sanitize storage of machine type related data (rhbz#1097930)
  - qemu: cap: Refactor access to array in virQEMUCapsProbeQMPMachineTypes (rhbz#1097930)
  - qemu: monitor: Add monitor API for device_add supporting JSON objects (rhbz#1097930)
  - qemu: monitor: Add do-while block to QEMU_CHECK_MONITOR_FULL (rhbz#1097930)
  - qemu: Improve error message in virDomainGetVcpus (rhbz#1097930)
  - qemu: domain: Rename qemuDomainDetectVcpuPids to qemuDomainRefreshVcpuInfo (rhbz#1097930)
  - qemu: monitor: Rename qemuMonitor(JSON|Text)GetCPUInfo (rhbz#1097930)
  - qemu: domain: Improve vCPU data checking in qemuDomainRefreshVcpu (rhbz#1097930)
  - qemu: domain: Simplify return values of qemuDomainRefreshVcpuInfo (rhbz#1097930)
  - internal: Introduce macro for stealing pointers (rhbz#1097930)
  - tests: qemucapabilities: Add data for qemu 2.7.0 (rhbz#1097930)
  - qemu: setcpus: Report better errors (rhbz#1097930)
  - qemu: setvcpus: Extract setting of maximum vcpu count (rhbz#1097930)
  - qemu: driver: Extract setting of live vcpu count (rhbz#1097930)
  - qemu: driver: Split out regular vcpu hotplug code into a function (rhbz#1097930)
  - conf: Provide error on undefined vcpusched entry (rhbz#1097930)
  - qemu: monitor: Return structures from qemuMonitorGetCPUInfo (rhbz#1097930)
  - qemu: monitor: Return struct from qemuMonitor(Text|Json)QueryCPUs (rhbz#1097930)
  - qemu: Add capability for query-hotpluggable-cpus command (rhbz#1097930)
  - qemu: Forbid config when topology based cpu count doesn't match the config (rhbz#1097930)
  - qemu: capabilities: Extract availability of new cpu hotplug for machine types (rhbz#1097930)
  - qemu: monitor: Extract QOM path from query-cpus reply (rhbz#1097930)
  - qemu: monitor: Add support for calling query-hotpluggable-cpus (rhbz#1097930)
  - qemu: monitor: Add algorithm for combining query-(hotpluggable-)-cpus data (rhbz#1097930)
  - tests: Add test infrastructure for qemuMonitorGetCPUInfo (rhbz#1097930)
  - tests: cpu-hotplug: Add data for x86 hotplug with 11+ vcpus (rhbz#1097930)
  - tests: cpu-hotplug: Add data for ppc64 platform including hotplug (rhbz#1097930)
  - tests: cpu-hotplug: Add data for ppc64 out-of-order hotplug (rhbz#1097930)
  - tests: cpu-hotplug: Add data for ppc64 without threads enabled (rhbz#1097930)
  - qemu: domain: Extract cpu-hotplug related data (rhbz#1097930)
  - qemu: domain: Prepare for VCPUs vanishing while libvirt is not running (rhbz#1097930)
  - util: Extract and rename qemuDomainDelCgroupForThread to virCgroupDelThread (rhbz#1097930)
  - conf: Add XML for individual vCPU hotplug (rhbz#1097930)
  - qemu: migration: Prepare for non-contiguous vcpu configurations (rhbz#1097930)
  - qemu: command: Add helper to convert vcpu definition to JSON props (rhbz#1097930)
  - qemu: process: Copy final vcpu order information into the vcpu definition (rhbz#1097930)
  - qemu: command: Add support for sparse vcpu topologies (rhbz#1097930)
  - qemu: Use modern vcpu hotplug approach if possible (rhbz#1097930)
  - qemu: hotplug: Allow marking unplugged devices by alias (rhbz#1097930)
  - qemu: hotplug: Add support for VCPU unplug (rhbz#1224341)
  - virsh: vcpuinfo: Report vcpu number from the structure rather than it's position (rhbz#1097930)
  - qemu: driver: Fix qemuDomainHelperGetVcpus for sparse vcpu topologies (rhbz#1097930)
  - doc: clarify documentation for vcpu order (rhbz#1097930)
  - conf: Don't validate vcpu count in XML parser (rhbz#1097930)
  - qemu: driver: Validate configuration when setting maximum vcpu count (rhbz#1370066)
  - conf: Fix build with picky GCC (rhbz#1097930)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-8
changelog:
  - util: storage: Properly set protocol type when parsing gluster json string (rhbz#1372251)
  - conf: Add IOThread quota and period scheduler/cputune defs (rhbz#1356937)
  - qemu: Add support to get/set IOThread period and quota cgroup values (rhbz#1356937)
  - network: new network forward mode 'open' (rhbz#846810)
  - virtlogd.socket: Tie lifecycle to libvirtd.service (rhbz#1372576)
  - cpu_x86: Fix minimum match custom CPUs on hosts with CMT (rhbz#1365500)
  - qemu: cgroup: Extract temporary relaxing of cgroup setting for vcpu hotplug (rhbz#1097930)
  - qemu: process: Fix start with unpluggable vcpus with NUMA pinning (rhbz#1097930)


author: Jiri Denemark <jdenemar@redhat.com> - 2.0.0-9
changelog:
  - Add helper for removing transient definition (rhbz#1368774)
  - qemu: Remove stale transient def when migration fails (rhbz#1368774)
  - qemu: Don't use query-migrate on destination (rhbz#1374613)
  - conf: allow hotplugging "legacy PCI" device to manually addressed PCIe slot (rhbz#1337490)
  - conf: Add support for virtio-net.rx_queue_size (rhbz#1366989)
  - qemu_capabilities: Introduce virtio-net-*.rx_queue_size (rhbz#1366989)
  - qemu: Implement virtio-net rx_queue_size (rhbz#1366989)
  - audit: Audit information about shmem devices (rhbz#1218603)
  - qemu: monitor: Use a more obvious iterator name (rhbz#1375783)
  - qemu: monitor: qemuMonitorGetCPUInfoHotplug: Add iterator 'anycpu' (rhbz#1375783)
  - qemu: monitor: Add vcpu state information to monitor data (rhbz#1375783)
  - qemu: domain: Don't infer vcpu state (rhbz#1375783)


author: Jiri Denemark <jdenemar@redhat.com> - 2.5.0-1
changelog:
  - Rebased to libvirt-2.5.0 (rhbz#1382640)
  - The rebase also fixes the following bugs:
      rhbz#1106416, rhbz#1106419, rhbz#1207095, rhbz#1247005, rhbz#1300776
      rhbz#1343858, rhbz#1347049, rhbz#1349898, rhbz#1354253, rhbz#1356769
      rhbz#1356881, rhbz#1357358, rhbz#1357416, rhbz#1358181, rhbz#1359135
      rhbz#1360533, rhbz#1365779, rhbz#1366108, rhbz#1366460, rhbz#1366505
      rhbz#1368351, rhbz#1368368, rhbz#1369633, rhbz#1370357, rhbz#1370360
      rhbz#1371039, rhbz#1371358, rhbz#1371758, rhbz#1372580, rhbz#1373535
      rhbz#1373783, rhbz#1373849, rhbz#1374718, rhbz#1375268, rhbz#1375424
      rhbz#1375524, rhbz#1375887, rhbz#1375920, rhbz#1375939, rhbz#1376009
      rhbz#1376083, rhbz#1377602, rhbz#1377913, rhbz#1378290, rhbz#1378401
      rhbz#1379196, rhbz#1379212, rhbz#1379895, rhbz#1382079, rhbz#1386976
      rhbz#1387665, rhbz#1387666, rhbz#1393854, rhbz#1396597, rhbz#1399260
      rhbz#1401054


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.0-1
changelog:
  - Rebased to libvirt-3.0.0 (rhbz#1382640)
  - The rebase also fixes the following bugs:
      rhbz#1191901, rhbz#1257813, rhbz#1292984, rhbz#1300177, rhbz#1302168
      rhbz#1302171, rhbz#1332019, rhbz#1336564, rhbz#1349696, rhbz#1363586
      rhbz#1370357, rhbz#1373711, rhbz#1386466, rhbz#1396040, rhbz#1397940
      rhbz#1402690, rhbz#1402726, rhbz#1403691, rhbz#1404952, rhbz#1405269
      rhbz#1406442


author: Jiri Denemark <jdenemar@redhat.com> - 3.0.0-2
changelog:
  - Enable use of namespaces by default (rhbz#1382640)
  - virProcessRunInMountNamespace: Report errors from child
  - util: Introduce virFileReadLink
  - qemuDomainPrepareDisk: Fix ordering
  - qemuSecurityRestoreAllLabel: Don't use transactions
  - qemu_security: Use more transactions
  - qemuDomain{Attach,Detach}Device NS helpers: Don't relabel devices
  - qemuDomainCreateDevice: Properly deal with symlinks
  - qemuDomainCreateDevice: Don't loop endlessly
  - qemuDomainAttachDeviceMknod: Deal with symlinks
  - qemuDomainAttachDeviceMknod: Don't loop endlessly
  - qemuDomainAttachSCSIVHostDevice: Prefer qemuSecurity wrappers
  - qemuDomainAttachSCSIVHostDevice: manage /dev entry
  - qemu_security: Drop qemuSecuritySetRestoreAllLabelData struct
  - qemu_domain: Don't pass virDomainDeviceDefPtr to ns helpers
  - qemuDomainNamespaceSetupDisk: Drop useless @src variable
  - qemuDomainNamespace{Setup,Teardown}Disk: Don't pass pointer to full disk
  - qemuDomainDiskChainElement{Prepare,Revoke}: manage /dev entry
  - qemuDomainNamespaceSetupDisk: Simplify disk check
  - qemu_security: Introduce ImageLabel APIs


author: Jiri Denemark <jdenemar@redhat.com> - 3.1.0-1
changelog:
  - Rebased to libvirt-3.1.0 (rhbz#1382640)
  - The rebase also fixes the following bugs:
      rhbz#1268906, rhbz#1316774, rhbz#1330024, rhbz#1336564, rhbz#1343094
      rhbz#1344897, rhbz#1346566, rhbz#1349441, rhbz#1352529, rhbz#1374128
      rhbz#1375410, rhbz#1375417, rhbz#1378540, rhbz#1382640, rhbz#1383039
      rhbz#1397440, rhbz#1408701, rhbz#1410188, rhbz#1412834, rhbz#1414393
      rhbz#1417203, rhbz#1420205, rhbz#1420668, rhbz#1420718, rhbz#1421036


author: Jiri Denemark <jdenemar@redhat.com> - 3.1.0-2
changelog:
  - qemuDomainSaveImageUpdateDef: Don't overwrite errors from virDomainDefCheckABIStability (rhbz#1379200)
  - qemu_process: don't probe iothreads if it's not supported by QEMU (rhbz#1430258)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-1
changelog:
  - Rebased to libvirt-3.2.0 (rhbz#1382640)
  - The rebase also fixes the following bugs:
      rhbz#822148, rhbz#824989, rhbz#1004676, rhbz#1018251, rhbz#1181659
      rhbz#1181899, rhbz#1270403, rhbz#1292451, rhbz#1300769, rhbz#1329090
      rhbz#1366088, rhbz#1371617, rhbz#1372581, rhbz#1389313, rhbz#1398087
      rhbz#1404627, rhbz#1406791, rhbz#1408808, rhbz#1410225, rhbz#1415609
      rhbz#1422318, rhbz#1426176, rhbz#1428209, rhbz#1428893, rhbz#1429551
      rhbz#1430275, rhbz#1430634, rhbz#1430672, rhbz#1430679, rhbz#1431112
      rhbz#1431793, rhbz#1431852, rhbz#1433180, rhbz#1433183, rhbz#1434882
      rhbz#1436119, rhbz#1436999


author: Cole Robinson <crobinso@redhat.com> - 3.2.1-2
changelog:
  - Fix aarch64 gic default for non-kvm VMs (bz #1449837)
  - Don't run libvirtd in live environment, to avoid network collision (bz


author: Cole Robinson <crobinso@redhat.com> - 3.2.1-4
changelog:
  - Fix resuming qemu VMs suspended before libvirt 3.2.0
  - Fix issues with AMD CPU models, and some others


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-10
changelog:
  - qemu: Set iface MTU on hotplug (rhbz#1408701)
  - Use a separate buffer for <input> subelements (rhbz#1283251)
  - Use a separate buffer for <disk><driver> (rhbz#1283251)
  - Use a separate buffer for <controller><driver> (rhbz#1283251)
  - Use a separate buffer for <filesystem><driver> (rhbz#1283251)
  - conf: introduce virDomainControllerDriverFormat (rhbz#1283251)
  - conf: add iotlb attribute to iommu (rhbz#1283251)
  - qemu: format device-iotlb on intel-iommu command line (rhbz#1283251)
  - qemuxml2xmltest: add virtio-options test (rhbz#1283251)
  - conf: use a leading space in virDomainVirtioNetDriverFormat (rhbz#1283251)
  - Add virtio-related options to interfaces (rhbz#1283251)
  - add virtio-related options to memballoon (rhbz#1283251)
  - Add virtio-related options to disks (rhbz#1283251)
  - Add virtio-related options to controllers (rhbz#1283251)
  - Add virtio-related options to filesystems (rhbz#1283251)
  - Add virtio-related options to rng devices (rhbz#1283251)
  - Add virtio-related options to video (rhbz#1283251)
  - Add virtio-related options to input devices (rhbz#1283251)
  - qemuxml2argvtest: add virtio-options test case (rhbz#1283251)
  - qemu: format virtio-related options on the command line (rhbz#1283251)
  - qemu: Allow memAccess for hugepages again (rhbz#1214369, rhbz#1458638)
  - qemu: Prefer hugepages over mem source='file' (rhbz#1214369)
  - qemu: Don't try to use hugepages if not enabled (rhbz#1214369)
  - qemu: Introduce qemuDomainDefFromXML helper (rhbz#1460952)
  - qemu: Add qemuDomainMigratableDefCheckABIStability (rhbz#1460952)
  - qemu: Add qemuDomainCheckABIStability (rhbz#1460952)
  - qemu: Use qemuDomainCheckABIStability where needed (rhbz#1460952)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.6
changelog:
  - util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
  - util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
  - cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
  - conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
  - qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
  - cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.8
changelog:
  - qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1532183)
  - cpu_x86: Copy CPU signature from ancestor (rhbz#1533418)
  - qemu: take current async job into account in qemuBlockNodeNamesDetect (rhbz#1530129)
  - qemu: migration: fix race on cancelling drive mirror (rhbz#1530129)
  - qemu: drop code for VIR_DOMAIN_JOB_BOUNDED and timeRemaining (rhbz#1530130)
  - qemu: introduce qemu domain job status (rhbz#1530130)
  - qemu: introduce QEMU_DOMAIN_JOB_STATUS_POSTCOPY (rhbz#1530130)
  - qemu: start all async job with job status active (rhbz#1530130)
  - qemu: introduce migrating job status (rhbz#1530130)
  - qemu: migration: don't expose incomplete job as complete (rhbz#1530130)
  - qemu: Fix type of a completed job (rhbz#1530130)


author: Jiri Denemark <jdenemar@redhat.com> - 3.2.0-14.el7_4.9
changelog:
  - qemu: Fix crash in offline migration (rhbz#1530130)
  - RHEL: qemu: Report full stats for completed migration (rhbz#1530130)


author: Anthony PERARD <anthony.perard@citrix.com> - 4.10.0-2.xen410
changelog:
  - Import libvirt-4.10.0-2.fc30
  - Also bump Epoch to avoid issue when CentOS's libvirt package is updated


author: Daniel P. Berrangé <berrange@redhat.com> - 5.1.0-3
changelog:
  - Fix upgrades for rbd on i686 (rhbz #1688121)
  - Add missing xfsprogs-devel dep
  - Fix use of deprecated RBD features
  - Avoid using firewalld if unprivileged
  - Don't require ipv6 firewall support at startup (rhbz #1688968)


author: Cole Robinson <crobinso@redhat.com> - 5.1.0-4
changelog:
  - Mouse cursor doubled on QEMU VNC on ppc64le (bz #1565253)
  - Fix VM startup with cgroupv2 (bz #1688736)


author: Daniel P. Berrangé <berrange@redhat.com> - 5.1.0-5
changelog:
  - Define md-clear CPUID bit
  - Resolves: rhbz #1709977 (CVE-2018-12126), rhbz #1709979 (CVE-2018-12127),
    rhbz #1709997 (CVE-2018-12130), rhbz #1709984 (CVE-2019-11091)


author: Cole Robinson <crobinso@redhat.com> - 5.1.0-9
changelog:
  - CVE-2019-10161: arbitrary file read/exec via virDomainSaveImageGetXMLDesc
    API (bz #1722463, bz #1720115)
  - CVE-2019-10166: virDomainManagedSaveDefineXML API exposed to readonly
    clients (bz #1722462, bz #1720114)
  - CVE-2019-10167: arbitrary command execution via
    virConnectGetDomainCapabilities API (bz #1722464, bz #1720117)
  - CVE-2019-10168: arbitrary command execution via
    virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs (bz
    - CVE-2019-3886: virsh domhostname command discloses guest hostname in
    readonly mode [fedora-rawhide
  - Cannot start VM with a CBR 2.0 TPM device (bz #1712556)
  - libvirtd does not update VM .xml configurations after virsh
    snapshot/blockcommit (bz #1722348)


author: Cole Robinson <crobinso@redhat.com> - 6.6.0-5
changelog:
  - Fix noisy log error 'Failed to open file ...unique_id...' (bz #1692100)
  - Fix USB device error 'vendor cannot be 0' (bz #1897625)


author: Anthony PERARD <anthony.perard@citrix.com> - 6.6.0-6.xen415
changelog:
  - Rebuild with Xen 4.15
  - libxl tests xlconfigtest, xmconfigtest, and libxlxml2domconfigtest fails now.
    It seems they fails to connect to xenstore, so we ignore the result of `make
    check`.


author: Jiri Denemark <jdenemar@redhat.com> - 2.5.0-1
changelog:
  - Rebased to libvirt-python-2.5.0 (rhbz#1382642)
  - The rebase also fixes the following bugs:
      rhbz#1377071


author: Daniel P. Berrange <berrange@redhat.com> - 3.6.0-2
changelog:
  - Rename sub-RPMs to python2-libvirt & python3-libvirt
  - Re-add py3 conditionals for benefit of RHEL/CentOS builds


author: Iryna Shcherbina <ishcherb@redhat.com> - 4.5.20-3
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Niels de Vos <ndevos@redhat.com> 2.3.0-1
changelog:
  - Import of nfs-ganesha from current Fedora Rawhide
  - Disable the Ceph FSAL
  - Disable usage of jemalloc


author: Timothy Redaelli <tredaelli@redhat.com> - 2.9.2-3
changelog:
  - Build OVS as shared library
  - Build the C json native extension for Python (60x faster)
  - Fix TPS VerifyTest (rpm -V) by do not verify md5, size and mtime of
    /etc/sysconfig/openvswitch
  - Backport spec file modfications from "rhel: Use openvswitch user/group for
    the log directory"


author: Timothy Redaelli <tredaelli@redhat.com> - 2.9.2-6
changelog:
  - Backport "Add ovs.compat module to python package" (#1619712)
  - Backport a variant of "dhparams: Fix .c file generation with OpenSSL >= 1.1.1-pre9"


author: Flavio Leitner - 2.3.1-3.git20150327
changelog:
  - updated to 2.3.1-git4750c96
  - commented out kernel requires
  - added requires to procps-ng (testsuite #84)


author: Timothy Redaelli <tredaelli@redhat.com> - 2.7.0-1
changelog:
  - Link statically with DPDK 16.11.1 (#1451476)
  - Build OVS without DPDK support on all architectures not supported by DPDK
  - Added python3-six to BuildRequires in order to launch python3 tests too
  - Export PYTHONCOERCECLOCALE=0 in order to workaround an incompatibility
    between Python 3.6.0 (with PEP 538) on Fedora 26+ and testsuite (#1454364)
  - Disable tests on armv7hl


author: Vinzenz Feenstra <vfeenstr@redhat.com> - 1.0.8-1
changelog:
  - Pep8 rules applied on python files
  - Call restorecon on pidfile
  - Report multiple IPv4 addresses per device if available
  - Send 'uninstalled' notification non blocking
  - fixed "modified" files after clone.
  - rewrote nic's addresses functions in python 2.4 syntax.
  - GNOME 3.8 no longer supports gdm plugins. Therefore it's now disabled for
    higher versions
  - Added full qualified domain name reporting
  - Condrestart now ensures that the pid file does not only exist, but also is
    not empty
  - Added new optional parameter for shutdown to allow reboot


author: Amador Pahim <apahim@redhat.com> - 1.0.8-2
changelog:
  - Solved: Configure tuned only if current profile is off or default.
    performance
  Resolves: BZ#991538


author: Vinzenz Feenstra <vfeenstr@redhat.com> - 1.0.9-1
changelog:
  - Report swap usage of guests
  - Updated pam conversation approach
  - Python 2.4 compatability fix
  - Some build fixes applied


author: Yaniv Bronhaim <ybronhei@redhat.com> - 1.3-1
changelog:
  - Bumping minor version
  - Fix tests and make check
  - Make default target build and add make dist target
  - raise OSError with errno
  - use OSError instead childErrno when childErrno was failed to be read


author: Paul Howarth <paul@city-fan.org> - 2.5-1
changelog:
  - Update to 2.5
    - Added PKCS#1 encryption schemes (v1.5 and OAEP); we now have a decent,
      easy-to-use non-textbook RSA implementation
    - Added PKCS#1 signature schemes (v1.5 and PSS); v1.5 required some
      extensive changes to Hash modules to contain the algorithm-specific ASN.1
      OID, and to that end we now always have a (thin) Python module to hide the
      one in pure C
    - Added 2 standard Key Derivation Functions (PBKDF1 and PBKDF2)
    - Added export/import of RSA keys in OpenSSH and PKCS#8 formats
    - Added password-protected export/import of RSA keys (one old method for
      PKCS#8 PEM only)
    - Added ability to generate RSA key pairs with configurable public
      exponent e
    - Added ability to construct an RSA key pair even if only the private
      exponent d is known, and not p and q
    - Added SHA-2 C source code (fully from Lorenz Quack)
    - Unit tests for all the above
    - Updates to documentation (both inline and in Doc/pycrypt.rst)
    - Minor bug fixes (setup.py and tests)
  - Upstream no longer ships python-3-changes.txt


author: Paul Howarth <paul@city-fan.org> - 2.5-2
changelog:
  - Add upstream fixes for issues found by Dave Malcolm's experimental static
    analysis tool (#790584)


author: Paul Howarth <paul@city-fan.org> - 2.6-1
changelog:
  - Update to 2.6
    - Fix insecure ElGamal key generation (launchpad bug #985164, CVE-2012-2417)
    - Huge documentation cleanup
    - Added more tests, including test vectors from NIST 800-38A
    - Remove broken MODE_PGP, which never actually worked properly
    - A new mode, MODE_OPENPGP, has been added for people wishing to write
      OpenPGP implementations (see also launchpad bug #996814)
    - Fix: getPrime with invalid input causes Python to abort with fatal error
      (launchpad bug #988431)
    - Fix: Segfaults within error-handling paths (launchpad bug #934294)
    - Fix: Block ciphers allow empty string as IV (launchpad bug #997464)
    - Fix DevURandomRNG to work with Python3's new I/O stack
    - Remove automagic dependencies on libgmp and libmpir; let the caller
      disable them using args
    - Many other minor bug fixes and improvements
  - Drop upstream patches


author: Paul Howarth <paul@city-fan.org> - 2.6.1-13
changelog:
  - AES.new with invalid parameter crashes python (CVE-2013-7459)
    (https://github.com/dlitz/pycrypto/issues/176)


author: Juan Hernandez <juan.hernandez@redhat.com> - 3.6.0.0-1
changelog:
  - Added support for engine version 3.6.
  - Add support for Kerberos authentication #1145234.
  - Avoid clashes with the "export" method used by generateDS.py #1167851.


