# changelog

author: Orion Poplawski <orion@nwra.com> - 8.2.7-1
changelog:
  - Update to 8.2.7 (bz#1777262)
  - Make 00-modulepath.sh return 0
  - Make sure /etc/profile.d/modules.sh has $MODULEPATH (#1461656)


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.20.1.el7]
changelog:
  - [x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
  - [x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.21.1.el7]
changelog:
  - [x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
  - [x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.22.1.el7]
changelog:
  - [md] raid: raid5 preserve the writeback action after the parity check (Nigel Croxon) [1698109 1701350]
  - [net] route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race (Xin Long) [1709727 1630136]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.23.1.el7]
changelog:
  - [md] dm thin metadata: do not write metadata if no changes occurred (Mike Snitzer) [1713800 1710051]
  - [md] dm thin metadata: add wrappers for managing write locking of metadata (Mike Snitzer) [1713800 1710051]
  - [md] dm thin metadata: check __commit_transaction()'s return (Mike Snitzer) [1713800 1710051]
  - [md] dm space map common: zero entire ll_disk (Mike Snitzer) [1713800 1710051]
  - [scsi] smartpqi: correct lun reset issues (Don Brace) [1709469 1641112]
  - [net] openvswitch: Remove padding from packet before L3+ conntrack processing (Eelco Chaudron) [1713562 1684518]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.26.1.el7]
changelog:
  - [x86] kvm: x86: Add AMD's EX_CFG to the list of ignored MSRs (Eduardo Habkost) [1716306 1593190]
  - [x86] kvm/mmu: reset MMU context when 32-bit guest switches PAE (Vitaly Kuznetsov) [1702172 1703797]
  - [x86] kvm: x86: fix handling of role.cr4_pae and rename it to 'gpte_size' (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Do not inherit quadrant and invalid for the root shadow EPT (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: fix switch between root and guest MMUs (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: NMI-window and interrupt-window exiting should wake L2 from HLT (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: nsvm: fix switch to guest mmu (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Fix race in emulated page table writes (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx/nsvm: Fix bug which sets vcpu->arch.tsc_offset to L1 tsc_offset (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: reintroduce pte_list_remove, but including mmu_spte_clear_track_bits (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: rename pte_list_remove to __pte_list_remove (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: check if MMU reconfiguration is needed in init_kvm_nested_mmu() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: check if tdp/shadow MMU reconfiguration is needed (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/nvmx: introduce source data cache for kvm_init_shadow_ept_mmu() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: make space for source data caching in struct kvm_mmu (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: get rid of redundant kvm_mmu_setup() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: introduce guest_mmu (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu.c: add kvm_mmu parameter to kvm_mmu_free_roots() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu.c: set get_pdptr hook in kvm_init_shadow_ept_mmu() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: make vcpu->mmu a pointer to the current MMU (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: move vmcs12 EPTP consistency check to check_vmentry_prereqs() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: move host EFER consistency checks to VMFail path (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: return 0 in case kvm_mmu_memory_cache has min number of objects (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Clear reserved bits of #DB exit qualification (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: restore host state in nested_vmx_vmexit for VMFail (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: fix entry with pending interrupt if APICv is enabled (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: hide flexpriority from guest when disabled at the module level (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: check for existence of secondary exec controls before accessing (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Wake blocked vCPU in guest-mode if pending interrupt in virtual APICv (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: don't reset root in kvm_mmu_setup() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/lapic: always disable MMIO interface in x2APIC mode (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix loss of pending IRQ/NMI before entering L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Skip pae_root shadow allocation if tdp enabled (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/mmu: Combine flushing remote tlb in mmu_set_spte() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add multi-entry LRU cache for previous CR3s (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Support selectively freeing either current or previous MMU root (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add a root_hpa parameter to kvm_mmu->invlpg() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add ability to skip TLB flush when switching CR3 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Use fast CR3 switch for nested VMX (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Support resetting the MMU context without resetting roots (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add support for fast CR3 switch across different MMU modes (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Introduce KVM_REQ_LOAD_CR3 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Introduce kvm_mmu_calc_root_page_role() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Add fast CR3 switch code path (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Avoid taking MMU lock in kvm_mmu_sync_roots if no sync is needed (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Make sync_page() flush remote TLBs once only (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Restore exit qual for VM-entry failure due to MSR loading (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Nested VM-entry prereqs for event inj (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Don't expose private memslots to L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Add guest_mode to kvm_mmu_page_role (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Basic APIC virtualization controls have three settings (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Eliminate APIC access page sharing between L1 and L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Introduce lapic_mode enumeration (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Refactor mmu_free_roots() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: move MSR_IA32_TSC handling to x86.c (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: Properly update 'tsc_offset' to represent the running guest (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] Add check for APIC access address for vmentry of L2 guests (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Do not load EOI-exitmap while running L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: don't configure EPT identity map for unrestricted guest (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Update the exit_qualification access bits while walking an address (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Enforce NMI controls on vmentry of L2 guests (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Don't halt vcpu when L1 is injecting events to L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: shadow more fields that are read/written on every vmexits (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix bug of injecting L2 exception into L1 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm mmu: check pending exception before injecting APF (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: svm: prepare for new bit definition in nested_ctl (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix vmx_check_nested_events() return value in case an event was reinjected to L2 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: ioapic: Preserve read-only values in the redirection table (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: ioapic: Clear Remote IRR when entry is switched to edge-triggered (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: ioapic: Remove redundant check for Remote IRR in ioapic_set_irq (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: ioapic: Don't fire level irq when Remote IRR set (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix mmu context after VMLAUNCH/VMRESUME failure (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Validate the IA32_BNDCFGS on nested VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: extend usage of RET_MMIO_PF_* constants (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] arch/x86: remove redundant null checks before kmem_cache_destroy (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: cleanup init_rmode_identity_map() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: free_page can handle NULL (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix nested #PF intends to break L1's vmlauch/vmresume (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Handle deferred early VMLAUNCH/VMRESUME failure properly (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Handle VMLAUNCH/VMRESUME failure properly (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Remove nested_vmx_succeed after successful VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: async_pf: Fix #DF due to inject "Page not Present" and "Page Ready" exceptions simultaneously (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Validate the virtual-APIC address on nested VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix trying to cancel vmlauch/vmresume (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: use kvm_event_needs_reinjection (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Fix loss of exception which has not yet been injected (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: fix use of L1 MMIO areas in nested guests (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Avoid guest page table walk when gpa_available is set (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: simplify ept_misconfig (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Disallow illegal IA32_APIC_BASE MSR values (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Bail out immediately if there is no available mmu page (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: validate eptp pointer (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Add support for fast unprotection of nested guest page tables (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: svm: Limit PFERR_NESTED_GUEST_PAGE error_code check to L1 guest (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: fixes to nested virt interrupt injection (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: do not fill vm_exit_intr_error_code in prepare_vmcs12 (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Disallow VM-entry in MOV-SS shadow (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: async_pf: Force a nested vmexit if the injected #PF is async_pf (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: async_pf: Add L1 guest async_pf #PF vmexit handler (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: Simplify kvm_x86_ops->queue_exception parameter list (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fix nested_vmx_check_msr_bitmap_controls (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Validate the I/O bitmaps on nested VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Don't set vmcs12 to "launched" when VMLAUNCH fails (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Validate CR3 target count on nested VM-entry (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Flush TLB when the APIC-access address changes (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: VMCLEAR should not cause the vCPU to shut down (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: vmx: Use the hardware provided GPA instead of page walk (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: svm: Use the hardware provided GPA instead of page walk (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: svm: Add support for additional SVM NPF error codes (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: CPUID.01H:EDX.APIC[bit 9] should mirror IA32_APIC_BASE[11] (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: nvmx: Fetch VM_INSTRUCTION_ERROR from vmcs02 on vmx->fail (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm/x86: Replace smp_mb() with smp_store_mb/release() in the walk_shadow_page_lockless_begin/end() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: coalesce more page zapping in mmu_sync_children (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: move zap/flush to kvm_mmu_get_page (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: invert return value of mmu.sync_page and *kvm_sync_page* (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: cleanup __kvm_sync_page and its callers (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: use kvm_sync_page in kvm_sync_pages (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: move TLB flush out of __kvm_sync_page (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: introduce kvm_mmu_flush_or_zap (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: mmu: Fix ubsan warnings (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Remove unused parameter parent_pte from kvm_mmu_get_page() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Use for_each_rmap_spte macro instead of pte_list_walk() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Move parent_pte handling from kvm_mmu_get_page() to link_shadow_page() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Move initialization of parent_ptes out from kvm_mmu_alloc_page() (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Make mmu_set_spte() return emulate value (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] kvm: x86: mmu: Add helper function to clear a bit in unsync child bitmap (Vitaly Kuznetsov) [1702172 1565739]
  - [x86] mce: Handle varying MCA bank counts (David Arcari) [1715868 1693352]
  - [drm] drm/i915/gvt: Fix mmap range check (Alex Williamson) [1713566 1713567] {CVE-2019-11085}
  - [nvme] cancel request synchronously (Ming Lei) [1715320 1688518]
  - [block] blk-mq: introduce blk_mq_complete_request_sync() (Ming Lei) [1715320 1688518]
  - [char] ipmi_si: fix use-after-free of resource->name (Tony Camuso) [1714407 1714408] {CVE-2019-11811}
  - [fs] sunrpc: make visible processing error in bc_svc_process() ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] sunrpc: remove unused xpo_prep_reply_hdr callback ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] sunrpc: remove svc_tcp_bc_class ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] sunrpc