author: Juan Hernandez <juan.hernandez@redhat.com> - 3.6.0.1-1
changelog:
  - Don't use deprecated DefaultHttpClient #1255078.
  - Get provider certificates from user instead of from backend #1255862.
  - Improvements of the host networking API #1136329.
  - Report host network QoS also in host NIC and network #1249654.


author: Juan Hernandez <juan.hernandez@redhat.com> - 3.6.2.0-1
changelog:
  - Fix RSDL metadata for provisioned_size #1290012.
  - Document the use of All-Content in clusters #1287688.
  - VM pools can use use_latest_template_version #1284596.


author: Jonathan Steffan <jsteffan@fedoraproject.org> - 15.1.0-1
changelog:
  - Update to 15.1.0 (RHBZ#1187921,RHBZ#1192707)
  - Require python-service-identity (RHBZ#1119067)
  - Obsolete python-twisted-core-doc (RHBZ#1187025)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 16.1.1-3
changelog:
  - Drop tkinter dependency (only required for tkconch)
  - Use python3 conditionals
  - Move BR under the proper subpackage


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.1.0-2.el7
changelog:
  - Create separate qemu-guest-agent package based on qemu-kvm-rhev-2.1.0-1.el7 [bz#1117096]
  - Resolves: #bz1117096


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.1.0-3.el7
changelog:
  - Allow building qemu-guest-agent on ppc64le
  - Synchronize with qemu-kvm-rhev-2.1.0-3.el7
  - Resolves: bz#1132718
    (qemu-guest-agent fails to build for ppc64le)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.1.0-4.el7
changelog:
  - kvm-Mark-etc-sysconfig-qemu-ga-as-config-noreplace.patch [bz#1150924]
  - Resolves: bz#1150924
    (/etc/sysconfig/qemu-ga is replaced when updated)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0-2.el7
changelog:
  - synchronized with qemu-kvm-rhev-2.3.0-9.el7
  - qemuga-Change-fsreeze-hook-default-location.patch [bz#1210707]
  - qemuga-qga-commands-posix-Fix-bug-in-guest-fstrim.patch [bz#1211973]
  - Resolves: bz#1210707
    (The default path '/etc/qemu/fsfreeze-hook' for 'fsfreeze-hook' script doesn't exist)
  - Resolves: bz#1211973
    ('guest-fstrim' failed for guest with os on spapr-vscsi disk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0-3.el7
changelog:
  - qemuga-Do-not-stop-qemu-guest-agent-service-on-target-switc.patch [bz#1160930]
  - Resolves: bz#1160930
    (The guest agent service in rhel7 guest will be stopped after run the init command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0-4.el7
changelog:
  - qemuga-qga-fail-early-for-invalid-time.patch [bz#1224023]
  - Resolves: bz#1224023
    (The hwclock and systemclock of guest should be ccoincident while set a invalid domtime with guest agent)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.10.0-15.el7
changelog:
  - kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
  - kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
  - kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.10.0-16.el7
changelog:
  - kvm-gicv3-Convert-to-DEFINE_PROP_LINK.patch [bz#1513323]
  - kvm-hw-intc-arm_gicv3_its-Fix-the-VM-termination-in-vm_c.patch [bz#1513323]
  - kvm-hw-intc-arm_gicv3_its-Don-t-abort-on-table-save-fail.patch [bz#1513323]
  - kvm-hw-intc-arm_gicv3_its-Don-t-call-post_load-on-reset.patch [bz#1513323]
  - kvm-hw-intc-arm_gicv3_its-Implement-a-minimalist-reset.patch [bz#1513323]
  - kvm-linux-headers-Partial-header-update-against-v4.15-rc.patch [bz#1513323]
  - kvm-hw-intc-arm_gicv3_its-Implement-full-reset.patch [bz#1513323]
  - kvm-block-throttle-groups.c-allocate-RestartData-on-the-.patch [bz#1525868]
  - kvm-redhat-Fix-permissions-of-dev-kvm-on-a-freshly-boote.patch [bz#1527947]
  - Resolves: bz#1513323
    (vITS reset)
  - Resolves: bz#1525868
    (Guest hit core dump with both IO throttling and data plane)
  - Resolves: bz#1527947
    (Pegas1.1 - virsh domcapabilities doesn't report KVM capabilities on s390x)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.10.0-17.el7
changelog:
  - kvm-tools-kvm_stat-fix-command-line-option-g.patch [bz#1529676]
  - kvm-redhat-globally-limit-the-maximum-number-of-CPUs.patch [bz#1527449]
  - kvm-redhat-remove-manual-max_cpus-limitations-for-ppc.patch [bz#1527449]
  - kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1398633]
  - kvm-hw-ppc-spapr.c-abort-unplug_request-if-previous-unpl.patch [bz#1528173]
  - kvm-spapr-Correct-compatibility-mode-setting-for-hotplug.patch [bz#1528234]
  - kvm-ui-fix-dcl-unregister.patch [bz#1510809]
  - kvm-block-Open-backing-image-in-force-share-mode-for-siz.patch [bz#1526212]
  - kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1462145]
  - kvm-block-Don-t-use-BLK_PERM_CONSISTENT_READ-for-format-.patch [bz#1515604]
  - kvm-block-Don-t-request-I-O-permission-with-BDRV_O_NO_IO.patch [bz#1515604]
  - kvm-block-Formats-don-t-need-CONSISTENT_READ-with-NO_IO.patch [bz#1515604]
  - Resolves: bz#1398633
    ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
  - Resolves: bz#1462145
    (Qemu crashes when all fw_cfg slots are used)
  - Resolves: bz#1510809
    (qemu-kvm core dumped when booting up guest using both virtio-vga and VGA)
  - Resolves: bz#1515604
    (qemu-img info: failed to get "consistent read" lock on a mirroring image)
  - Resolves: bz#1526212
    (qemu-img should not need a write lock for creating the overlay image)
  - Resolves: bz#1527449
    (qemu-kvm-ma: vCPU count should be limited to 240 on all arches)
  - Resolves: bz#1528173
    (Hot-unplug memory  during booting early stage induced qemu-kvm coredump)
  - Resolves: bz#1528234
    (Pegas1.1 Alpha: Hotplugged vcpu does not guarantee CPU P8compat mode on POWER9 host (qemu-kvm))
  - Resolves: bz#1529676
    (kvm_stat: option '--guest' doesn't work)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.10.0-18.el7
changelog:
  - kvm-serial-always-transmit-send-receive-buffers-on-migra.patch [bz#1459945]
  - kvm-hw-acpi-Move-acpi_set_pci_info-to-pcihp.patch [bz#1507693]
  - kvm-scsi-block-Add-share-rw-option.patch [bz#1518482]
  - kvm-scsi-generic-Add-share-rw-option.patch [bz#1518482]
  - kvm-target-i386-sanitize-x86-MSR_PAT-loaded-from-another.patch [bz#1529461]
  - kvm-scsi-disk-release-AioContext-in-unaligned-WRITE-SAME.patch [bz#1526423]
  - kvm-hw-pci-bridge-fix-QEMU-crash-because-of-pcie-root-po.patch [bz#1520858]
  - kvm-spapr-Capabilities-infrastructure.patch [bz#1523414]
  - kvm-spapr-Treat-Hardware-Transactional-Memory-HTM-as-an-.patch [bz#1523414]
  - kvm-spapr-Validate-capabilities-on-migration.patch [bz#1523414]
  - kvm-spapr-Handle-VMX-VSX-presence-as-an-spapr-capability.patch [bz#1523414]
  - kvm-spapr-Handle-Decimal-Floating-Point-DFP-as-an-option.patch [bz#1523414]
  - kvm-hw-ppc-spapr_caps-Rework-spapr_caps-to-use-uint8-int.patch [bz#1523414]
  - kvm-spapr-Remove-unnecessary-options-field-from-sPAPRCap.patch [bz#1523414]
  - kvm-ppc-Change-Power9-compat-table-to-support-at-most-8-.patch [bz#1529243]
  - kvm-target-ppc-Clarify-compat-mode-max_threads-value.patch [bz#1529243]
  - kvm-spapr-Allow-some-cases-where-we-can-t-set-VSMT-mode-.patch [bz#1529243]
  - kvm-spapr-Adjust-default-VSMT-value-for-better-migration.patch [bz#1529243]
  - kvm-qemu-img-info-Force-U-downstream.patch [bz#1535992]
  - kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1398633]
  - kvm-spapr-fix-device-tree-properties-when-using-compatib.patch [bz#1535752]
  - Resolves: bz#1398633
    ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
  - Resolves: bz#1459945
    (migration fails with hungup serial console reader on -M pc-i440fx-rhel7.0.0 and pc-i440fx-rhel7.1.0)
  - Resolves: bz#1507693
    (Unable to hot plug device to VM reporting libvirt errors.)
  - Resolves: bz#1518482
    ("share-rw" property is unavailable on scsi passthrough devices)
  - Resolves: bz#1520858
    (qemu-kvm core dumped when booting guest with more pcie-root-ports than available slots and io-reserve=0)
  - Resolves: bz#1523414
    ([POWER guests] Verify compatible CPU & hypervisor capabilities across migration)
  - Resolves: bz#1526423
    (QEMU hang with data plane enabled after some sg_write_same operations in guest)
  - Resolves: bz#1529243
    (Migration from P9 to P8, migration failed and qemu quit on dst end with "error while loading state for instance 0x0 of device 'ics'")
  - Resolves: bz#1529461
    (On amd hosts, after migration from rhel6.9.z to rhel7.5, CPU utilization of qemu-kvm is always more than 100% on destination rhel7.5 host)
  - Resolves: bz#1535752
    (Device tree incorrectly advertises compatibility modes for secondary CPUs)
  - Resolves: bz#1535992
    (Set force shared option "-U" as default option for "qemu-img info")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.10.0-19.el7
changelog:
  - kvm-Drop-105th-key-from-en-us-keymap.patch [bz#1513870]
  - kvm-linux-headers-update.patch [bz#1535606]
  - kvm-s390x-kvm-Handle-bpb-feature.patch [bz#1535606]
  - kvm-s390x-kvm-provide-stfle.81.patch [bz#1535606]
  - kvm-osdep-Retry-SETLK-upon-EINTR.patch [bz#1529053]
  - kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534682]
  - kvm-usb-storage-Fix-share-rw-option-parsing.patch [bz#1525324]
  - kvm-spapr-disable-memory-hotplug.patch [bz#1535952]
  - Resolves: bz#1513870
    (For VNC connection, characters '|' and '<' are both recognized as '>' in linux guests, while '<' and '>' are both recognized as '|' in windows guest)
  - Resolves: bz#1525324
    (2 VMs both with 'share-rw=on' appending on '-device usb-storage' for the same source image can not be started at the same time)
  - Resolves: bz#1529053
    (Miss the handling of EINTR in the fcntl calls made by QEMU)
  - Resolves: bz#1534682
    (CVE-2018-5683 qemu-kvm-rhev: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.10.0-20.el7
changelog:
  - kvm-console-fix-dpy_gfx_replace_surface-assert.patch [bz#1505696]
  - kvm-ui-add-tracing-of-VNC-operations-related-to-QIOChann.patch [bz#1527404]
  - kvm-ui-add-tracing-of-VNC-authentication-process.patch [bz#1527404]
  - kvm-ui-remove-sync-parameter-from-vnc_update_client.patch [bz#1527404]
  - kvm-ui-remove-unreachable-code-in-vnc_update_client.patch [bz#1527404]
  - kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527404]
  - kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527404]
  - kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527404]
  - kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527404]
  - kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527404]
  - kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527404]
  - kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527404]
  - kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527404]
  - kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527404]
  - kvm-ui-add-trace-events-related-to-VNC-client-throttling.patch [bz#1527404]
  - kvm-ui-mix-misleading-comments-return-types-of-VNC-I-O-h.patch [bz#1527404]
  - kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527404]
  - kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527404]
  - kvm-dump-guest-memory.py-skip-vmcoreinfo-section-if-not-.patch [bz#1398633]
  - kvm-virtio-gpu-disallow-vIOMMU.patch [bz#1540182]
  - Resolves: bz#1398633
    ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
  - Resolves: bz#1505696
    (Qemu crashed when open the second display of virtio video)
  - Resolves: bz#1527404
    (CVE-2017-15124 qemu-kvm-rhev: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])
  - Resolves: bz#1540182
    (QEMU: disallow virtio-gpu to boot with vIOMMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.10.0-21.el7
changelog:
  - kvm-migration-Recover-block-devices-if-failure-in-device.patch [bz#1538494]
  - kvm-migration-savevm.c-set-MAX_VM_CMD_PACKAGED_SIZE-to-1.patch [bz#1540003]
  - kvm-pci-bus-let-it-has-higher-migration-priority.patch [bz#1538953]
  - kvm-spapr-set-vsmt-to-MAX-8-smp_threads.patch [bz#1542421]
  - kvm-target-ppc-spapr_caps-Add-macro-to-generate-spapr_ca.patch [bz#1532050]
  - kvm-target-ppc-kvm-Add-cap_ppc_safe_-cache-bounds_check-.patch [bz#1532050]
  - kvm-target-ppc-spapr_caps-Add-support-for-tristate-spapr.patch [bz#1532050]
  - kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_cach.patch [bz#1532050]
  - kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_boun.patch [bz#1532050]
  - kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_indi.patch [bz#1532050]
  - kvm-target-ppc-introduce-the-PPC_BIT-macro.patch [bz#1532050]
  - kvm-target-ppc-spapr-Add-H-Call-H_GET_CPU_CHARACTERISTIC.patch [bz#1532050]
  - kvm-spapr-add-missing-break-in-h_get_cpu_characteristics.patch [bz#1532050]
  - kvm-vfio-pci-Add-option-to-disable-GeForce-quirks.patch [bz#1508330]
  - kvm-Disable-GeForce-quirks-in-vfio-pci-for-RHEL-machines.patch [bz#1508330]
  - Resolves: bz#1508330
    (Interrupt latency issues with vGPU on KVM hypervisor.)
  - Resolves: bz#1532050
    ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} (rhel 7.5))
  - Resolves: bz#1538494
    (Guest crashed on the source host when cancel migration by virDomainMigrateBegin3Params sometimes)
  - Resolves: bz#1538953
    (IOTLB entry size mismatch before/after migration during DPDK PVP testing)
  - Resolves: bz#1540003
    (Postcopy migration failed with "Unreasonably large packaged state")
  - Resolves: bz#1542421
    (Pegas1.1 Snapshot1 [4.14.0-35.el7a.ppc64le] [qemu-kvm-ma-2.10.0-18.el7.ppc64le] qemu-kvm behaves incorrectly for guest boot with invalid threads)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.10.0-21.el7_5.1
changelog:
  - kvm-hw-ppc-spapr_hcall-set-htab_shift-after-kvmppc_resiz.patch [bz#1554956]
  - kvm-memory-inline-some-performance-sensitive-accessors.patch [bz#1554929]
  - kvm-address_space_write-address_space_to_flatview-needs-.patch [bz#1554929]
  - kvm-address_space_read-address_space_to_flatview-needs-R.patch [bz#1554929]
  - kvm-address_space_access_valid-address_space_to_flatview.patch [bz#1554929]
  - kvm-address_space_map-address_space_to_flatview-needs-RC.patch [bz#1554929]
  - kvm-address_space_rw-address_space_to_flatview-needs-RCU.patch [bz#1554929]
  - kvm-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch [bz#1554951]
  - kvm-ppc-spapr-caps-Disallow-setting-workaround-for-spapr.patch [bz#1554951]
  - kvm-target-ppc-Check-mask-when-setting-cap_ppc_safe_indi.patch [bz#1554951]
  - kvm-ppc-spapr-caps-Add-support-for-custom-spapr_capabili.patch [bz#1554951]
  - kvm-ppc-spapr-caps-Convert-cap-cfpc-to-custom-spapr-cap.patch [bz#1554951]
  - kvm-ppc-spapr-caps-Convert-cap-sbbc-to-custom-spapr-cap.patch [bz#1554951]
  - kvm-ppc-spapr-caps-Convert-cap-ibs-to-custom-spapr-cap.patch [bz#1554951]
  - kvm-ppc-spapr-caps-Define-the-pseries-2.12-sxxm-machine-.patch [bz#1554951]
  - kvm-redhat-Define-the-pseries-rhel7.5-sxxm-machine-type.patch [bz#1554951]
  - kvm-redhat-Define-the-pseries-rhel7.4-sxxm-machine-type.patch [bz#1554951]
  - kvm-redhat-Define-the-pseries-rhel7.3-sxxm-machine-type.patch [bz#1554951]
  - kvm-block-Fix-flags-in-reopen-queue.patch [bz#1554946]
  - kvm-iotests-Add-regression-test-for-commit-base-locking.patch [bz#1554946]
  - Resolves: bz#1554929
    (incorrect locking (possible use-after-free) with bug 1481593 fix [rhel-7.5.z])
  - Resolves: bz#1554946
    ([Regression] Cannot delete VM's snapshot [rhel-7.5.z])
  - Resolves: bz#1554951
    ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} Add machine type variants [rhel-7.5.z])
  - Resolves: bz#1554956
    ([ppc64] Migration will fail after HPT resizing [rhel-7.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.10.0-21.el7_5.2
changelog:
  - kvm-arm-postpone-device-listener-unregister.patch [bz#1555213]
  - kvm-vfio-listener-unregister-before-unset-container.patch [bz#1555213]
  - kvm-memory-do-explicit-cleanup-when-remove-listeners.patch [bz#1555213]
  - kvm-vl-pause-vcpus-before-stopping-iothreads.patch [bz#1566586]
  - kvm-aio-rename-aio_context_in_iothread-to-in_aio_context.patch [bz#1566586]
  - kvm-block-extract-AIO_WAIT_WHILE-from-BlockDriverState.patch [bz#1566586]
  - kvm-block-add-aio_wait_bh_oneshot.patch [bz#1566586]
  - kvm-virtio-blk-fix-race-between-.ioeventfd_stop-and-vq-h.patch [bz#1566586]
  - kvm-virtio-scsi-fix-race-between-.ioeventfd_stop-and-vq-.patch [bz#1566586]
  - kvm-vl-introduce-vm_shutdown.patch [bz#1566586]
  - kvm-vga-add-ram_addr_t-cast.patch [bz#1566874]
  - kvm-vga-fix-region-calculation.patch [bz#1566874]
  - kvm-block-file-posix-Fix-fully-preallocated-truncate.patch [bz#1566587]
  - kvm-iotests-Test-preallocated-truncate-of-2G-image.patch [bz#1566587]
  - kvm-block-handle-invalid-lseek-returns-gracefully.patch [bz#1566369]
  - kvm-multiboot-bss_end_addr-can-be-zero.patch [bz#1549821]
  - kvm-multiboot-Reject-kernels-exceeding-the-address-space.patch [bz#1549821]
  - kvm-multiboot-Check-validity-of-mh_header_addr.patch [bz#1549821]
  - kvm-queue-add-QSIMPLEQ_PREPEND.patch [bz#1566537]
  - kvm-coroutine-avoid-co_queue_wakeup-recursion.patch [bz#1566537]
  - kvm-coroutine-add-test-aio-coroutine-queue-chaining-test.patch [bz#1566537]
  - Resolves: bz#1549821
    (CVE-2018-7550 qemu-kvm-rhev: Qemu: i386:  multiboot OOB access while loading kernel image [rhel-7.5.z])
  - Resolves: bz#1555213
    ([Q35] "DEVICE_DELETED" event didn't return after delete the second passthrough vf device [rhel-7.5.z])
  - Resolves: bz#1566369
    (qemu-img commit fails with "block/file-posix.c:1774: find_allocation: Assertion `offs >= start' failed" [rhel-7.5.z])
  - Resolves: bz#1566537
    (qemu-img convert exceeds stack limit [rhel-7.5.z])
  - Resolves: bz#1566586
    (Occurred core dump with multi-object when quitted qemu during doing IO [rhel-7.5.z])
  - Resolves: bz#1566587
    (Unable to resize image with preallocation=full mode [rhel-7.5.z])
  - Resolves: bz#1566874
    (CVE-2018-7858 qemu-kvm-rhev: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.10.0-21.el7_5.3
changelog:
  - kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574214]
  - Resolves: bz#1574214
    (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.10.0-21.el7_5.4
changelog:
  - kvm-scsi-disk-allow-customizing-the-SCSI-version.patch [bz#1571370]
  - kvm-hw-scsi-support-SCSI-2-passthrough-without-PI.patch [bz#1571370]
  - kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1584370]
  - kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1584370]
  - kvm-cpus-Fix-event-order-on-resume-of-stopped-guest.patch [bz#1582122]
  - kvm-spec-Enable-Native-Ceph-support-on-all-architectures.patch [bz#1588001]
  - Resolves: bz#1571370
    (Pegas1.1 Alpha: SCSI pass-thru of aacraid RAID1 is inaccessible (qemu-kvm-rhev) [rhel-7.5.z])
  - Resolves: bz#1582122
    (IOERROR pause code lost after resuming a VM while I/O error is still present [rhel-7.5.z])
  - Resolves: bz#1584370
    (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: AMD: speculative store bypass [rhel-7.5.z])
  - Resolves: bz#1588001
    (Enable Native Ceph support on non x86_64 CPUs [rhel-7.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.10.0-21.el7_5.5
changelog:
  - kvm-slirp-correct-size-computation-while-concatenating-m.patch [bz#1586256]
  - Resolves: bz#1586256
    (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.10.0-21.el7_5.6
changelog:
  - kvm-slirp-reformat-m_inc-routine.patch [bz#1586256]
  - kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586256]
  - Resolves: bz#1586256
    (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.10.0-21.el7_5.7
changelog:
  - kvm-aio-posix-Don-t-count-ctx-notifier-as-progress-when-.patch [bz#1619128]
  - kvm-aio-Do-aio_notify_accept-only-during-blocking-aio_po.patch [bz#1619128]
  - Resolves: bz#1619128
    (VM doesn't boot from HD [rhel-7.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-11.el7
changelog:
  - kvm-slirp-reformat-m_inc-routine.patch [bz#1586255]
  - kvm-slirp-Correct-size-check-in-m_inc.patch [bz#1586255]
  - kvm-Revert-Disable-PCIe-to-PCI-bridge-device.patch [bz#1390329]
  - kvm-aio-posix-Don-t-count-ctx-notifier-as-progress-when-.patch [bz#1562750]
  - kvm-aio-Do-aio_notify_accept-only-during-blocking-aio_po.patch [bz#1562750]
  - Resolves: bz#1390329
    (PCIe: Add Generic PCIe-PCI bridge)
  - Resolves: bz#1562750
    (VM doesn't boot from HD)
  - Resolves: bz#1586255
    (CVE-2018-11806 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams [rhel-7.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-12.el7
changelog:
  - kvm-e1000e-Do-not-auto-clear-ICR-bits-which-aren-t-set-i.patch [bz#1596010]
  - kvm-e1000e-Prevent-MSI-MSI-X-storms.patch [bz#1596010]
  - kvm-hw-usb-dev-smartcard-reader-Handle-64-B-USB-packets.patch [bz#1589147]
  - kvm-i386-Disable-TOPOEXT-by-default-on-cpu-host.patch [bz#1613277]
  - kvm-RHEL-Disable-transparent-hugepages-on-POWER8-KVM-hos.patch [bz#1620378]
  - Resolves: bz#1589147
    (Handle 64 B USB packets for Smart Card redirection)
  - Resolves: bz#1596010
    (The network link can't be detected on guest when the guest uses e1000e model type)
  - Resolves: bz#1613277
    (kernel panic in init_amd_cacheinfo)
  - Resolves: bz#1620378
    (qemu-kvm-rhev: Failed to allocate KVM HPT with vfio device enabled - disable THP for POWER8 guests)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-13.el7
changelog:
  - kvm-linux-headers-asm-s390-kvm.h-header-sync.patch [bz#1622962]
  - kvm-s390x-kvm-add-etoken-facility.patch [bz#1622962]
  - kvm-block-for-jobs-do-not-clear-user_paused-until-after-.patch [bz#1605026]
  - kvm-iotests-Add-failure-matching-to-common.qemu.patch [bz#1605026]
  - kvm-block-iotest-to-catch-abort-on-forced-blockjob-cance.patch [bz#1605026]
  - kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574216]
  - kvm-target-i386-sev-fix-memory-leaks.patch [bz#1624390]
  - kvm-i386-Fix-arch_query_cpu_model_expansion-leak.patch [bz#1624390]
  - kvm-migration-discard-non-migratable-RAMBlocks.patch [bz#1539280]
  - kvm-vfio-pci-do-not-set-the-PCIDevice-has_rom-attribute.patch [bz#1539280]
  - kvm-memory-exec-Expose-all-memory-block-related-flags.patch [bz#1539280]
  - kvm-memory-exec-switch-file-ram-allocation-functions-to-.patch [bz#1539280]
  - kvm-configure-add-libpmem-support.patch [bz#1539280]
  - kvm-hostmem-file-add-the-pmem-option.patch [bz#1539280]
  - kvm-mem-nvdimm-ensure-write-persistence-to-PMEM-in-label.patch [bz#1539280]
  - kvm-migration-ram-Add-check-and-info-message-to-nvdimm-p.patch [bz#1539280]
  - kvm-migration-ram-ensure-write-persistence-on-loading-al.patch [bz#1539280]
  - kvm-intel-iommu-send-PSI-always-even-if-across-PDEs.patch [bz#1623859]
  - kvm-intel-iommu-remove-IntelIOMMUNotifierNode.patch [bz#1623859]
  - kvm-intel-iommu-add-iommu-lock.patch [bz#1623859]
  - kvm-intel-iommu-only-do-page-walk-for-MAP-notifiers.patch [bz#1623859]
  - kvm-intel-iommu-introduce-vtd_page_walk_info.patch [bz#1623859]
  - kvm-intel-iommu-pass-in-address-space-when-page-walk.patch [bz#1623859]
  - kvm-intel-iommu-trace-domain-id-during-page-walk.patch [bz#1623859]
  - kvm-util-implement-simple-iova-tree.patch [bz#1623859]
  - kvm-intel-iommu-rework-the-page-walk-logic.patch [bz#1623859]
  - kvm-qemu-img-fix-regression-copying-secrets-during-conve.patch [bz#1575578]
  - kvm-redhat-rewrap-build_configure.sh-cmdline-for-the-rh-.patch [bz#1500753]
  - kvm-redhat-enable-opengl-for-x86_64.patch [bz#1500753]
  - Resolves: bz#1500753
    ([RFE] Support console on Intel vGPU - qemu)
  - Resolves: bz#1539280
    ([Intel 7.6 Bug] [KVM][Crystal Ridge] Lack of data persistence guarantee of QEMU writes to host PMEM)
  - Resolves: bz#1574216
    (CVE-2018-3639 qemu-kvm-rhev: hw: cpu: speculative store bypass [rhel-7.6])
  - Resolves: bz#1575578
    (Failed to convert a source image to the qcow2 image encrypted by luks)
  - Resolves: bz#1605026
    (Quitting VM causes qemu core dump once the block mirror job paused for no enough target space)
  - Resolves: bz#1622962
    (Add etoken support to qemu-kvm for s390x KVM guests)
  - Resolves: bz#1623859
    (Guest "Detected Tx unit Hang" and host "DMAR: fault addr" when booting guest with ixgbe device assignment,)
  - Resolves: bz#1624390
    (Memory leaks)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-14.el7
changelog:
  - kvm-mirror-Fail-gracefully-for-source-target.patch [bz#1582042]
  - Resolves: bz#1582042
    (Segfault on 'blockdev-mirror' with same node as source and target)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-15.el7
changelog:
  - kvm-jobs-change-start-callback-to-run-callback.patch [bz#1626061]
  - kvm-jobs-canonize-Error-object.patch [bz#1626061]
  - kvm-jobs-add-exit-shim.patch [bz#1626061]
  - kvm-block-commit-utilize-job_exit-shim.patch [bz#1626061]
  - kvm-block-mirror-utilize-job_exit-shim.patch [bz#1626061]
  - kvm-jobs-utilize-job_exit-shim.patch [bz#1626061]
  - kvm-block-backup-make-function-variables-consistently-na.patch [bz#1626061]
  - kvm-jobs-remove-ret-argument-to-job_completed-privatize-.patch [bz#1626061]
  - kvm-jobs-remove-job_defer_to_main_loop.patch [bz#1626061]
  - kvm-block-commit-add-block-job-creation-flags.patch [bz#1626061]
  - kvm-block-mirror-add-block-job-creation-flags.patch [bz#1626061]
  - kvm-block-stream-add-block-job-creation-flags.patch [bz#1626061]
  - kvm-block-commit-refactor-commit-to-use-job-callbacks.patch [bz#1626061]
  - kvm-block-mirror-don-t-install-backing-chain-on-abort.patch [bz#1626061]
  - kvm-block-mirror-conservative-mirror_exit-refactor.patch [bz#1626061]
  - kvm-block-stream-refactor-stream-to-use-job-callbacks.patch [bz#1626061]
  - kvm-tests-blockjob-replace-Blockjob-with-Job.patch [bz#1626061]
  - kvm-tests-test-blockjob-remove-exit-callback.patch [bz#1626061]
  - kvm-tests-test-blockjob-txn-move-.exit-to-.clean.patch [bz#1626061]
  - kvm-jobs-remove-.exit-callback.patch [bz#1626061]
  - kvm-qapi-block-commit-expose-new-job-properties.patch [bz#1626061]
  - kvm-qapi-block-mirror-expose-new-job-properties.patch [bz#1626061]
  - kvm-qapi-block-stream-expose-new-job-properties.patch [bz#1626061]
  - kvm-block-backup-qapi-documentation-fixup.patch [bz#1626061]
  - kvm-blockdev-document-transactional-shortcomings.patch [bz#1626061]
  - Resolves: bz#1626061
    (qemu blockjobs other than backup do not support job-finalize or job-dismiss)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-16.el7
changelog:
  - kvm-commit-Add-top-node-base-node-options.patch [bz#1624012]
  - kvm-qemu-iotests-Test-commit-with-top-node-base-node.patch [bz#1624012]
  - kvm-block-rbd-pull-out-qemu_rbd_convert_options.patch [bz#1610605]
  - kvm-block-rbd-Attempt-to-parse-legacy-filenames.patch [bz#1610605]
  - kvm-block-rbd-add-iotest-for-rbd-legacy-keyvalue-filenam.patch [bz#1610605]
  - kvm-pc-acpi-revert-back-to-1-SRAT-entry-for-hotpluggable.patch [bz#1626059]
  - kvm-blockdev-backup-add-bitmap-argument.patch [bz#1628373]
  - kvm-test-bdrv-drain-bdrv_drain-works-with-cross-AioConte.patch [bz#1601212]
  - kvm-block-Use-bdrv_do_drain_begin-end-in-bdrv_drain_all.patch [bz#1601212]
  - kvm-block-Remove-recursive-parameter-from-bdrv_drain_inv.patch [bz#1601212]
  - kvm-block-Don-t-manually-poll-in-bdrv_drain_all.patch [bz#1601212]
  - kvm-tests-test-bdrv-drain-bdrv_drain_all-works-in-corout.patch [bz#1601212]
  - kvm-block-Avoid-unnecessary-aio_poll-in-AIO_WAIT_WHILE.patch [bz#1601212]
  - kvm-block-Really-pause-block-jobs-on-drain.patch [bz#1601212]
  - kvm-block-Remove-bdrv_drain_recurse.patch [bz#1601212]
  - kvm-test-bdrv-drain-Add-test-for-node-deletion.patch [bz#1601212]
  - kvm-block-Drain-recursively-with-a-single-BDRV_POLL_WHIL.patch [bz#1601212]
  - kvm-test-bdrv-drain-Test-node-deletion-in-subtree-recurs.patch [bz#1601212]
  - kvm-block-Don-t-poll-in-parent-drain-callbacks.patch [bz#1601212]
  - kvm-test-bdrv-drain-Graph-change-through-parent-callback.patch [bz#1601212]
  - kvm-block-Defer-.bdrv_drain_begin-callback-to-polling-ph.patch [bz#1601212]
  - kvm-test-bdrv-drain-Test-that-bdrv_drain_invoke-doesn-t-.patch [bz#1601212]
  - kvm-block-Allow-AIO_WAIT_WHILE-with-NULL-ctx.patch [bz#1601212]
  - kvm-block-Move-bdrv_drain_all_begin-out-of-coroutine-con.patch [bz#1601212]
  - kvm-block-ignore_bds_parents-parameter-for-drain-functio.patch [bz#1601212]
  - kvm-block-Allow-graph-changes-in-bdrv_drain_all_begin-en.patch [bz#1601212]
  - kvm-test-bdrv-drain-Test-graph-changes-in-drain_all-sect.patch [bz#1601212]
  - kvm-block-Poll-after-drain-on-attaching-a-node.patch [bz#1601212]
  - kvm-test-bdrv-drain-Test-bdrv_append-to-drained-node.patch [bz#1601212]
  - kvm-block-linux-aio-acquire-AioContext-before-qemu_laio_.patch [bz#1601212]
  - kvm-util-async-use-qemu_aio_coroutine_enter-in-co_schedu.patch [bz#1601212]
  - kvm-job-Fix-nested-aio_poll-hanging-in-job_txn_apply.patch [bz#1601212]
  - kvm-job-Fix-missing-locking-due-to-mismerge.patch [bz#1601212]
  - kvm-blockjob-Wake-up-BDS-when-job-becomes-idle.patch [bz#1601212]
  - kvm-aio-wait-Increase-num_waiters-even-in-home-thread.patch [bz#1601212]
  - kvm-test-bdrv-drain-Drain-with-block-jobs-in-an-I-O-thre.patch [bz#1601212]
  - kvm-test-blockjob-Acquire-AioContext-around-job_cancel_s.patch [bz#1601212]
  - kvm-job-Use-AIO_WAIT_WHILE-in-job_finish_sync.patch [bz#1601212]
  - kvm-test-bdrv-drain-Test-AIO_WAIT_WHILE-in-completion-ca.patch [bz#1601212]
  - kvm-block-Add-missing-locking-in-bdrv_co_drain_bh_cb.patch [bz#1601212]
  - kvm-block-backend-Add-.drained_poll-callback.patch [bz#1601212]
  - kvm-block-backend-Fix-potential-double-blk_delete.patch [bz#1601212]
  - kvm-block-backend-Decrease-in_flight-only-after-callback.patch [bz#1601212]
  - kvm-mirror-Fix-potential-use-after-free-in-active-commit.patch [bz#1601212]
  - kvm-blockjob-Lie-better-in-child_job_drained_poll.patch [bz#1601212]
  - kvm-block-Remove-aio_poll-in-bdrv_drain_poll-variants.patch [bz#1601212]
  - kvm-test-bdrv-drain-Test-nested-poll-in-bdrv_drain_poll_.patch [bz#1601212]
  - kvm-job-Avoid-deadlocks-in-job_completed_txn_abort.patch [bz#1601212]
  - kvm-test-bdrv-drain-AIO_WAIT_WHILE-in-job-.commit-.abort.patch [bz#1601212]
  - Resolves: bz#1601212
    (qemu coredumps on block-commit)
  - Resolves: bz#1610605
    (rbd json format of 7.6 is incompatible with 7.5)
  - Resolves: bz#1624012
    (allow using node-names with block-commit)
  - Resolves: bz#1626059
    (RHEL6 guest panics on boot if  hotpluggable memory (pc-dimm) is present  at boot time)
  - Resolves: bz#1628373
    (blockdev-backup does not accept bitmap parameter)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-17.el7
changelog:
  - kvm-aio-posix-fix-concurrent-access-to-poll_disable_cnt.patch [bz#1628191]
  - kvm-aio-posix-compute-timeout-before-polling.patch [bz#1628191]
  - kvm-aio-posix-do-skip-system-call-if-ctx-notifier-pollin.patch [bz#1628191]
  - Resolves: bz#1628191
    (~40% virtio_blk disk performance drop for win2012r2 guest when comparing qemu-kvm-rhev-2.12.0-9 with qemu-kvm-rhev-2.12.0-12)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-18.el7
changelog:
  - kvm-test-bdrv-drain-Fix-outdated-comments.patch [bz#1618584]
  - kvm-block-Use-a-single-global-AioWait.patch [bz#1618584]
  - kvm-test-bdrv-drain-Test-draining-job-source-child-and-p.patch [bz#1618584]
  - Resolves: bz#1618584
    (block commit aborts with "Co-routine was already scheduled")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-18.el7_6.1
changelog:
  - kvm-target-i386-cpu-Add-downstream-only-STIBP-CPUID-flag.patch [bz#1638077]
  - Resolves: bz#1638077
    (Cross migration from RHEL7.5 to RHEL7.6 fails with cpu flag stibp [rhel-7.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-18.el7_6.2
changelog:
  - kvm-Re-enable-disabled-Hyper-V-enlightenments.patch [bz#1638835]
  - Resolves: bz#1638835
    (High Host CPU load for Windows 10 Guests (Update 1803)  when idle [rhel-7.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-18.el7_6.3
changelog:
  - kvm-include-Add-IEC-binary-prefixes-in-qemu-units.h.patch [bz#1640927]
  - kvm-hw-scsi-cleanups-before-VPD-BL-emulation.patch [bz#1640927]
  - kvm-hw-scsi-centralize-SG_IO-calls-into-single-function.patch [bz#1640927]
  - kvm-hw-scsi-add-VPD-Block-Limits-emulation.patch [bz#1640927]
  - kvm-scsi-disk-Block-Device-Characteristics-emulation-fix.patch [bz#1640927]
  - kvm-scsi-generic-keep-VPD-page-list-sorted.patch [bz#1640927]
  - kvm-scsi-generic-avoid-out-of-bounds-access-to-VPD-page-.patch [bz#1640927]
  - kvm-scsi-generic-avoid-invalid-access-to-struct-when-emu.patch [bz#1640927]
  - kvm-scsi-generic-do-not-do-VPD-emulation-for-sense-other.patch [bz#1640927]
  - kvm-qemu-error-introduce-error-warn-_report_once.patch [bz#1647719]
  - kvm-intel-iommu-start-to-use-error_report_once.patch [bz#1647719]
  - kvm-intel-iommu-replace-more-vtd_err_-traces.patch [bz#1647719]
  - kvm-intel_iommu-introduce-vtd_reset_caches.patch [bz#1647719]
  - kvm-intel_iommu-better-handling-of-dmar-state-switch.patch [bz#1647719]
  - kvm-intel_iommu-move-ce-fetching-out-when-sync-shadow.patch [bz#1647719]
  - kvm-intel_iommu-handle-invalid-ce-for-shadow-sync.patch [bz#1647719]
  - kvm-block-Update-flags-in-bdrv_set_read_only.patch [bz#1650175]
  - kvm-block-Add-auto-read-only-option.patch [bz#1650175]
  - kvm-rbd-Close-image-in-qemu_rbd_open-error-path.patch [bz#1650175]
  - kvm-block-Require-auto-read-only-for-existing-fallbacks.patch [bz#1650175]
  - kvm-nbd-Support-auto-read-only-option.patch [bz#1650175]
  - kvm-file-posix-Support-auto-read-only-option.patch [bz#1650175]
  - kvm-curl-Support-auto-read-only-option.patch [bz#1650175]
  - kvm-gluster-Support-auto-read-only-option.patch [bz#1650175]
  - kvm-iscsi-Support-auto-read-only-option.patch [bz#1650175]
  - kvm-block-Make-auto-read-only-on-default-for-drive.patch [bz#1650175]
  - kvm-qemu-iotests-Test-auto-read-only-with-drive-and-bloc.patch [bz#1650175]
  - kvm-block-Fix-update-of-BDRV_O_AUTO_RDONLY-in-update_fla.patch [bz#1650175]
  - kvm-block-Don-t-inactivate-children-before-parents.patch [bz#1654963]
  - kvm-iotests-Test-migration-with-blockdev.patch [bz#1654963 bz#1633536]
  - Resolves: bz#1633536
    (Qemu core dump when do migration after hot plugging a backend image with 'blockdev-add'(without the frontend))
  - Resolves: bz#1640927
    (Guests don't always see correct transfer limits for passed through scsi devices (e.g. raid0 controlled by sas 9361-8i) [rhel-7.6.z])
  - Resolves: bz#1647719
    (boot guest with q35+vIOMMU+ device assignment, qemu crash when return assigned network devices from vfio driver to ixgbe in guest [rhel-7.6.z])
  - Resolves: bz#1650175
    (block-commit can't be used with -blockdev [rhel-7.6.z])
  - Resolves: bz#1654963
    (Qemu core dump when do migration after hot plugging a backend image with 'blockdev-add'(without the frontend) [rhel-7.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.12.0-18.el7_6.4
changelog:
  - kvm-block-backend-Make-blk_inc-dec_in_flight-public.patch [bz#1693105]
  - kvm-virtio-blk-Increase-in_flight-for-request-restart-BH.patch [bz#1693105]
  - kvm-block-Fix-AioContext-switch-for-drained-node.patch [bz#1693105]
  - kvm-test-bdrv-drain-AioContext-switch-in-drained-section.patch [bz#1693105]
  - kvm-block-Use-normal-drain-for-bdrv_set_aio_context.patch [bz#1693105]
  - Resolves: bz#1693105
    (qemu with iothreads enabled crashes on resume after enospc pause for disk extension [rhel-7.6.z])


author: Danilo de Paula <ddepaula@redhat.com>- 2.12.0-18.el7_6.5
changelog:
  - kvm-target-i386-define-md-clear-bit-rhev.patch [bz#1693219]
  - Resolves: bz#1693219
    (CVE-2018-12126 qemu-kvm-rhev: hardware: Microarchitectural Store Buffer Data Sampling [rhel-7.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-18.el7_6.6
changelog:
  - kvm-device_tree-Fix-integer-overflowing-in-load_device_t.patch [bz#1693114]
  - kvm-scsi-generic-prevent-guest-from-exceeding-SG_IO-limi.patch [bz#1693879]
  - Resolves: bz#1693114
    (CVE-2018-20815 qemu-kvm-rhev: QEMU: device_tree: heap buffer overflow while loading device tree blob [rhel-7.6.z])
  - Resolves: bz#1693879
    (RHV VM pauses when 'dd' issued inside guest to a direct lun configured as virtio-scsi with scsi-passthrough)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-18.el7_6.7
changelog:
  - kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1669070]
  - kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669070]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669070]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669070]
  - Resolves: bz#1669070
    (CVE-2019-6778 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-7.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-25.el7
changelog:
  - kvm-block-backend-Make-blk_inc-dec_in_flight-public.patch [bz#1671173]
  - kvm-virtio-blk-Increase-in_flight-for-request-restart-BH.patch [bz#1671173]
  - kvm-block-Fix-AioContext-switch-for-drained-node.patch [bz#1671173]
  - kvm-test-bdrv-drain-AioContext-switch-in-drained-section.patch [bz#1671173]
  - kvm-block-Use-normal-drain-for-bdrv_set_aio_context.patch [bz#1671173]
  - kvm-qapi-Add-rendernode-display-option-for-egl-headless.patch [bz#1648236]
  - kvm-ui-Allow-specifying-rendernode-display-option-for-eg.patch [bz#1648236]
  - kvm-qapi-add-query-display-options-command.patch [bz#1648236]
  - kvm-egl-headless-parse-rendernode.patch [bz#1648236]
  - Resolves: bz#1648236
    (QEMU doesn't expose rendernode option for egl-headless display type)
  - Resolves: bz#1671173
    (qemu with iothreads enabled crashes on resume after enospc pause for disk extension)


author: Danilo de Paula <ddpaula@redhat.com> - 2.12.0-26.el7
changelog:
  - kvm-target-i386-define-md-clear-bit-rhev.patch [bz#1693220]
  - Resolves: bz#1693220
    (CVE-2018-12126 qemu-kvm-rhev: hardware: Microarchitectural Store Buffer Data Sampling)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-27.el7
changelog:
  - kvm-tests-virtio-blk-test-Disable-auto-read-only.patch [bz#1685989]
  - kvm-block-Avoid-useless-local_err.patch [bz#1685989]
  - kvm-block-Simplify-bdrv_reopen_abort.patch [bz#1685989]
  - kvm-block-Always-abort-reopen-after-prepare-succeeded.patch [bz#1685989]
  - kvm-block-Make-permission-changes-in-reopen-less-wrong.patch [bz#1685989]
  - kvm-block-Fix-use-after-free-error-in-bdrv_open_inherit.patch [bz#1685989]
  - kvm-qemu-iotests-Test-snapshot-on-with-nonexistent-TMPDI.patch [bz#1685989]
  - kvm-file-posix-Fix-bdrv_open_flags-for-snapshot-on.patch [bz#1685989]
  - kvm-file-posix-Use-error-API-properly.patch [bz#1685989]
  - kvm-file-posix-Factor-out-raw_reconfigure_getfd.patch [bz#1685989]
  - kvm-file-posix-Store-BDRVRawState.reopen_state-during-re.patch [bz#1685989]
  - kvm-file-posix-Lock-new-fd-in-raw_reopen_prepare.patch [bz#1685989]
  - kvm-file-posix-Prepare-permission-code-for-fd-switching.patch [bz#1685989]
  - kvm-file-posix-Make-auto-read-only-dynamic.patch [bz#1685989]
  - kvm-qapi-bitmap-merge-document-name-change.patch [bz#1668956]
  - kvm-iotests-Enhance-223-to-cover-multiple-bitmap-granula.patch [bz#1668956]
  - kvm-iotests-Unify-log-outputs-between-Python-2-and-3.patch [bz#1668956]
  - kvm-blockdev-n-ary-bitmap-merge.patch [bz#1668956]
  - kvm-block-remove-x-prefix-from-experimental-bitmap-APIs.patch [bz#1668956]
  - kvm-iotests.py-don-t-abort-if-IMGKEYSECRET-is-undefined.patch [bz#1668956]
  - kvm-iotests-add-filter_generated_node_ids.patch [bz#1668956]
  - kvm-iotests-add-qmp-recursive-sorting-function.patch [bz#1668956]
  - kvm-iotests-remove-default-filters-from-qmp_log.patch [bz#1668956]
  - kvm-iotests-change-qmp_log-filters-to-expect-QMP-objects.patch [bz#1668956]
  - kvm-iotests-implement-pretty-print-for-log-and-qmp_log.patch [bz#1668956]
  - kvm-iotests-add-iotest-236-for-testing-bitmap-merge.patch [bz#1668956]
  - kvm-iotests-236-fix-transaction-kwarg-order.patch [bz#1668956]
  - kvm-iotests-Re-add-filename-filters.patch [bz#1668956]
  - kvm-iotests-Remove-superfluous-rm-from-232.patch [bz#1668956]
  - kvm-iotests-Fix-232-for-LUKS.patch [bz#1668956]
  - kvm-iotests-Fix-207-to-use-QMP-filters-for-qmp_log.patch [bz#1668956]
  - kvm-iotests.py-Add-is_str.patch [bz#1668956]
  - kvm-iotests.py-Filter-filename-in-any-string-value.patch [bz#1668956]
  - kvm-iotest-Fix-filtering-order-in-226.patch [bz#1691018]
  - kvm-iotests-Don-t-lock-dev-null-in-226.patch [bz#1691018]
  - kvm-dirty-bitmap-improve-bdrv_dirty_bitmap_next_zero.patch [bz#1691048]
  - kvm-tests-add-tests-for-hbitmap_next_zero-with-specified.patch [bz#1691048]
  - kvm-dirty-bitmap-add-bdrv_dirty_bitmap_next_dirty_area.patch [bz#1691048]
  - kvm-tests-add-tests-for-hbitmap_next_dirty_area.patch [bz#1691048]
  - kvm-Revert-block-dirty-bitmap-Add-bdrv_dirty_iter_next_a.patch [bz#1691048]
  - kvm-Revert-test-hbitmap-Add-non-advancing-iter_next-test.patch [bz#1691048]
  - kvm-Revert-hbitmap-Add-advance-param-to-hbitmap_iter_nex.patch [bz#1691048]
  - kvm-bdrv_query_image_info-Error-parameter-added.patch [bz#1691048]
  - kvm-qcow2-Add-list-of-bitmaps-to-ImageInfoSpecificQCow2.patch [bz#1691048]
  - kvm-qcow2-list-of-bitmaps-new-test-242.patch [bz#1691048]
  - kvm-blockdev-acquire-aio_context-for-bitmap-add-remove.patch [bz#1672010]
  - kvm-nbd-client-fix-nbd_negotiate_simple_meta_context.patch [bz#1691563]
  - kvm-nbd-client-Fix-error-messages-during-NBD_INFO_BLOCK_.patch [bz#1691563]
  - kvm-nbd-client-Relax-handling-of-large-NBD_CMD_BLOCK_STA.patch [bz#1691563]
  - kvm-tests-Simplify-.gitignore.patch [bz#1691563]
  - kvm-iotests-nbd-Stop-qemu-nbd-before-remaking-image.patch [bz#1691563]
  - kvm-iotests-Disallow-compat-0.10-in-223.patch [bz#1691563]
  - kvm-nbd-server-fix-bitmap-export.patch [bz#1691563]
  - kvm-nbd-server-send-more-than-one-extent-of-base-allocat.patch [bz#1691563]
  - kvm-nbd-Don-t-take-address-of-fields-in-packed-structs.patch [bz#1691563]
  - kvm-qemu-nbd-Document-tls-creds.patch [bz#1691563]
  - kvm-qemu-nbd-drop-old-style-negotiation.patch [bz#1691563]
  - kvm-nbd-server-drop-old-style-negotiation.patch [bz#1691563]
  - kvm-qemu-iotests-remove-unused-variable-here.patch [bz#1691563]
  - kvm-qemu-iotests-convert-pwd-and-pwd-to-PWD.patch [bz#1691563]
  - kvm-qemu-iotests-Modern-shell-scripting-use-instead-of.patch [bz#1691563]
  - kvm-nbd-fix-whitespace-in-server-error-message.patch [bz#1691563]
  - kvm-nbd-server-Ignore-write-errors-when-replying-to-NBD_.patch [bz#1691563]
  - kvm-io-return-0-for-EOF-in-TLS-session-read-after-shutdo.patch [bz#1691563]
  - kvm-tests-pull-qemu-nbd-iotest-helpers-into-common.nbd-f.patch [bz#1691563]
  - kvm-tests-check-if-qemu-nbd-is-still-alive-before-waitin.patch [bz#1691563]
  - kvm-tests-add-iotests-helpers-for-dealing-with-TLS-certi.patch [bz#1691563]
  - kvm-tests-exercise-NBD-server-in-TLS-mode.patch [bz#1691563]
  - kvm-iotests-Also-test-I-O-over-NBD-TLS.patch [bz#1691563]
  - kvm-iotests-Drop-use-of-bash-keyword-function.patch [bz#1691563]
  - kvm-nbd-server-Advertise-all-contexts-in-response-to-bar.patch [bz#1691563]
  - kvm-nbd-client-Make-x-dirty-bitmap-more-reliable.patch [bz#1691563]
  - kvm-nbd-client-Send-NBD_CMD_DISC-if-open-fails-after-con.patch [bz#1691563]
  - kvm-iotests-fix-nbd-test-233-to-work-correctly-with-raw-.patch [bz#1691563]
  - kvm-iotests-Skip-233-if-certtool-not-installed.patch [bz#1691009]
  - kvm-iotests-Make-nbd-fault-injector-flush.patch [bz#1691009]
  - kvm-iotests-make-083-specific-to-raw.patch [bz#1691009]
  - kvm-nbd-publish-_lookup-functions.patch [bz#1691009]
  - kvm-nbd-client-Trace-all-server-option-error-messages.patch [bz#1691009]
  - kvm-block-nbd-client-use-traces-instead-of-noisy-error_r.patch [bz#1691009]
  - kvm-qemu-nbd-Use-program-name-in-error-messages.patch [bz#1691009]
  - kvm-nbd-Document-timeline-of-various-features.patch [bz#1691009]
  - kvm-nbd-client-More-consistent-error-messages.patch [bz#1691009]
  - kvm-qemu-nbd-Fail-earlier-for-c-d-on-non-linux.patch [bz#1691009]
  - kvm-nbd-client-Drop-pointless-buf-variable.patch [bz#1691009]
  - kvm-qemu-nbd-Rename-exp-variable-clashing-with-math-exp-.patch [bz#1691009]
  - kvm-nbd-Add-some-error-case-testing-to-iotests-223.patch [bz#1691009]
  - kvm-nbd-Forbid-nbd-server-stop-when-server-is-not-runnin.patch [bz#1691009]
  - kvm-nbd-Only-require-disabled-bitmap-for-read-only-expor.patch [bz#1691009]
  - kvm-nbd-Merge-nbd_export_set_name-into-nbd_export_new.patch [bz#1691009]
  - kvm-nbd-Allow-bitmap-export-during-QMP-nbd-server-add.patch [bz#1691009]
  - kvm-nbd-Remove-x-nbd-server-add-bitmap.patch [bz#1691009]
  - kvm-nbd-Merge-nbd_export_bitmap-into-nbd_export_new.patch [bz#1691009]
  - kvm-qemu-nbd-Add-bitmap-NAME-option.patch [bz#1691009]
  - kvm-qom-Clean-up-error-reporting-in-user_creatable_add_o.patch [bz#1691009]
  - kvm-qemu-img-fix-error-reporting-for-object.patch [bz#1691009]
  - kvm-iotests-Make-233-output-more-reliable.patch [bz#1691009]
  - kvm-maint-Allow-for-EXAMPLES-in-texi2pod.patch [bz#1691009]
  - kvm-qemu-nbd-Enhance-man-page.patch [bz#1691009]
  - kvm-qemu-nbd-Sanity-check-partition-bounds.patch [bz#1691009]
  - kvm-nbd-server-Hoist-length-check-to-qmp_nbd_server_add.patch [bz#1691009]
  - kvm-nbd-server-Favor-u-int64_t-over-off_t.patch [bz#1691009]
  - kvm-qemu-nbd-Avoid-strtol-open-coding.patch [bz#1691009]
  - kvm-nbd-client-Refactor-nbd_receive_list.patch [bz#1691009]
  - kvm-nbd-client-Move-export-name-into-NBDExportInfo.patch [bz#1691009]
  - kvm-nbd-client-Change-signature-of-nbd_negotiate_simple_.patch [bz#1691009]
  - kvm-nbd-client-Split-out-nbd_send_meta_query.patch [bz#1691009]
  - kvm-nbd-client-Split-out-nbd_receive_one_meta_context.patch [bz#1691009]
  - kvm-nbd-client-Refactor-return-of-nbd_receive_negotiate.patch [bz#1691009]
  - kvm-nbd-client-Split-handshake-into-two-functions.patch [bz#1691009]
  - kvm-nbd-client-Pull-out-oldstyle-size-determination.patch [bz#1691009]
  - kvm-nbd-client-Refactor-nbd_opt_go-to-support-NBD_OPT_IN.patch [bz#1691009]
  - kvm-nbd-client-Add-nbd_receive_export_list.patch [bz#1691009]
  - kvm-nbd-client-Add-meta-contexts-to-nbd_receive_export_l.patch [bz#1691009]
  - kvm-qemu-nbd-Add-list-option.patch [bz#1691009]
  - kvm-nbd-client-Work-around-3.0-bug-for-listing-meta-cont.patch [bz#1691009]
  - kvm-iotests-Enhance-223-233-to-cover-qemu-nbd-list.patch [bz#1691009]
  - kvm-qemu-nbd-Deprecate-qemu-nbd-partition.patch [bz#1691009]
  - kvm-nbd-generalize-usage-of-nbd_read.patch [bz#1691009]
  - kvm-block-nbd-client-split-channel-errors-from-export-er.patch [bz#1691009]
  - kvm-block-nbd-move-connection-code-from-block-nbd-to-blo.patch [bz#1691009]
  - kvm-block-nbd-client-split-connection-from-initializatio.patch [bz#1691009]
  - kvm-block-nbd-client-fix-nbd_reply_chunk_iter_receive.patch [bz#1691009]
  - kvm-block-nbd-client-don-t-check-ioc.patch [bz#1691009]
  - kvm-block-nbd-client-rename-read_reply_co-to-connection_.patch [bz#1691009]
  - kvm-nbd-server-Kill-pointless-shadowed-variable.patch [bz#1691009]
  - kvm-iotests-ensure-we-print-nbd-server-log-on-error.patch [bz#1691009]
  - kvm-iotests-avoid-broken-pipe-with-certtool.patch [bz#1691009]
  - kvm-iotests-Wait-for-qemu-to-end-in-223.patch [bz#1691009]
  - kvm-qemu-kvm-rhev.spec-add-iotest-233.patch [bz#1691009]
  - kvm-slirp-check-sscanf-result-when-emulating-ident.patch [bz#1689793]
  - kvm-dirty-bitmap-Expose-persistent-flag-to-query-block.patch [bz#1677073]
  - kvm-block-dirty-bitmap-Documentation-and-Comment-fixups.patch [bz#1677073]
  - kvm-block-dirty-bitmap-add-recording-and-busy-properties.patch [bz#1677073]
  - kvm-block-dirty-bitmaps-rename-frozen-predicate-helper.patch [bz#1677073]
  - kvm-block-dirty-bitmap-remove-set-reset-assertions-again.patch [bz#1677073]
  - kvm-block-dirty-bitmap-change-semantics-of-enabled-predi.patch [bz#1677073]
  - kvm-nbd-change-error-checking-order-for-bitmaps.patch [bz#1677073]
  - kvm-block-dirty-bitmap-explicitly-lock-bitmaps-with-succ.patch [bz#1677073]
  - kvm-block-dirty-bitmaps-unify-qmp_locked-and-user_locked.patch [bz#1677073]
  - kvm-block-dirty-bitmaps-move-comment-block.patch [bz#1677073]
  - kvm-blockdev-remove-unused-paio-parameter-documentation.patch [bz#1677073]
  - kvm-iotests-add-busy-recording-bit-test-to-124.patch [bz#1677073]
  - kvm-block-dirty-bitmaps-add-inconsistent-bit.patch [bz#1677073]
  - kvm-block-dirty-bitmap-add-inconsistent-status.patch [bz#1677073]
  - kvm-block-dirty-bitmaps-add-block_dirty_bitmap_check-fun.patch [bz#1677073]
  - kvm-block-dirty-bitmaps-prohibit-readonly-bitmaps-for-ba.patch [bz#1677073]
  - kvm-block-dirty-bitmaps-prohibit-removing-readonly-bitma.patch [bz#1677073]
  - kvm-block-dirty-bitmaps-disallow-busy-bitmaps-as-merge-s.patch [bz#1677073]
  - kvm-block-dirty-bitmaps-implement-inconsistent-bit.patch [bz#1677073]
  - kvm-bitmaps-Fix-typo-in-function-name.patch [bz#1677073]
  - kvm-qemu-kvm-rhev.spec-add-bitmap-related-tests.patch [bz#1677073]
  - kvm-block-file-posix-do-not-fail-on-unlock-bytes.patch [bz#1603104]
  - kvm-docs-interop-qcow2-Improve-bitmap-flag-in_use-specif.patch [bz#1666884]
  - kvm-block-qcow2-bitmap-Don-t-check-size-for-IN_USE-bitma.patch [bz#1666884]
  - kvm-block-qcow2-bitmap-Allow-resizes-with-persistent-bit.patch [bz#1666884]
  - kvm-tests-qemu-iotests-add-bitmap-resize-test-246.patch [bz#1666884]
  - kvm-qemu-kvm-rhev.spec-add-iotest-246.patch [bz#1666884]
  - kvm-x86-host-phys-bits-limit-option.patch [bz#1691519]
  - kvm-rhel-Set-host-phys-bits-limit-48-on-rhel-machine-typ.patch [bz#1691519]
  - kvm-device_tree-Fix-integer-overflowing-in-load_device_t.patch [bz#1693115]
  - kvm-mmap-alloc-unfold-qemu_ram_mmap.patch [bz#1672819]
  - kvm-mmap-alloc-fix-hugetlbfs-misaligned-length-in-ppc64.patch [bz#1672819]
  - Resolves: bz#1603104
    (Qemu Aborted (core dumped) for 'qemu-kvm: Failed to lock byte 100' when remote NFS or GlusterFS volume stopped during the block mirror(or block commit/stream) process)
  - Resolves: bz#1666884
    (persistent bitmaps prevent qcow2 image resize)
  - Resolves: bz#1668956
    (incremental backup bitmap API needs a finalized interface)
  - Resolves: bz#1672010
    ([RHEL7]Qemu coredump when remove a persistent bitmap after vm re-start(dataplane enabled))
  - Resolves: bz#1672819
    (RHEL7.6/RHV4.2 - qemu doesn't free up hugepage memory when hotplug/hotunplug using memory-backend-file (qemu-kvm-rhev))
  - Resolves: bz#1677073
    (Backport additional QEMU 4.0 Bitmap API changes to RHEL 7.7)
  - Resolves: bz#1685989
    (Add facility to use block jobs with backing images without write permission)
  - Resolves: bz#1689793
    (CVE-2019-9824 qemu-kvm-rhev: QEMU: Slirp: information leakage in tcp_emu() due to uninitialized stack variables [rhel-7])
  - Resolves: bz#1691009
    (NBD pull mode incremental backup API needs a finalized interface)
  - Resolves: bz#1691018
    (Fix iotest 226 for local development builds)
  - Resolves: bz#1691048
    (Add qemu-img info support for querying bitmaps offline)
  - Resolves: bz#1691519
    (physical bits should  <= 48  when host with 5level paging &EPT5 and qemu command with "-cpu qemu64" parameters.)
  - Resolves: bz#1691563
    (QEMU NBD Feature parity roundup (QEMU 3.1.0))
  - Resolves: bz#1693115
    (CVE-2018-20815 qemu-kvm-rhev: QEMU: device_tree: heap buffer overflow while loading device tree blob [rhel-7.7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-28.el7
changelog:
  - kvm-x86-cpu-Enable-CLDEMOTE-Demote-Cache-Line-cpu-featur.patch [bz#1537776]
  - kvm-scsi-generic-prevent-guest-from-exceeding-SG_IO-limi.patch [bz#1693879]
  - kvm-tests-crypto-Use-the-IEC-binary-prefix-definitions.patch [bz#1666336]
  - kvm-crypto-expand-algorithm-coverage-for-cipher-benchmar.patch [bz#1666336]
  - kvm-crypto-remove-code-duplication-in-tweak-encrypt-decr.patch [bz#1666336]
  - kvm-crypto-introduce-a-xts_uint128-data-type.patch [bz#1666336]
  - kvm-crypto-convert-xts_tweak_encdec-to-use-xts_uint128-t.patch [bz#1666336]
  - kvm-crypto-convert-xts_mult_x-to-use-xts_uint128-type.patch [bz#1666336]
  - kvm-crypto-annotate-xts_tweak_encdec-as-inlineable.patch [bz#1666336]
  - kvm-crypto-refactor-XTS-cipher-mode-test-suite.patch [bz#1666336]
  - kvm-crypto-add-testing-for-unaligned-buffers-with-XTS-ci.patch [bz#1666336]
  - kvm-block-Fix-AioContext-switch-for-bs-drv-NULL.patch [bz#1631227]
  - Resolves: bz#1537776
    ([Intel 7.7 Feat] KVM Enabling SnowRidge new NIs - qemu-kvm-rhev)
  - Resolves: bz#1631227
    (Qemu Core dump when quit vm that's in status "paused(io-error)" with data plane enabled)
  - Resolves: bz#1666336
    (severe performance impact using encrypted Cinder volume (QEMU luks))
  - Resolves: bz#1693879
    (RHV VM pauses when 'dd' issued inside guest to a direct lun configured as virtio-scsi with scsi-passthrough)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-29.el7
changelog:
  - kvm-qemu-img-Report-bdrv_block_status-failures.patch [bz#1692018]
  - kvm-nbd-Tolerate-some-server-non-compliance-in-NBD_CMD_B.patch [bz#1692018]
  - kvm-nbd-Don-t-lose-server-s-error-to-NBD_CMD_BLOCK_STATU.patch [bz#1692018]
  - kvm-nbd-Permit-simple-error-to-NBD_CMD_BLOCK_STATUS.patch [bz#1692018]
  - kvm-qemu-img-Gracefully-shutdown-when-map-can-t-finish.patch [bz#1692018]
  - kvm-nbd-client-Work-around-server-BLOCK_STATUS-misalignm.patch [bz#1692018]
  - kvm-iotests-Add-241-to-test-NBD-on-unaligned-images.patch [bz#1692018]
  - kvm-nbd-client-Lower-min_block-for-block-status-unaligne.patch [bz#1692018]
  - kvm-nbd-client-Report-offsets-in-bdrv_block_status.patch [bz#1692018]
  - kvm-nbd-client-Reject-inaccessible-tail-of-inconsistent-.patch [bz#1692018]
  - kvm-nbd-client-Support-qemu-img-convert-from-unaligned-s.patch [bz#1692018]
  - kvm-block-Add-bdrv_get_request_alignment.patch [bz#1692018]
  - kvm-nbd-server-Advertise-actual-minimum-block-size.patch [bz#1692018]
  - kvm-nbd-client-Trace-server-noncompliance-on-structured-.patch [bz#1692018]
  - kvm-nbd-server-Fix-blockstatus-trace.patch [bz#1692018]
  - kvm-nbd-server-Trace-client-noncompliance-on-unaligned-r.patch [bz#1692018]
  - kvm-nbd-server-Don-t-fail-NBD_OPT_INFO-for-byte-aligned-.patch [bz#1692018]
  - kvm-nbd-client-Fix-error-message-for-server-with-unusabl.patch [bz#1692018]
  - kvm-iotest-Fix-241-to-run-in-generic-directory.patch [bz#1692018]
  - kvm-virtio-scsi-Move-BlockBackend-back-to-the-main-AioCo.patch [bz#1673397 bz#1673402]
  - kvm-scsi-disk-Acquire-the-AioContext-in-scsi_-_realize.patch [bz#1673397 bz#1673402]
  - kvm-virtio-scsi-Forbid-devices-with-different-iothreads-.patch [bz#1673397 bz#1673402]
  - kvm-monitor-move-init-global-earlier.patch [bz#1624009]
  - kvm-block-pflash_cfi02-Fix-memory-leak-and-potential-use.patch [bz#1624009]
  - kvm-pflash-Rename-pflash_t-to-PFlashCFI01-PFlashCFI02.patch [bz#1624009]
  - kvm-pflash_cfi01-Do-not-exit-on-guest-aborting-write-to-.patch [bz#1624009]
  - kvm-pflash_cfi01-Log-use-of-flawed-write-to-buffer.patch [bz#1624009]
  - kvm-pflash-Rename-CFI_PFLASH-to-PFLASH_CFI.patch [bz#1624009]
  - kvm-hw-Use-PFLASH_CFI0-1-2-and-TYPE_PFLASH_CFI0-1-2.patch [bz#1624009]
  - kvm-sam460ex-Don-t-size-flash-memory-to-match-backing-im.patch [bz#1624009]
  - kvm-ppc405_boards-Delete-stale-disabled-DEBUG_BOARD_INIT.patch [bz#1624009]
  - kvm-ppc405_boards-Don-t-size-flash-memory-to-match-backi.patch [bz#1624009]
  - kvm-r2d-Fix-flash-memory-size-sector-size-width-device-I.patch [bz#1624009]
  - kvm-mips_malta-Delete-disabled-broken-DEBUG_BOARD_INIT-c.patch [bz#1624009]
  - kvm-hw-mips-malta-Remove-fl_sectors-variable.patch [bz#1624009]
  - kvm-hw-mips-malta-Restrict-bios_size-variable-scope.patch [bz#1624009]
  - kvm-mips_malta-Clean-up-definition-of-flash-memory-size-.patch [bz#1624009]
  - kvm-pflash-Clean-up-after-commit-368a354f02b-part-1.patch [bz#1624009]
  - kvm-pflash-Clean-up-after-commit-368a354f02b-part-2.patch [bz#1624009]
  - kvm-qdev-Loosen-coupling-between-compat-and-other-global.patch [bz#1624009]
  - kvm-vl-Prepare-fix-of-latent-bug-with-global-and-onboard.patch [bz#1624009]
  - kvm-vl-Fix-latent-bug-with-global-and-onboard-devices.patch [bz#1624009]
  - kvm-sysbus-Fix-latent-bug-with-onboard-devices.patch [bz#1624009]
  - kvm-vl-Improve-legibility-of-BlockdevOptions-queue.patch [bz#1624009]
  - kvm-vl-Factor-configure_blockdev-out-of-main.patch [bz#1624009]
  - kvm-vl-Create-block-backends-before-setting-machine-prop.patch [bz#1624009]
  - kvm-pflash_cfi01-Add-pflash_cfi01_get_blk-helper.patch [bz#1624009]
  - kvm-pc_sysfw-Remove-unused-PcSysFwDevice.patch [bz#1624009]
  - kvm-pc_sysfw-Pass-PCMachineState-to-pc_system_firmware_i.patch [bz#1624009]
  - kvm-pc-Support-firmware-configuration-with-blockdev.patch [bz#1624009]
  - kvm-docs-interop-firmware.json-Prefer-machine-to-if-pfla.patch [bz#1624009]
  - kvm-Revert-migration-move-only_migratable-to-MigrationSt.patch [bz#1624009]
  - kvm-migration-Support-adding-migration-blockers-earlier.patch [bz#1624009]
  - Resolves: bz#1624009
    (allow backing of pflash via -blockdev)
  - Resolves: bz#1673397
    ([RHEL.7] qemu-kvm core dumped after hotplug the deleted disk with iothread parameter)
  - Resolves: bz#1673402
    (Qemu core dump when start guest with two disks using same drive)
  - Resolves: bz#1692018
    (qemu-img: Protocol error: simple reply when structured reply chunk was expected)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-30.el7
changelog:
  - kvm-slirp-fix-big-little-endian-conversion-in-ident-prot.patch [bz#1669071]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1669071]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1669071]
  - Resolves: bz#1669071
    (CVE-2019-6778 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-7.7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-31.el7
changelog:
  - kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618504]
  - Resolves: bz#1618504
    (qemu-kvm-rhev: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-32.el7
changelog:
  - kvm-rtl8139-fix-possible-out-of-bound-access.patch [bz#1636727 bz#1636780]
  - kvm-net-ignore-packet-size-greater-than-INT_MAX.patch [bz#1636779 bz#1636780]
  - kvm-net-drop-too-large-packet-early.patch [bz#1636779 bz#1636780]
  - kvm-Introduce-new-no_guest_reset-parameter-for-usb-host-.patch [bz#1710861]
  - kvm-usb-call-reset-handler-before-updating-state.patch [bz#1710861]
  - kvm-usb-host-skip-reset-for-untouched-devices.patch [bz#1710861]
  - kvm-usb-host-avoid-libusb_set_configuration-calls.patch [bz#1710861]
  - kvm-blockdev-fix-missed-target-unref-for-drive-backup.patch [bz#1703916]
  - kvm-vl-Fix-drive-blockdev-persistent-reservation-managem.patch [bz#1714160]
  - Resolves: bz#1636727
    (CVE-2018-17958 qemu-kvm: Qemu: rtl8139: integer overflow leads to buffer overflow [rhel-7])
  - Resolves: bz#1636779
    (CVE-2018-17963 qemu-kvm: Qemu: net: ignore packets with large size [rhel-7])
  - Resolves: bz#1636780
    (CVE-2018-17963 qemu-kvm-rhev: Qemu: net: ignore packets with large size [rhel-7])
  - Resolves: bz#1703916
    (Qemu core dump when quit vm after forbidden to do backup with a read-only bitmap)
  - Resolves: bz#1710861
    (Detached device when trying to upgrade USB device firmware when in doing USB Passthrough via QEMU)
  - Resolves: bz#1714160
    (Guest with 'reservations' for a disk start failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-33.el7
changelog:
  - kvm-vhost_net-don-t-set-backend-for-the-uninitialized-vi.patch [bz#1608226]
  - Resolves: bz#1608226
    ([virtual-network][mq] prompt warning "qemu-kvm: unable to start vhost net: 14: falling back on userspace virtio" when boot with win8+ guests with multi-queue)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-33.el7_7.1
changelog:
  - kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1730603]
  - kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1730603]
  - kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1730603]
  - kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1730603]
  - kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1730603]
  - kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1730603]
  - kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1730603]
  - kvm-i386-Make-arch_capabilities-migratable.patch [bz#1730603]
  - kvm-qxl-check-release-info-object.patch [bz#1732338]
  - kvm-ccid-Fix-dwProtocols-advertisement-of-T-0.patch [bz#1729880]
  - kvm-Fix-heap-overflow-in-ip_reass-on-big-packet-input.patch [bz#1734752]
  - Resolves: bz#1729880
    (ccid: Fix incorrect dwProtocol advertisement of T=0 [rhel-7.7.z])
  - Resolves: bz#1730603
    ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm-rhev [rhel-7.7.z])
  - Resolves: bz#1732338
    (CVE-2019-12155 qemu-kvm-rhev: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-7] [rhel-7.7.z])
  - Resolves: bz#1734752
    (CVE-2019-14378 qemu-kvm-rhev: QEMU: slirp: heap buffer overflow during packet reassembly [rhel-7.7.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-33.el7_7.2
changelog:
  - kvm-block-Remove-error-messages-in-bdrv_make_zero.patch [bz#1743322]
  - kvm-block-Add-BDRV_REQ_NO_FALLBACK.patch [bz#1743322]
  - kvm-block-Advertise-BDRV_REQ_NO_FALLBACK-in-filter-drive.patch [bz#1743322]
  - kvm-file-posix-Fix-write_zeroes-with-unmap-on-block-devi.patch [bz#1743322]
  - kvm-file-posix-Factor-out-raw_thread_pool_submit.patch [bz#1743322]
  - kvm-file-posix-Avoid-aio_worker-for-QEMU_AIO_WRITE_ZEROE.patch [bz#1743322]
  - kvm-file-posix-Support-BDRV_REQ_NO_FALLBACK-for-zero-wri.patch [bz#1743322]
  - kvm-qemu-img-Use-BDRV_REQ_NO_FALLBACK-for-pre-zeroing.patch [bz#1743322]
  - kvm-qemu-io-Add-write-n-for-BDRV_REQ_NO_FALLBACK.patch [bz#1743322]
  - kvm-target-i386-add-MDS-NO-feature.patch [bz#1716726 bz#1743633]
  - kvm-vl-add-qemu_add_vm_change_state_handler_prio.patch [bz#1741937]
  - kvm-qdev-add-qdev_add_vm_change_state_handler.patch [bz#1741937]
  - kvm-virtio-scsi-restart-DMA-after-iothread.patch [bz#1741937]
  - Resolves: bz#1716726
    ([Intel 7.7 FEAT] MDS_NO exposure to guest - qemu-kvm-rhev)
  - Resolves: bz#1741937
    (QEMU gets stuck on resume/cont call from libvirt [rhel-7.7.z])
  - Resolves: bz#1743322
    ([v2v] Migration performance regression [rhel-7.7.z])
  - Resolves: bz#1743633
    ([Intel 7.7 FEAT] MDS_NO exposure to guest - qemu-kvm-rhev [rhel-7.7.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-33.el7_7.3
changelog:
  - kvm-file-posix-Handle-undetectable-alignment.patch [bz#1745443]
  - kvm-qemu-img-Enable-BDRV_REQ_MAY_UNMAP-in-convert.patch [bz#1743322]
  - kvm-i386-halt-poll-control-MSR-support.patch [bz#1746282]
  - Resolves: bz#1743322
    ([v2v] Migration performance regression [rhel-7.7.z])
  - Resolves: bz#1745443
    (qemu, qemu-img fail to detect alignment with XFS and Gluster/XFS on 4k block device [rhel-7.7.z])
  - Resolves: bz#1746282
    (qemu-kvm: backport cpuidle-haltpoll support [rhel-7.7.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-33.el7_7.4
changelog:
  - kvm-block-Drain-source-node-in-bdrv_replace_node.patch [bz#1750322]
  - Resolves: bz#1750322
    (qemu aborts in blockCommit: qemu-kvm: block.c:3486 [rhel-7.7.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-37.el7
changelog:
  - kvm-i386-halt-poll-control-MSR-support.patch [bz#1734502]
  - kvm-target-i386-add-MDS-NO-feature.patch [bz#1716726]
  - kvm-file-posix-Handle-undetectable-alignment.patch [bz#1743365]
  - kvm-qemu-img-Enable-BDRV_REQ_MAY_UNMAP-in-convert.patch [bz#1648622]
  - Resolves: bz#1648622
    ([v2v] Migration performance regression)
  - Resolves: bz#1716726
    ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm-rhev)
  - Resolves: bz#1734502
    (qemu-kvm: backport cpuidle-haltpoll support)
  - Resolves: bz#1743365
    (qemu, qemu-img fail to detect alignment with XFS and Gluster/XFS on 4k block device)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-38.el7
changelog:
  - kvm-usb-drop-unnecessary-usb_device_post_load-checks.patch [bz#1724048]
  - kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638472]
  - kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638472]
  - kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638472]
  - Resolves: bz#1638472
    ([Intel 7.8 Feat] qemu-kvm-rhev Introduce Cascade Lake (CLX) cpu model)
  - Resolves: bz#1724048
    (Fail to migrate a rhel6.10-mt7.6 guest with dimm device)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-39.el7
changelog:
  - kvm-virtio-scsi-fixed-virtio_scsi_ctx_check-failed-when-.patch [bz#1764120]
  - Resolves: bz#1764120
    ([Data plane]virtio_scsi_ctx_check: Assertion `blk_get_aio_context(d->conf.blk) == s->ctx' failed when unplug a device that running block stream on it)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-40.el7
changelog:
  - kvm-vhost-fix-vhost_log-size-overflow-during-migration.patch [bz#1775251]
  - Resolves: bz#1775251
    (qemu-kvm crashes when Windows VM is migrated with multiqueue)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-41.el7
changelog:
  - kvm-mc146818rtc-fix-timer-interrupt-reinjection.patch [bz#1639098]
  - kvm-Revert-mc146818rtc-fix-timer-interrupt-reinjection.patch [bz#1639098]
  - kvm-mc146818rtc-fix-timer-interrupt-reinjection-again.patch [bz#1639098]
  - Resolves: bz#1639098
    (After host update, older windows clients have large time drift)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-42.el7
changelog:
  - kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1779530]
  - kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1779530]
  - Resolves: bz#1779530
    (CVE-2019-11135 qemu-kvm-rhev: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-43.el7
changelog:
  - kvm-tcp_emu-Fix-oob-access.patch [bz#1791563 bz#1791570]
  - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791563]
  - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791563]
  - Resolves: bz#1791563
    (CVE-2020-7039 qemu-kvm-rhev: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-44.el7
changelog:
  - kvm-iscsi-Avoid-potential-for-get_status-overflow.patch [bz#1794499]
  - kvm-iscsi-Cap-block-count-from-GET-LBA-STATUS-CVE-2020-1.patch [bz#1794499]
  - Resolves: bz#1794499
    (CVE-2020-1711 qemu-kvm-rhev: QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server [rhel-7.8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.12.0-44.el7_8.1
changelog:
  - kvm-util-add-slirp_fmt-helpers.patch [bz#1798972]
  - kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798972]
  - Resolves: bz#1798972
    (CVE-2020-8608 qemu-kvm-rhev: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.8.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.14
changelog:
  - kvm-blockjob-Allow-nested-pause.patch [bz#1329543]
  - kvm-block-Pause-block-jobs-in-bdrv_drain_all.patch [bz#1329543]
  - kvm-qemu-iotests-Test-that-stop-doesn-t-drain-block-jobs.patch [bz#1329543]
  - kvm-blockjob-Update-function-name-in-comments.patch [bz#1329543]
  - kvm-virtio-blk-use-blk_io_plug-unplug-for-Linux-AIO-batc.patch [bz#1327613]
  - Resolves: bz#1327613
    (AIO is processing only 1 request,  even if >1 requests in virtio)
  - Resolves: bz#1329543
    (live merge - qemu-kvm hangs in aio_bh_poll)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.15
changelog:
  - kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1340045]
  - Resolves: bz#1340045
    (Throw error if qemu-img rebasing backing file is too long or provide way to fix a "too long" backing file.)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.16
changelog:
  - kvm-vga-add-sr_vbe-register-set.patch [bz#1347185]
  - Resolves: bz#1347185
    (Regression from CVE-2016-3712: windows installer fails to start)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.17
changelog:
  - kvm-vhost-user-set-link-down-when-the-char-device-is-clo.patch [bz#1348593]
  - kvm-vhost-user-fix-use-after-free.patch [bz#1348593]
  - kvm-vhost-user-test-fix-up-rhel6-build.patch [bz#1348593]
  - kvm-vhost-user-test-fix-migration-overlap-test.patch [bz#1348593]
  - kvm-vhost-user-test-fix-chardriver-race.patch [bz#1348593]
  - kvm-vhost-user-test-use-unix-port-for-migration.patch [bz#1348593]
  - kvm-vhost-user-test-fix-crash-with-glib-2.36.patch [bz#1348593]
  - kvm-vhost-user-test-use-correct-ROM-to-speed-up-and-avoi.patch [bz#1348593]
  - kvm-tests-append-i386-tests.patch [bz#1348593]
  - kvm-vhost-user-add-ability-to-know-vhost-user-backend-di.patch [bz#1348593]
  - kvm-qemu-char-add-qemu_chr_disconnect-to-close-a-fd-acce.patch [bz#1348593]
  - kvm-vhost-user-disconnect-on-start-failure.patch [bz#1348593]
  - kvm-vhost-net-do-not-crash-if-backend-is-not-present.patch [bz#1348593]
  - kvm-vhost-net-save-restore-vhost-user-acked-features.patch [bz#1348593]
  - kvm-vhost-net-save-restore-vring-enable-state.patch [bz#1348593]
  - kvm-test-start-vhost-user-reconnect-test.patch [bz#1348593]
  - Resolves: bz#1348593
    (No recovery after vhost-user process restart)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.18
changelog:
  - kvm-vhost-user-disable-chardev-handlers-on-close.patch [bz#1351892]
  - kvm-char-clean-up-remaining-chardevs-when-leaving.patch [bz#1351892]
  - kvm-sockets-add-helpers-for-creating-SocketAddress-from-.patch [bz#1351892]
  - kvm-socket-unlink-unix-socket-on-remove.patch [bz#1351892]
  - kvm-char-do-not-use-atexit-cleanup-handler.patch [bz#1351892]
  - Resolves: bz#1351892
    (vhost-user: A socket file is not deleted after VM's port is detached.)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.19
changelog:
  - kvm-qemu-sockets-use-qapi_free_SocketAddress-in-cleanup.patch [bz#1354090]
  - kvm-tap-use-an-exit-notifier-to-call-down_script.patch [bz#1354090]
  - kvm-slirp-use-exit-notifier-for-slirp_smb_cleanup.patch [bz#1354090]
  - kvm-net-do-not-use-atexit-for-cleanup.patch [bz#1354090]
  - Resolves: bz#1354090
    (Boot guest with vhostuser server mode, QEMU prompt 'Segmentation fault' after executing '(qemu)system_powerdown')


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.20
changelog:
  - kvm-virtio-error-out-if-guest-exceeds-virtqueue-size.patch [bz#1359731]
  - Resolves: bz#1359731
    (EMBARGOED CVE-2016-5403 qemu-kvm-rhev: Qemu: virtio: unbounded memory allocation on host via guest leading to DoS [rhel-7.2.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.21
changelog:
  - kvm-block-iscsi-avoid-potential-overflow-of-acb-task-cdb.patch [bz#1358997]
  - Resolves: bz#1358997
    (CVE-2016-5126 qemu-kvm-rhev: Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl [rhel-7.2.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-32.el7_2.8
changelog:
  - kvm-spapr_rtas-Prevent-QEMU-crash-during-hotplug-without.patch [bz#1306343]
  - Resolves: bz#1306343
    (drmgr with invalid value in guest crashes qemu)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.9
changelog:
  - kvm-virtio-coding-style-tweak.patch [bz#1315198]
  - kvm-vhost-user-interrupt-management-fixes.patch [bz#1315198]
  - kvm-vhost-user-don-t-merge-regions-with-different-fds.patch [bz#1315197]
  - Resolves: bz#1315197
    (vhost-user interface cannot get ip if host is a numa machine)
  - Resolves: bz#1315198
    (vhost-user: qemu stops processing packets under high load of traffic)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.10
changelog:
  - kvm-Revert-vhost-send-SET_VRING_ENABLE-at-start-stop.patch [bz#1310543 bz#1316156]
  - kvm-tests-vhost-user-disable-unless-CONFIG_VHOST_NET.patch [bz#1316156]
  - kvm-tests-re-enable-vhost-user-test.patch [bz#1316156]
  - Resolves: bz#1310543
    ([6wind] vhost-user with multi-queue is not working properly after stop-resume)
  - Resolves: bz#1316156
    ([6wind] vhost-user with multi-queue is not working properly after stop-resume)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.11
changelog:
  - kvm-exec-Stop-using-memory-after-free-BZ-1315195.patch [bz#1315195]
  - Resolves: bz#1315195
    (qemu 2.1-2.4 crashes with segfault in phys_section_destroy)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.12
changelog:
  - kvm-memory-exit-when-hugepage-allocation-fails-if-mem-pr.patch [bz#1324523]
  - Resolves: bz#1324523
    (-mem-prealloc option does not take effect when no huge page is allocated)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.13
changelog:
  - kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch [bz#1331414]
  - kvm-vga-add-vbe_enabled-helper.patch [bz#1331414]
  - kvm-vga-factor-out-vga-register-setup.patch [bz#1331414]
  - kvm-vga-update-vga-register-setup-on-vbe-changes.patch [bz#1331414]
  - kvm-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch [bz#1331414]
  - Resolves: bz#1331414
    (EMBARGOED CVE-2016-3710 qemu-kvm-rhev: qemu: incorrect banked access bounds checking in vga module [rhel-7.2.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.2
changelog:
  - kvm-target-ppc-fix-hugepage-support-when-using-memory-ba.patch [bz#1279387]
  - kvm-spapr-Enable-in-kernel-H_SET_MODE-handling.patch [bz#1283073]
  - kvm-rbd-make-qemu-s-cache-setting-override-any-ceph-sett.patch [bz#1279391]
  - kvm-rbd-fix-ceph-settings-precedence.patch [bz#1279391]
  - kvm-file_ram_alloc-propagate-error-to-caller-instead-of-.patch [bz#1283079]
  - kvm-acpi-add-acpi_send_gpe_event-to-rise-sci-for-hotplug.patch [bz#1283072]
  - kvm-pc-memhp-do-not-emit-inserting-event-for-coldplugged.patch [bz#1283072]
  - kvm-libqtest-add-qmp_eventwait.patch [bz#1279388]
  - kvm-configure-probe-for-memfd.patch [bz#1279388]
  - kvm-linux-headers-add-unistd.h.patch [bz#1279388]
  - kvm-build-sys-split-util-obj-on-multi-lines.patch [bz#1279388]
  - kvm-util-add-linux-only-memfd-fallback.patch [bz#1279388]
  - kvm-util-add-memfd-helpers.patch [bz#1279388]
  - kvm-util-add-fallback-for-qemu_memfd_alloc.patch [bz#1279388]
  - kvm-vhost-logs-sharing.patch [bz#1279388]
  - kvm-vhost-document-log-resizing.patch [bz#1279388]
  - kvm-vhost-add-vhost_set_log_base-op.patch [bz#1279388]
  - kvm-vhost-user-add-vhost_user_requires_shm_log.patch [bz#1279388]
  - kvm-vhost-alloc-shareable-log.patch [bz#1279388]
  - kvm-vhost-user-send-log-shm-fd-along-with-log_base.patch [bz#1279388]
  - kvm-vhost-user-add-a-migration-blocker.patch [bz#1279388]
  - kvm-vhost-user-document-migration-log.patch [bz#1279388]
  - kvm-net-add-trace_vhost_user_event.patch [bz#1279388]
  - kvm-vhost-user-add-support-of-live-migration.patch [bz#1279388]
  - kvm-vhost-user-add-rarp-sending-after-live-migration-for.patch [bz#1279388]
  - kvm-vhost-user-use-an-enum-helper-for-features-mask.patch [bz#1279388]
  - kvm-vhost-add-migration-block-if-memfd-failed.patch [bz#1279388]
  - kvm-vhost-user-test-move-wait_for_fds-out.patch [bz#1279388]
  - kvm-vhost-user-test-do-not-reinvent-glib-compat.h.patch [bz#1279388]
  - kvm-vhost-user-unit-test-for-new-messages.patch [bz#1279388]
  - kvm-vhost-user-test-use-tmpfs-by-default.patch [bz#1279388]
  - kvm-vhost-user-test-fix-predictable-filename-on-tmpfs.patch [bz#1279388]
  - kvm-vhost-user-test-remove-useless-static-check.patch [bz#1279388]
  - kvm-vhost-user-test-wrap-server-in-TestServer-struct.patch [bz#1279388]
  - kvm-vhost-user-test-learn-to-tweak-various-qemu-argument.patch [bz#1279388]
  - kvm-vhost-user-test-add-live-migration-test.patch [bz#1279388]
  - kvm-vhost-user-test-check-ownership-during-migration.patch [bz#1279388]
  - kvm-vhost-send-SET_VRING_ENABLE-at-start-stop.patch [bz#1279388]
  - kvm-vhost-user-modify-SET_LOG_BASE-to-pass-mmap-size-and.patch [bz#1279388]
  - kvm-vhost-let-SET_VRING_ENABLE-message-depends-on-protoc.patch [bz#1279388]
  - kvm-vhost-user-test-don-t-rely-on-RESET_OWNER.patch [bz#1279388]
  - kvm-vhost-user-remove-superfluous-n-around-error_report.patch [bz#1279388]
  - kvm-vhost-user-print-original-request-on-error.patch [bz#1279388]
  - kvm-vhost-user-start-stop-all-rings.patch [bz#1279388]
  - Resolves: bz#1279387
    (hugepage could not be used inside guest if start the guest with NUMA supported huge pages)
  - Resolves: bz#1279388
    ([6wind 7.3 Feat]: vhost user support of livemigration)
  - Resolves: bz#1279391
    (ceph.conf properties override qemu's command-line properties)
  - Resolves: bz#1283072
    (cold-plugged DIMM can't be unplugged on the first unplug request)
  - Resolves: bz#1283073
    (gdb skips hardware watchpoints)
  - Resolves: bz#1283079
    (qemu process exit after hot-plug a memory device which guest use 1G hugepages)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.3
changelog:
  - kvm-vhost-user-ignore-qemu-only-features.patch [bz#1279388]
  - kvm-vhost-user-fix-log-size.patch [bz#1279388]
  - Resolves: bz#1279388
    ([6wind 7.3 Feat]: vhost user support of livemigration)


author: Jeff E. Nelson <jen@redhat.com> - rhev-2.3.0-31.el7_2.4
changelog:
  - kvm-virtio-blk-Fix-double-completion-for-werror-stop.patch [bz#1283987]
  - kvm-virtio-blk-Move-resetting-of-req-mr_next-to-virtio_b.patch [bz#1283987]
  - kvm-spapr-Allocate-HTAB-from-machine-init.patch [bz#1285337]
  - kvm-spapr-Abort-when-HTAB-of-requested-size-isn-t-alloca.patch [bz#1285337]
  - Resolves: bz#1283987
    (Aborted (core dumped) for "qemu-kvm: block.c:3332: bdrv_aligned_pwritev: Assertion `!qiov || bytes == qiov->size' failed." after 'lvextend' the guest primary image and 'cont' the installing guest for the 2nd time)
  - Resolves: bz#1285337
    ([PPC64LE] Guest freezes if qemu allocates smaller page table than requested)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2_2.5
changelog:
  - kvm-virtio-introduce-virtio_map.patch [bz#1288096]
  - kvm-virtio-switch-to-virtio_map.patch [bz#1288096]
  - kvm-virtio-blk-convert-to-virtqueue_map.patch [bz#1288096]
  - kvm-virtio-serial-convert-to-virtio_map.patch [bz#1288096]
  - kvm-virtio-scsi-convert-to-virtqueue_map.patch [bz#1288096]
  - kvm-virtio-drop-virtqueue_map_sg.patch [bz#1288096]
  - kvm-dataplane-simplify-indirect-descriptor-read.patch [bz#1288096]
  - kvm-virtio-dataplane-adapt-dataplane-for-virtio-Version-.patch [bz#1288096]
  - kvm-dataplane-support-non-contigious-s-g.patch [bz#1288096]
  - Resolves: bz#1288096
    (qemu quit when rebooting guest which hotplug memory >=13 times)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.6
changelog:
  - kvm-ohci-delay-first-SOF-interrupt.patch [bz#1298971]
  - kvm-ohci-clear-pending-SOF-on-suspend.patch [bz#1298971]
  - kvm-raw-posix-Fix-.bdrv_co_get_block_status-for-unaligne.patch [bz#1299345]
  - Resolves: bz#1298971
    (OHCI can cause irq jam in guest [rhel-7.2.z])
  - Resolves: bz#1299345
    ([abrt] qemu-img: get_block_status(): qemu-img killed by SIGABRT)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.7
changelog:
  - kvm-fw_cfg-add-check-to-validate-current-entry-value-CVE.patch [bz#1298435]
  - kvm-ahci-clean-up-ncq_tfs-used-on-error.patch [bz#1297292]
  - Resolves: bz#1297292
    (CVE-2016-1568 qemu-kvm-rhev: Qemu: ide: ahci use-after-free vulnerability in aio port commands [rhel-7.2.z])
  - Resolves: bz#1298435
    (CVE-2016-1714 qemu-kvm-rhev: Qemu: nvram: OOB r/w access in processing firmware configurations [rhel-7.2.z])


author: Jeff E. Nelson <jen@redhat.com> - rhev-2.3.0-30.el7
changelog:
  - kvm-memhp-extend-address-auto-assignment-to-support-gaps.patch [bz#1267533]
  - kvm-pc-memhp-force-gaps-between-DIMM-s-GPA.patch [bz#1267533]
  - kvm-memory-allow-destroying-a-non-empty-MemoryRegion.patch [bz#1264347]
  - kvm-hw-do-not-pass-NULL-to-memory_region_init-from-insta.patch [bz#1264347]
  - kvm-tests-Fix-how-qom-test-is-run.patch [bz#1264347]
  - kvm-libqtest-Clean-up-unused-QTestState-member-sigact_ol.patch [bz#1264347]
  - kvm-libqtest-New-hmp-friends.patch [bz#1264347]
  - kvm-device-introspect-test-New-covering-device-introspec.patch [bz#1264347]
  - kvm-qmp-Fix-device-list-properties-not-to-crash-for-abst.patch [bz#1264347]
  - kvm-qdev-Protect-device-list-properties-against-broken-d.patch [bz#1264347]
  - kvm-Revert-qdev-Use-qdev_get_device_class-for-device-typ.patch [bz#1264347]
  - Resolves: bz#1264347
    (QMP device-list-properties crashes for CPU devices)
  - Resolves: bz#1267533
    (qemu quit when rebooting guest which hotplug memory >=13 times)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7
changelog:
  - kvm-Migration-Generate-the-completed-event-only-when-we-.patch [bz#1271145]
  - Resolves: bz#1271145
    (Guest OS paused after migration.)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.3.0-31.el7_2.1
changelog:
  - kvm-virtio-blk-only-clear-VIRTIO_F_ANY_LAYOUT-for-legacy.patch [bz#1276100]
  - kvm-vhost-enable-vhost-without-without-MSI-X.patch [bz#1276100]
  - kvm-virtio-avoid-leading-underscores-for-helpers.patch [bz#1276100]
  - kvm-vhost-user-use-VHOST_USER_XXX-macro-for-switch-state.patch [bz#1276100]
  - kvm-vhost-user-add-protocol-feature-negotiation.patch [bz#1276100]
  - kvm-vhost-user-add-VHOST_USER_GET_QUEUE_NUM-message.patch [bz#1276100]
  - kvm-vhost-introduce-vhost_backend_get_vq_index-method.patch [bz#1276100]
  - kvm-vhost-user-add-multiple-queue-support.patch [bz#1276100]
  - kvm-vhost-user-add-a-new-message-to-disable-enable-a-spe.patch [bz#1276100]
  - kvm-Revert-pc-memhp-force-gaps-between-DIMM-s-GPA.patch [bz#1278282]
  - kvm-Revert-memhp-extend-address-auto-assignment-to-suppo.patch [bz#1278282]
  - Resolves: bz#1276100
    ([6wind 7.2 FEAT]: vhost-user does not support multique)
  - Resolves: bz#1278282
    (memory unplug triggers BUG_ON: kernel BUG at mm/memory_hotplug.c:703!)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-19.el7
changelog:
  - kvm-hw-pcie-root-port-Fix-PCIe-root-port-initialization.patch [bz#1323976]
  - kvm-hw-pxb-declare-pxb-devices-as-not-hot-pluggable.patch [bz#1323976]
  - kvm-hw-acpi-fix-a-DSDT-table-issue-when-a-pxb-is-present.patch [bz#1323976]
  - kvm-acpi-refactor-pxb-crs-computation.patch [bz#1323976]
  - kvm-hw-apci-handle-64-bit-MMIO-regions-correctly.patch [bz#1323976]
  - kvm-target-i386-Move-TCG-initialization-check-to-tcg_x86.patch [bz#1087672]
  - kvm-target-i386-Move-TCG-initialization-to-realize-time.patch [bz#1087672]
  - kvm-target-i386-Call-cpu_exec_init-on-realize.patch [bz#1087672]
  - kvm-tests-acpi-report-names-of-expected-files-in-verbose.patch [bz#1087672]
  - kvm-acpi-add-aml_debug.patch [bz#1087672]
  - kvm-acpi-add-aml_refof.patch [bz#1087672]
  - kvm-pc-acpi-remove-AML-for-empty-not-used-GPE-handlers.patch [bz#1087672]
  - kvm-pc-acpi-consolidate-CPU-hotplug-AML.patch [bz#1087672]
  - kvm-pc-acpi-consolidate-GPE._E02-with-the-rest-of-CPU-ho.patch [bz#1087672]
  - kvm-pc-acpi-cpu-hotplug-make-AML-CPU_foo-defines-local-t.patch [bz#1087672]
  - kvm-pc-acpi-mark-current-CPU-hotplug-functions-as-legacy.patch [bz#1087672]
  - kvm-pc-acpi-consolidate-legacy-CPU-hotplug-in-one-file.patch [bz#1087672]
  - kvm-pc-acpi-simplify-build_legacy_cpu_hotplug_aml-signat.patch [bz#1087672]
  - kvm-pc-acpi-cpuhp-legacy-switch-ProcessorID-to-possible_.patch [bz#1087672]
  - kvm-acpi-extend-ACPI-interface-to-provide-send_event-hoo.patch [bz#1087672]
  - kvm-pc-use-AcpiDeviceIfClass.send_event-to-issue-GPE-eve.patch [bz#1087672]
  - kvm-target-i386-Remove-xlevel-hv-spinlocks-option-fixups.patch [bz#1087672]
  - kvm-target-i386-Move-features-logic-that-requires-CPUSta.patch [bz#1087672]
  - kvm-target-i386-Remove-assert-kvm_enabled-from-host_x86_.patch [bz#1087672]
  - kvm-target-i386-Move-xcc-kvm_required-check-to-realize-t.patch [bz#1087672]
  - kvm-target-i386-Use-cpu_generic_init-in-cpu_x86_init.patch [bz#1087672]
  - kvm-target-i386-Consolidate-calls-of-object_property_par.patch [bz#1087672]
  - kvm-docs-update-ACPI-CPU-hotplug-spec-with-new-protocol.patch [bz#1087672]
  - kvm-pc-piix4-ich9-add-cpu-hotplug-legacy-property.patch [bz#1087672]
  - kvm-acpi-cpuhp-add-CPU-devices-AML-with-_STA-method.patch [bz#1087672]
  - kvm-pc-acpi-introduce-AcpiDeviceIfClass.madt_cpu-hook.patch [bz#1087672]
  - kvm-acpi-cpuhp-implement-hot-add-parts-of-CPU-hotplug-in.patch [bz#1087672]
  - kvm-acpi-cpuhp-implement-hot-remove-parts-of-CPU-hotplug.patch [bz#1087672]
  - kvm-acpi-cpuhp-add-cpu._OST-handling.patch [bz#1087672]
  - kvm-pc-use-new-CPU-hotplug-interface-since-2.7-machine-t.patch [bz#1087672]
  - kvm-pc-acpi-drop-intermediate-PCMachineState.node_cpu.patch [bz#1087672]
  - kvm-qmp-fix-spapr-example-of-query-hotpluggable-cpus.patch [bz#1087672]
  - kvm-qdev-Don-t-stop-applying-globals-on-first-error.patch [bz#1087672]
  - kvm-qdev-Eliminate-qemu_add_globals-function.patch [bz#1087672]
  - kvm-qdev-Use-GList-for-global-properties.patch [bz#1087672]
  - kvm-qdev-GlobalProperty.errp-field.patch [bz#1087672]
  - kvm-vl-Simplify-global-property-registration.patch [bz#1087672]
  - kvm-machine-add-properties-to-compat_props-incrementaly.patch [bz#1087672]
  - kvm-machine-Add-machine_register_compat_props-function.patch [bz#1087672]
  - kvm-vl-Set-errp-to-error_abort-on-machine-compat_props.patch [bz#1087672]
  - kvm-target-sparc-Use-sparc_cpu_parse_features-directly.patch [bz#1087672]
  - kvm-target-i386-Avoid-using-locals-outside-their-scope.patch [bz#1087672]
  - kvm-cpu-Use-CPUClass-parse_features-as-convertor-to-glob.patch [bz#1087672]
  - kvm-arm-virt-Parse-cpu_model-only-once.patch [bz#1087672]
  - kvm-cpu-make-cpu-qom.h-only-include-able-from-cpu.h.patch [bz#1087672]
  - kvm-target-i386-make-cpu-qom.h-not-target-specific.patch [bz#1087672]
  - kvm-target-Don-t-redefine-cpu_exec.patch [bz#1087672]
  - kvm-pc-Parse-CPU-features-only-once.patch [bz#1087672]
  - kvm-target-i386-Use-uint32_t-for-X86CPU.apic_id.patch [bz#1087672]
  - kvm-pc-Add-x86_topo_ids_from_apicid.patch [bz#1087672]
  - kvm-pc-Extract-CPU-lookup-into-a-separate-function.patch [bz#1087672]
  - kvm-pc-cpu-Consolidate-apic-id-validity-checks-in-pc_cpu.patch [bz#1087672]
  - kvm-target-i386-Replace-custom-apic-id-setter-getter-wit.patch [bz#1087672]
  - kvm-target-i386-Add-socket-core-thread-properties-to-X86.patch [bz#1087672]
  - kvm-target-i386-cpu-Do-not-ignore-error-and-fix-apic-par.patch [bz#1087672]
  - kvm-target-i386-Fix-apic-object-leak-when-CPU-is-deleted.patch [bz#1087672]
  - kvm-pc-Set-APIC-ID-based-on-socket-core-thread-ids-if-it.patch [bz#1087672]
  - kvm-pc-Delay-setting-number-of-boot-CPUs-to-machine_done.patch [bz#1087672]
  - kvm-pc-Register-created-initial-and-hotpluged-CPUs-in-on.patch [bz#1087672]
  - kvm-pc-Forbid-BSP-removal.patch [bz#1087672]
  - kvm-pc-Enforce-adding-CPUs-contiguously-and-removing-the.patch [bz#1087672]
  - kvm-pc-cpu-Allow-device_add-to-be-used-with-x86-cpu.patch [bz#1087672]
  - kvm-pc-Implement-query-hotpluggable-cpus-callback.patch [bz#1087672]
  - kvm-apic-move-MAX_APICS-check-to-apic-class.patch [bz#1087672]
  - kvm-apic-Drop-APICCommonState.idx-and-use-APIC-ID-as-ind.patch [bz#1087672]
  - kvm-apic-kvm-apic-Fix-crash-due-to-access-to-freed-memor.patch [bz#1087672]
  - kvm-apic-Add-unrealize-callbacks.patch [bz#1087672]
  - kvm-apic-Use-apic_id-as-apic-s-migration-instance_id.patch [bz#1087672]
  - kvm-target-i386-Add-x86_cpu_unrealizefn.patch [bz#1087672]
  - kvm-pc-Make-device_del-CPU-work-for-x86-CPUs.patch [bz#1087672]
  - kvm-exec-Reduce-CONFIG_USER_ONLY-ifdeffenery.patch [bz#1087672]
  - kvm-exec-Don-t-use-cpu_index-to-detect-if-cpu_exec_init-.patch [bz#1087672]
  - kvm-exec-Set-cpu_index-only-if-it-s-not-been-explictly-s.patch [bz#1087672]
  - kvm-qdev-Fix-object-reference-leak-in-case-device.realiz.patch [bz#1087672]
  - kvm-pc-Init-CPUState-cpu_index-with-index-in-possible_cp.patch [bz#1087672]
  - kvm-Revert-pc-Enforce-adding-CPUs-contiguously-and-remov.patch [bz#1087672]
  - kvm-qdev-ignore-GlobalProperty.errp-for-hotplugged-devic.patch [bz#1087672]
  - kvm-vl-exit-if-a-bad-property-value-is-passed-to-global.patch [bz#1087672]
  - kvm-apic-fix-broken-migration-for-kvm-apic.patch [bz#1087672]
  - kvm-RHEL-only-hw-char-pl011-fix-SBSA-reset.patch [bz#1266048]
  - kvm-migration-regain-control-of-images-when-migration-fa.patch [bz#1361539]
  - kvm-migration-Promote-improved-autoconverge-commands-out.patch [bz#1358141]
  - kvm-spapr-Ensure-CPU-cores-are-added-contiguously-and-re.patch [bz#1361443]
  - kvm-spapr-disintricate-core-id-from-DT-semantics.patch [bz#1361443]
  - kvm-spapr-init-CPUState-cpu_index-with-index-relative-to.patch [bz#1361443]
  - kvm-Revert-spapr-Ensure-CPU-cores-are-added-contiguously.patch [bz#1361443]
  - kvm-spapr-Prevent-boot-CPU-core-removal.patch [bz#1361443]
  - kvm-virtio-vga-propagate-on-gpu-realized-error.patch [bz#1360664]
  - kvm-hw-virtio-pci-fix-virtio-behaviour.patch [bz#1360664]
  - kvm-q35-disable-s3-s4-by-default.patch [bz#1357202]
  - kvm-pcie-fix-link-active-status-bit-migration.patch [bz#1352860]
  - kvm-pc-rhel-7.2-pcie-fix-link-active-status-bit-migratio.patch [bz#1352860]
  - kvm-add-e1000e-ipxe-rom-symlink.patch [bz#1343092]
  - kvm-e1000e-add-boot-rom.patch [bz#1343092]
  - Resolves: bz#1087672
    ([Fujitsu 7.2 FEAT]: qemu vcpu hot-remove support)
  - Resolves: bz#1266048
    (login prompt does not work inside KVM guest when keys are pressed while the kernel is booting)
  - Resolves: bz#1323976
    (PCI: Add 64-bit MMIO support to PXB devices)
  - Resolves: bz#1343092
    (RFE: Integrate e1000e implementation in downstream QEMU)
  - Resolves: bz#1352860
    (Migration is failed from host RHEL7.2.z to host RHEL7.3 with "-M pc-i440fx-rhel7.0.0 -device nec-usb-xhci")
  - Resolves: bz#1357202
    ([Q35] S3 should be disabled by default for the pc-q35-rhel7.3.0 machine type)
  - Resolves: bz#1358141
    (Removal of the "x-" prefix for dynamic cpu throttling)
  - Resolves: bz#1360664
    ([virtio] Update default virtio-1 behavior for virtio devices)
  - Resolves: bz#1361443
    (ppc64le: Introduce stable cpu_index for cpu hotplugging)
  - Resolves: bz#1361539
    (block/io.c:1342: bdrv_co_do_pwritev: Assertion `!(bs->open_flags & 0x0800)' failed on failed migrate)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-20.el7
changelog:
  - kvm-block-gluster-rename-server-volname-image-host-volum.patch [bz#1247933]
  - kvm-block-gluster-code-cleanup.patch [bz#1247933]
  - kvm-block-gluster-deprecate-rdma-support.patch [bz#1247933]
  - kvm-block-gluster-using-new-qapi-schema.patch [bz#1247933]
  - kvm-block-gluster-add-support-for-multiple-gluster-serve.patch [bz#1247933]
  - kvm-block-gluster-fix-doc-in-the-qapi-schema-and-member-.patch [bz#1247933]
  - kvm-throttle-Don-t-allow-burst-limits-to-be-lower-than-t.patch [bz#1355665]
  - kvm-throttle-Test-burst-limits-lower-than-the-normal-lim.patch [bz#1355665]
  - kvm-spapr-Error-out-when-CPU-hotplug-is-attempted-on-old.patch [bz#1362019]
  - kvm-spapr-Correctly-set-query_hotpluggable_cpus-hook-bas.patch [bz#1362019]
  - Resolves: bz#1247933
    (RFE: qemu-kvm-rhev: support multiple volume hosts for gluster volumes)
  - Resolves: bz#1355665
    (Suggest to limit the burst value to be not less than the throttle value)
  - Resolves: bz#1362019
    (Crashes when using query-hotpluggable-cpus with pseries-rhel7.2.0 machine type)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-21.el7
changelog:
  - kvm-fix-qemu-exit-on-memory-hotplug-when-allocation-fail.patch [bz#1351409]
  - kvm-spapr-remove-extra-type-variable.patch [bz#1363812]
  - kvm-ppc-Introduce-a-function-to-look-up-CPU-alias-string.patch [bz#1363812]
  - kvm-hw-ppc-spapr-Look-up-CPU-alias-names-instead-of-hard.patch [bz#1363812]
  - kvm-ppc-kvm-Do-not-mess-up-the-generic-CPU-family-regist.patch [bz#1363812]
  - kvm-ppc-kvm-Register-also-a-generic-spapr-CPU-core-famil.patch [bz#1363812]
  - kvm-ppc64-fix-compressed-dump-with-pseries-kernel.patch [bz#1240497]
  - kvm-monitor-fix-crash-when-leaving-qemu-with-spice-audio.patch [bz#1355704]
  - kvm-audio-clean-up-before-monitor-clean-up.patch [bz#1355704]
  - kvm-vnc-don-t-crash-getting-server-info-if-lsock-is-NULL.patch [bz#1359655]
  - kvm-vnc-fix-crash-when-vnc_server_info_get-has-an-error.patch [bz#1359655]
  - kvm-vnc-ensure-connection-sharing-limits-is-always-confi.patch [bz#1359655]
  - kvm-vnc-make-sure-we-finish-disconnect.patch [bz#1352799]
  - kvm-virtio-net-allow-increasing-rx-queue-size.patch [bz#1358962]
  - kvm-input-add-trace-events-for-full-queues.patch [bz#1366471]
  - kvm-virtio-set-low-features-early-on-load.patch [bz#1365747]
  - kvm-Revert-virtio-net-unbreak-self-announcement-and-gues.patch [bz#1365747]
  - Resolves: bz#1240497
    (qemu-kvm-rhev: dump-guest-memory creates invalid header with format kdump-{zlib,lzo,snappy} on ppc64)
  - Resolves: bz#1351409
    (When hotplug memory, guest will shutdown as Insufficient free host memory pages available to allocate)
  - Resolves: bz#1352799
    (Client information from hmp doesn't vanish after client disconnect when using vnc display)
  - Resolves: bz#1355704
    (spice: core dump when 'quit')
  - Resolves: bz#1358962
    (Increase the queue size to the max allowed, 1024.)
  - Resolves: bz#1359655
    (Qemu crashes when connecting to a guest started with "-vnc none" by virt-viewer)
  - Resolves: bz#1363812
    (qemu-kvm-rhev: -cpu POWER8 no longer works)
  - Resolves: bz#1365747
    (Migrate guest(win10) after hot plug/unplug memory balloon device [Missing section footer for 0000:00:07.0/virtio-net])
  - Resolves: bz#1366471
    (QEMU prints "usb-kbd: warning: key event queue full" when pressing keys during SLOF boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-22.el7
changelog:
  - kvm-target-i386-kvm-Report-kvm_pv_unhalt-as-unsupported-.patch [bz#1363679]
  - kvm-ioapic-keep-RO-bits-for-IOAPIC-entry.patch [bz#1358653]
  - kvm-ioapic-clear-remote-irr-bit-for-edge-triggered-inter.patch [bz#1358653]
  - kvm-x86-iommu-introduce-parent-class.patch [bz#1358653]
  - kvm-intel_iommu-rename-VTD_PCI_DEVFN_MAX-to-x86-iommu.patch [bz#1358653]
  - kvm-x86-iommu-provide-x86_iommu_get_default.patch [bz#1358653]
  - kvm-x86-iommu-introduce-intremap-property.patch [bz#1358653]
  - kvm-acpi-enable-INTR-for-DMAR-report-structure.patch [bz#1358653]
  - kvm-intel_iommu-allow-queued-invalidation-for-IR.patch [bz#1358653]
  - kvm-intel_iommu-set-IR-bit-for-ECAP-register.patch [bz#1358653]
  - kvm-acpi-add-DMAR-scope-definition-for-root-IOAPIC.patch [bz#1358653]
  - kvm-intel_iommu-define-interrupt-remap-table-addr-regist.patch [bz#1358653]
  - kvm-intel_iommu-handle-interrupt-remap-enable.patch [bz#1358653]
  - kvm-intel_iommu-define-several-structs-for-IOMMU-IR.patch [bz#1358653]
  - kvm-intel_iommu-add-IR-translation-faults-defines.patch [bz#1358653]
  - kvm-intel_iommu-Add-support-for-PCI-MSI-remap.patch [bz#1358653]
  - kvm-intel_iommu-get-rid-of-0-initializers.patch [bz#1358653]
  - kvm-q35-ioapic-add-support-for-emulated-IOAPIC-IR.patch [bz#1358653]
  - kvm-ioapic-introduce-ioapic_entry_parse-helper.patch [bz#1358653]
  - kvm-intel_iommu-add-support-for-split-irqchip.patch [bz#1358653]
  - kvm-x86-iommu-introduce-IEC-notifiers.patch [bz#1358653]
  - kvm-ioapic-register-IOMMU-IEC-notifier-for-ioapic.patch [bz#1358653]
  - kvm-intel_iommu-Add-support-for-Extended-Interrupt-Mode.patch [bz#1358653]
  - kvm-intel_iommu-add-SID-validation-for-IR.patch [bz#1358653]
  - kvm-irqchip-simplify-kvm_irqchip_add_msi_route.patch [bz#1358653]
  - kvm-irqchip-i386-add-hook-for-add-remove-virq.patch [bz#1358653]
  - kvm-irqchip-x86-add-msi-route-notify-fn.patch [bz#1358653]
  - kvm-irqchip-do-explicit-commit-when-update-irq.patch [bz#1358653]
  - kvm-intel_iommu-support-all-masks-in-interrupt-entry-cac.patch [bz#1358653]
  - kvm-all-add-trace-events-for-kvm-irqchip-ops.patch [bz#1358653]
  - kvm-intel_iommu-disallow-kernel-irqchip-on-with-IR.patch [bz#1358653]
  - kvm-intel_iommu-avoid-unnamed-fields.patch [bz#1358653]
  - kvm-irqchip-only-commit-route-when-irqchip-is-used.patch [bz#1358653]
  - kvm-x86-ioapic-ignore-level-irq-during-processing.patch [bz#1358653]
  - kvm-x86-ioapic-add-support-for-explicit-EOI.patch [bz#1358653]
  - kvm-memory-Fix-IOMMU-replay-base-address.patch [bz#1364035]
  - kvm-Add-luks-to-block-driver-whitelist.patch [bz#1301019]
  - Resolves: bz#1301019
    (RFE: add support for LUKS disk encryption format driver w/ RBD, iSCSI, and qcow2)
  - Resolves: bz#1358653
    ([RFE] Interrupt remapping support for Intel vIOMMUs)
  - Resolves: bz#1363679
    (RHEL guest hangs with kernel-irqchip=off and smp>1)
  - Resolves: bz#1364035
    ([ppc64le][VFIO]Qemu complains:vfio_dma_map(0x10033d3a980, 0x1f34f0000, 0x10000, 0x3fff9a6d0000) = -6 (No such device or address))


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-23.el7
changelog:
  - kvm-vhost-user-disconnect-on-HUP.patch [bz#1355902]
  - kvm-vhost-don-t-assume-opaque-is-a-fd-use-backend-cleanu.patch [bz#1355902]
  - kvm-vhost-make-vhost_log_put-idempotent.patch [bz#1355902]
  - kvm-vhost-assert-the-log-was-cleaned-up.patch [bz#1355902]
  - kvm-vhost-fix-cleanup-on-not-fully-initialized-device.patch [bz#1355902]
  - kvm-vhost-make-vhost_dev_cleanup-idempotent.patch [bz#1355902]
  - kvm-vhost-net-always-call-vhost_dev_cleanup-on-failure.patch [bz#1355902]
  - kvm-vhost-fix-calling-vhost_dev_cleanup-after-vhost_dev_.patch [bz#1355902]
  - kvm-vhost-do-not-assert-on-vhost_ops-failure.patch [bz#1355902]
  - kvm-vhost-add-missing-VHOST_OPS_DEBUG.patch [bz#1355902]
  - kvm-vhost-use-error_report-instead-of-fprintf-stderr.patch [bz#1355902]
  - kvm-qemu-char-fix-qemu_chr_fe_set_msgfds-crash-when-disc.patch [bz#1355902]
  - kvm-vhost-user-call-set_msgfds-unconditionally.patch [bz#1355902]
  - kvm-vhost-user-check-qemu_chr_fe_set_msgfds-return-value.patch [bz#1355902]
  - kvm-vhost-user-check-vhost_user_-read-write-return-value.patch [bz#1355902]
  - kvm-vhost-user-keep-vhost_net-after-a-disconnection.patch [bz#1355902]
  - kvm-vhost-user-add-get_vhost_net-assertions.patch [bz#1355902]
  - kvm-Revert-vhost-net-do-not-crash-if-backend-is-not-pres.patch [bz#1355902]
  - kvm-vhost-net-vhost_migration_done-is-vhost-user-specifi.patch [bz#1355902]
  - kvm-vhost-add-assert-to-check-runtime-behaviour.patch [bz#1355902]
  - kvm-char-add-chr_wait_connected-callback.patch [bz#1355902]
  - kvm-char-add-and-use-tcp_chr_wait_connected.patch [bz#1355902]
  - kvm-vhost-user-wait-until-backend-init-is-completed.patch [bz#1355902]
  - kvm-vhost-user-add-error-report-in-vhost_user_write.patch [bz#1355902]
  - kvm-vhost-add-vhost_net_set_backend.patch [bz#1355902]
  - kvm-vhost-do-not-update-last-avail-idx-on-get_vring_base.patch [bz#1355902]
  - kvm-vhost-check-for-vhost_ops-before-using.patch [bz#1355902]
  - kvm-vhost-user-Introduce-a-new-protocol-feature-REPLY_AC.patch [bz#1355902]
  - kvm-linux-aio-Handle-io_submit-failure-gracefully.patch [bz#1285928]
  - kvm-Revert-acpi-pc-add-fw_cfg-device-node-to-dsdt.patch [bz#1368153]
  - Resolves: bz#1285928
    (linux-aio aborts on io_submit() failure)
  - Resolves: bz#1355902
    (vhost-user reconnect misc fixes and improvements)
  - Resolves: bz#1368153
    (Please hide fw_cfg device in windows guest in order to make svvp test pass)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-24.el7
changelog:
  - kvm-Fix-configure-test-for-PBKDF2-in-nettle.patch [bz#1301019]
  - kvm-redhat-switch-from-gcrypt-to-nettle-for-crypto.patch [bz#1301019]
  - kvm-crypto-assert-that-qcrypto_hash_digest_len-is-in-ran.patch [bz#1301019]
  - kvm-crypto-fix-handling-of-iv-generator-hash-defaults.patch [bz#1301019]
  - kvm-crypto-ensure-XTS-is-only-used-with-ciphers-with-16-.patch [bz#1301019]
  - kvm-vhost-user-test-Use-libqos-instead-of-pxe-virtio.rom.patch [bz#1371211]
  - kvm-vl-Delay-initialization-of-memory-backends.patch [bz#1371211]
  - kvm-spapr-implement-H_CHANGE_LOGICAL_LAN_MAC-h_call.patch [bz#1371419]
  - Resolves: bz#1301019
    (RFE: add support for LUKS disk encryption format driver w/ RBD, iSCSI, and qcow2)
  - Resolves: bz#1371211
    (Qemu 2.6 won't boot guest with 2 meg hugepages)
  - Resolves: bz#1371419
    ([ppc64le] Can't modify mac address for spapr-vlan device in rhel6.8 guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-25.el7
changelog:
  - kvm-virtio-recalculate-vq-inuse-after-migration.patch [bz#1372763]
  - kvm-virtio-decrement-vq-inuse-in-virtqueue_discard.patch [bz#1372763]
  - kvm-virtio-balloon-discard-virtqueue-element-on-reset.patch [bz#1370703]
  - kvm-virtio-zero-vq-inuse-in-virtio_reset.patch [bz#1370703 bz#1374623]
  - Resolves: bz#1370703
    ([Balloon] Whql Job "Commom scenario stress with IO" failed on 2008-32/64)
  - Resolves: bz#1372763
    (RHSA-2016-1756 breaks migration of instances)
  - Resolves: bz#1374623
    (RHSA-2016-1756 breaks migration of instances)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-26.el7
changelog:
  - kvm-target-i386-Add-more-Intel-AVX-512-instructions-supp.patch [bz#1372455]
  - kvm-iothread-Stop-threads-before-main-quits.patch [bz#1343021]
  - kvm-virtio-pci-error-out-when-both-legacy-and-modern-mod.patch [bz#1370005]
  - kvm-virtio-bus-Plug-devices-after-features-are-negotiate.patch [bz#1370005]
  - kvm-virtio-pci-reduce-modern_mem_bar-size.patch [bz#1365613]
  - kvm-virtio-vga-adapt-to-page-per-vq-off.patch [bz#1365613]
  - kvm-virtio-gpu-pci-tag-as-not-hotpluggable.patch [bz#1368032]
  - kvm-scsi-disk-Cleaning-up-around-tray-open-state.patch [bz#1374251]
  - kvm-virtio-scsi-Don-t-abort-when-media-is-ejected.patch [bz#1374251]
  - kvm-io-remove-mistaken-call-to-object_ref-on-QTask.patch [bz#1375677]
  - kvm-block-Invalidate-all-children.patch [bz#1355927]
  - kvm-block-Drop-superfluous-invalidating-bs-file-from-dri.patch [bz#1355927]
  - kvm-block-Inactivate-all-children.patch [bz#1355927]
  - kvm-vfio-pci-Fix-regression-in-MSI-routing-configuration.patch [bz#1373802]
  - kvm-x86-lapic-Load-LAPIC-state-at-post_load.patch [bz#1363998]
  - kvm-blockdev-ignore-cache-options-for-empty-CDROM-drives.patch [bz#1342999]
  - kvm-block-reintroduce-bdrv_flush_all.patch [bz#1338638]
  - kvm-qemu-use-bdrv_flush_all-for-vm_stop-et-al.patch [bz#1338638]
  - Resolves: bz#1338638
    (Migration fails after ejecting the cdrom in the guest)
  - Resolves: bz#1342999
    ('cache=x' cannot work with empty cdrom)
  - Resolves: bz#1343021
    (Core dump when quit from HMP after migration finished)
  - Resolves: bz#1355927
    (qemu SIGABRT when doing inactive blockcommit with external system checkpoint snapshot)
  - Resolves: bz#1363998
    (Live  migration via a compressed file  causes the guest desktop to freeze)
  - Resolves: bz#1365613
    ([PCI] The default MMIO range reserved by firmware for PCI bridges is not enough to hotplug virtio-1 devices)
  - Resolves: bz#1368032
    (kernel crash after hot remove virtio-gpu device)
  - Resolves: bz#1370005
    (Fail to get network device info(eth0) in guest with virtio-net-pci/vhostforce)
  - Resolves: bz#1372455
    ([Intel 7.3 Bug] SKL-SP Guest cpu doesn't support avx512 instruction sets(avx512bw, avx512dq and avx512vl)(qemu-kvm-rhev))
  - Resolves: bz#1373802
    (Network can't recover when trigger EEH  one time)
  - Resolves: bz#1374251
    (qemu-kvm-rhev core dumped when enabling virtio-scsi "data plane" and executing "eject")
  - Resolves: bz#1375677
    (Crash when performing VNC websockets handshake)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-27.el7
changelog:
  - kvm-char-fix-waiting-for-TLS-and-telnet-connection.patch [bz#1300773]
  - kvm-target-i386-introduce-kvm_put_one_msr.patch [bz#1377920]
  - kvm-apic-set-APIC-base-as-part-of-kvm_apic_put.patch [bz#1377920]
  - Resolves: bz#1300773
    (RFE: add support for native TLS encryption on chardev  TCP transports)
  - Resolves: bz#1377920
    (Guest fails reboot and causes kernel-panic)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7_3.2
changelog:
  - kvm-numa-do-not-leak-NumaOptions.patch [bz#1397745]
  - kvm-char-free-the-tcp-connection-data-when-closing.patch [bz#1397745]
  - kvm-char-free-MuxDriver-when-closing.patch [bz#1397745]
  - kvm-ahci-free-irqs-array.patch [bz#1397745]
  - kvm-virtio-input-free-config-list.patch [bz#1397745]
  - kvm-usb-free-USBDevice.strings.patch [bz#1397745]
  - kvm-usb-free-leaking-path.patch [bz#1397745]
  - kvm-ahci-fix-sglist-leak-on-retry.patch [bz#1397745]
  - kvm-virtio-add-virtqueue_rewind.patch [bz#1402509]
  - kvm-virtio-balloon-fix-stats-vq-migration.patch [bz#1402509]
  - kvm-virtio-blk-Release-s-rq-queue-at-system_reset.patch [bz#1393041]
  - kvm-virtio-blk-Remove-stale-comment-about-draining.patch [bz#1393041]
  - Resolves: bz#1393041
    (system_reset should clear pending request for error (virtio-blk))
  - Resolves: bz#1397745
    (Backport memory leak fixes from QEMU 2.7)
  - Resolves: bz#1402509
    (virtio-balloon stats virtqueue does not migrate properly)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7_3.3
changelog:
  - kvm-pc_piix-fix-compat-props-typo-for-RHEL6-machine-type.patch [bz#1408122]
  - kvm-net-don-t-poke-at-chardev-internal-QemuOpts.patch [bz#1410200]
  - Resolves: bz#1408122
    (Opteron_G4 CPU model broken in QEMU 2.6 with RHEL 6 machine type)
  - Resolves: bz#1410200
    (qemu gets SIGSEGV when hot-plug a vhostuser network)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7_3.4
changelog:
  - kvm-Disable-usbredir-and-libcacard-for-unsupported-archi.patch [bz#1420428]
  - Resolves: bz#1420428
    (Remove dependencies required by spice on ppc64le)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7_3.5
changelog:
  - kvm-memory-Provide-memory_region_init_rom.patch [bz#1420456]
  - kvm-pci-mark-ROMs-read-only.patch [bz#1420456]
  - kvm-vhost-skip-ROM-sections.patch [bz#1420456]
  - kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.patch [bz#1418234]
  - kvm-display-cirrus-ignore-source-pitch-value-as-needed-i.patch [bz#1418234]
  - kvm-cirrus-handle-negative-pitch-in-cirrus_invalidate_re.patch [bz#1418234]
  - kvm-cirrus-allow-zero-source-pitch-in-pattern-fill-rops.patch [bz#1418234]
  - kvm-cirrus-fix-blit-address-mask-handling.patch [bz#1418234]
  - kvm-cirrus-fix-oob-access-issue-CVE-2017-2615.patch [bz#1418234]
  - Resolves: bz#1418234
    (CVE-2017-2615 qemu-kvm-rhev: Qemu: display: cirrus: oob access while doing bitblt copy backward mode [rhel-7.3.z])
  - Resolves: bz#1420456
    ([ppc64le]reset vm when do migration, HMP in src host promp "tcmalloc: large alloc 1073872896 bytes...")


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7_3.6
changelog:
  - kvm-cirrus-fix-patterncopy-checks.patch [bz#1420493]
  - kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil.patch [bz#1420493]
  - kvm-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch [bz#1420493]
  - Resolves: bz#1420493
    (EMBARGOED CVE-2017-2620 qemu-kvm-rhev: Qemu: display: cirrus: potential arbitrary code execution via cirrus_bitblt_cputovideo [rhel-7.3.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7_3.7
changelog:
  - kvm-block-check-full-backing-filename-when-searching-pro.patch [bz#1425125]
  - kvm-qemu-iotests-Don-t-create-fifos-pidfiles-with-protoc.patch [bz#1425125]
  - kvm-qemu-iotest-test-to-lookup-protocol-based-image-with.patch [bz#1425125]
  - kvm-target-i386-Don-t-use-cpu-migratable-when-filtering-.patch [bz#1413897]
  - Resolves: bz#1413897
    (cpu flag nonstop_tsc is not present in guest with host-passthrough and feature policy require invtsc)
  - Resolves: bz#1425125
    (qemu fails to recognize gluster URIs in backing chain for block-commit operation)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7_3.8
changelog:
  - kvm-target-i386-present-virtual-L3-cache-info-for-vcpus.patch [bz#1430802]
  - Resolves: bz#1430802
    (Enhance qemu to present virtual L3 cache info for vcpus)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7_3.9
changelog:
  - kvm-block-gluster-memory-usage-use-one-glfs-instance-per.patch [bz#1413044]
  - kvm-gluster-Fix-use-after-free-in-glfs_clear_preopened.patch [bz#1413044]
  - kvm-fix-cirrus_vga-fix-OOB-read-case-qemu-Segmentation-f.patch [bz#1430061]
  - kvm-cirrus-vnc-zap-bitblit-support-from-console-code.patch [bz#1430061]
  - kvm-cirrus-add-option-to-disable-blitter.patch [bz#1430061]
  - kvm-cirrus-fix-cirrus_invalidate_region.patch [bz#1430061]
  - kvm-cirrus-stop-passing-around-dst-pointers-in-the-blitt.patch [bz#1430061]
  - kvm-cirrus-stop-passing-around-src-pointers-in-the-blitt.patch [bz#1430061]
  - kvm-cirrus-fix-off-by-one-in-cirrus_bitblt_rop_bkwd_tran.patch [bz#1430061]
  - kvm-file-posix-Consider-max_segments-for-BlockLimits.max.patch [bz#1431149]
  - kvm-file-posix-clean-up-max_segments-buffer-termination.patch [bz#1431149]
  - kvm-file-posix-Don-t-leak-fd-in-hdev_get_max_segments.patch [bz#1431149]
  - Resolves: bz#1413044
    (block-gluster: use one glfs instance per volume)
  - Resolves: bz#1430061
    (CVE-2016-9603 qemu-kvm-rhev: Qemu: cirrus: heap buffer overflow via vnc connection [rhel-7.3.z])
  - Resolves: bz#1431149
    (VMs pause when writing to Virtio-SCSI direct lun with scsi passthrough enabled via an Emulex HBA)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7_3.10
changelog:
  - kvm-virtio-rng-stop-virtqueue-while-the-CPU-is-stopped.patch [bz#1450375]
  - Resolves: bz#1450375
    (Migration failed with postcopy enabled from rhel7.3.z host to rhel7.4 host "error while loading state for instance 0x0 of device 'pci)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7
changelog:
  - kvm-ARM-ACPI-fix-the-AML-ID-format-for-CPU-devices.patch [bz#1373733]
  - Resolves: bz#1373733
    (failed to run a guest VM with >= 12 vcpu under ACPI mode)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.6.0-28.el7_3.1
changelog:
  - kvm-ide-fix-halted-IO-segfault-at-reset.patch [bz#1393043]
  - kvm-atapi-fix-halted-DMA-reset.patch [bz#1393043]
  - kvm-ahci-clear-aiocb-in-ncq_cb.patch [bz#1393736]
  - kvm-Workaround-rhel6-ctrl_guest_offloads-machine-type-mi.patch [bz#1392876]
  - kvm-Postcopy-vs-xbzrle-Don-t-send-xbzrle-pages-once-in-p.patch [bz#1395360]
  - kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1392881]
  - Resolves: bz#1392876
    (windows guests migration from rhel6.8-z to rhel7.3 with virtio-net-pci fail)
  - Resolves: bz#1392881
    (Graphic can't be showed out quickly if guest graphic mode is vnc)
  - Resolves: bz#1393043
    (system_reset should clear pending request for error (IDE))
  - Resolves: bz#1393736
    (qemu core dump when there is an I/O error on AHCI)
  - Resolves: bz#1395360
    (Post-copy migration fails with XBZRLE compression)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7.3
changelog:
  - kvm-block-Skip-implicit-nodes-in-query-block-blockstats.patch [bz#1473145]
  - Resolves: bz#1473145
    (Wrong allocation value after virDomainBlockCopy() (alloc=capacity))


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7_4.4
changelog:
  - kvm-nbd-strict-nbd_wr_syncv.patch [bz#1467509]
  - kvm-nbd-read_sync-and-friends-return-0-on-success.patch [bz#1467509]
  - kvm-nbd-make-nbd_drop-public.patch [bz#1467509]
  - kvm-nbd-server-get-rid-of-nbd_negotiate_read-and-friends.patch [bz#1467509]
  - Resolves: bz#1467509
    (CVE-2017-7539 Qemu quit abnormally when connecting to built-in NBD server [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7_4.5
changelog:
  - kvm-trace-use-static-event-ID-mapping-in-simpletrace.stp.patch [bz#1482515]
  - kvm-simpletrace-fix-flight-recorder-no-header-option.patch [bz#1482515]
  - kvm-exec-abstract-address_space_do_translate.patch [bz#1482856]
  - kvm-redhat-requires-for-the-ipxe-seabios-that-supports-I.patch [bz#1482851]
  - Resolves: bz#1482515
    ([Tracing] capturing trace data failed [rhel-7.4.z])
  - Resolves: bz#1482851
    (Requires for the seabios version that support vIOMMU of virtio [rhel-7.4.z])
  - Resolves: bz#1482856
    (Unable to start vhost if iommu_platform=on but intel_iommu=on not specified in guest [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7_4.6
changelog:
  - kvm-ps2-fix-sending-of-PAUSE-BREAK-scancodes.patch [bz#1482389]
  - kvm-ui-correctly-detect-spice-PAUSE-scancode-sequence.patch [bz#1482389]
  - kvm-vhost-ensure-vhost_ops-are-set-before-calling-iotlb-.patch [bz#1480446]
  - kvm-vhost-user-unregister-slave-req-handler-at-cleanup-t.patch [bz#1480446]
  - Resolves: bz#1480446
    (vhost-user/iommu: crash when backend disconnects [rhel-7.4.z])
  - Resolves: bz#1482389
    (Unable to send PAUSE/BREAK to guests in VNC or SPICE [rhel-7.4.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - rhev-2.9.0-16.el7_4.7
changelog:
  - kvm-vhost-Release-memory-references-on-cleanup.patch [bz#1490742]
  - Resolves: bz#1490742
    (Hot-unplugging a vhost network device leaks references to VFIOPCIDevice's [rhel-7.4.z])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - rhev-2.9.0-16.el7_4.8
changelog:
  - kvm-ui-move-qemu_input_linux_to_qcode.patch [bz#1482388]
  - kvm-ui-update-keymaps.patch [bz#1482388]
  - kvm-ui-add-multimedia-keys.patch [bz#1482388]
  - kvm-ps2-enable-multimedia-keys.patch [bz#1482388]
  - kvm-ui-drop-altgr-and-altgr_r-QKeyCodes.patch [bz#1482388]
  - kvm-ui-drop-ac_search-and-ac_stop.patch [bz#1482388]
  - Resolves: bz#1482388
    (Keys to control audio are not forwarded to the guest [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7_4.9
changelog:
  - kvm-nbd-client-Fix-regression-when-server-sends-garbage.patch [bz#1495474]
  - kvm-fix-build-failure-in-nbd_read_reply_entry.patch [bz#1495474]
  - kvm-nbd-client-avoid-spurious-qio_channel_yield-re-entry.patch [bz#1495474]
  - kvm-nbd-client-avoid-read_reply_co-entry-if-send-failed.patch [bz#1495474]
  - kvm-qemu-iotests-improve-nbd-fault-injector.py-startup-p.patch [bz#1495474]
  - kvm-qemu-iotests-test-NBD-over-UNIX-domain-sockets-in-08.patch [bz#1495474]
  - kvm-block-nbd-client-nbd_co_send_request-fix-return-code.patch [bz#1495474]
  - Resolves: bz#1495474
    (Fail to quit source qemu when do live migration after mirroring guest to NBD server [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7_4.10
changelog:
  - kvm-vga-stop-passing-pointers-to-vga_draw_line-functions.patch [bz#1501300]
  - kvm-vga-drop-line_offset-variable.patch [bz#1501300]
  - kvm-vga-handle-cirrus-vbe-mode-wraparounds.patch [bz#1501300]
  - kvm-cirrus-fix-oob-access-in-mode4and5-write-functions.patch [bz#1501300]
  - Resolves: bz#1501300
    (CVE-2017-15289 qemu-kvm-rhev: Qemu: cirrus: OOB access issue in  mode4and5 write functions [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7_4.11
changelog:
  - kvm-exec-use-qemu_ram_ptr_length-to-access-guest-ram.patch [bz#1472185]
  - kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501123]
  - Resolves: bz#1472185
    (CVE-2017-11334 qemu-kvm-rhev: Qemu: exec: oob access during dma operation [rhel-7.4.z])
  - Resolves: bz#1501123
    (CVE-2017-14167 qemu-kvm-rhev: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7_4.12
changelog:
  - kvm-util-async-use-atomic_mb_set-in-qemu_bh_cancel.patch [bz#1513362]
  - Resolves: bz#1513362
    (QEMU's AIO subsystem gets stuck inhibiting all I/O operations on virtio-blk-pci devices [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7_4.14
changelog:
  - kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1534649]
  - kvm-mirror-Fix-inconsistent-backing-AioContext-for-after.patch [bz#1535125]
  - Resolves: bz#1534649
    (Qemu crashes when all fw_cfg slots are used [rhel-7.4.z])
  - Resolves: bz#1535125
    (Mirror jobs for drives with iothreads make QEMU to abort with "block.c:1895: bdrv_attach_child: Assertion `bdrv_get_aio_context(parent_bs) == bdrv_get_aio_context(child_bs)' failed." [rhel-7.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.0-13.el7
changelog:
  - kvm-linux-headers-update.patch [bz#1462061]
  - kvm-all-Pass-an-error-object-to-kvm_device_access.patch [bz#1462061]
  - kvm-hw-intc-arm_gicv3_its-Implement-state-save-restore.patch [bz#1462061]
  - kvm-hw-intc-arm_gicv3_kvm-Implement-pending-table-save.patch [bz#1462061]
  - kvm-hw-intc-arm_gicv3_its-Allow-save-restore.patch [bz#1462061]
  - Resolves: bz#1462061
    (Backport QEMU ITS migration series)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.0-14.el7
changelog:
  - kvm-sockets-ensure-we-can-bind-to-both-ipv4-ipv6-separat.patch [bz#1446003]
  - Resolves: bz#1446003
    (vnc cannot find a free port to use)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.0-15.el7
changelog:
  - kvm-hw-ppc-spapr-Adjust-firmware-name-for-PCI-bridges.patch [bz#1459170]
  - Resolves: bz#1459170
    (SLOF: Can't boot from virtio-scsi disk behind pci-bridge: E3405: No such device)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.0-16.el7
changelog:
  - kvm-AArch64-Add-pci-testdev.patch [bz#1465048]
  - Resolves: bz#1465048
    (AArch64: Add pci-testdev)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7_4.1
changelog:
  - kvm-virtio-scsi-finalize-IOMMU-support.patch [bz#1471076]
  - kvm-qemu-nbd-Ignore-SIGPIPE.patch [bz#1468108]
  - Resolves: bz#1468108
    (CVE-2017-10664 qemu-kvm-rhev: Qemu: qemu-nbd: server breaks with SIGPIPE upon client abort [rhel-7.4.z])
  - Resolves: bz#1471076
    (unbreak virtio-scsi for vIOMMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7.2
changelog:
  - kvm-virtio-net-enable-configurable-tx-queue-size.patch [bz#1471666]
  - kvm-virtio-net-fix-tx-queue-size-for-vhost-user.patch [bz#1471666]
  - Resolves: bz#1471666
    (virtio-net: enable configurable tx queue size)


author: Vitor de Lima <vdelima@redhat.com> - 1.0-3
changelog:
  - Use autotools to build the project
  - Dropped unused python_ver global
  - Replaced the %libname macro with %name
  - Included the target directory /usr/lib/safelease in the RPM file list
  - Included a description of the package


author: Peter Hatina <phatina@redhat.com> - 2.1.0-3
changelog:
  - Changes for EPEL-7
    - Lower systemd required version to 208
    - Rewrite BuildRequires for systemd-devel


author: Jerry James <loganjerry@gmail.com> - 1.2.0-7
changelog:
  - Fix -python3 dependency on /usr/bin/python (bz 1342508)
  - Comply with latest python packaging guidelines
  - Drop workaround for bz 1251568, now fixed


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-6
changelog:
  - Completely disable Xen.  APIs seem to have changed incompatibly.
  - Add commits from upstream since 0.5.
  - Remove pagerate.pl when building on RHEL.
  - Modernize the spec file.


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-11
changelog:
  - Output of 'rpm -qi' has changed, so the VirtualizationVendor metric
    was not working.
    resolves: rhbz#1085848


author: Anthony PERARD <anthony.perard@citrix.com> - 4.8.2-4.el7.centos
changelog:
  - Import from upstream the updated optional patch from XSA-240, it is necessary
    to apply the update of XSA-240.
  - Import update of XSA-240 (v5)
  - Apply the new final patch from XSA-243 (v5)


author: Anthony PERARD <anthony.perard@citrix.com> - 4.10.1-2
changelog:
  - Apply XSAs 260-267

  In order to apply 263, also backport patches:
  - x86: correct ordering of operations during S3 resume
  - x86: suppress BTI mitigations around S3 suspend/resume<Paste>
  - x86/spec_ctrl: Updates to retpoline-safety decision making


author: Anthony PERARD <anthony.perard@citrix.com> - 4.10.1.106.g13e85a6dbc-1
changelog:
  - Use a snapshot of the xen git tree instead of a release tarball.
  - Have fixes for XSA 268, 269, 272 and 273.


author: Anthony PERARD <anthony.perard@citrix.com> - 4.10.1.106.g13e85a6dbc-2
changelog:
  - Fix xen version string, in e.g. xl info, so it match the RPM version.
  - Also remove the information a xen_changeset, as this information is an
    artefact of the package build.


author: Anthony PERARD <anthony.perard@citrix.com> - 4.12.2-2
changelog:
  - Fix build of newer libvirt by removing non-existent xenblktapctl dependency
    from libxenlight.pc.


author: George Dunlap <george.dunlap@citrix.com> - 4.6.1-10.el6.centos
changelog:
  - Update to 4.6.1
  - Retain two xsa-155 related patches to xen missing from the release
  - Retain an xsa-162 related patch to qemu-upstream missing from the release


author: George Dunlap <george.dunlap@citrix.com> 4.6.3-15.el6.centos
changelog:
  - Import XSAs 216, 217, 218, 219, 221, 222, 223, 224, and 225.
    (NB XSA 220 has been left out until we update to 4.6.5.)


author: George Dunlap <george.dunlap@citrix.com> - 4.8.2-10.el7.centos
changelog:
  - Backport PVH functionality from 4.8.3pre-shim-comet branch
  - "Comet" shim functionality will come in a later update


author: Kevin Stange <kevin@steadfast.net> - 4.8.3-6.el7.centos
changelog:
  - Apply XSA-264, 265, 266, and 267
  - Note: This XSA-267 backport does not support the Eager FPU command line switch


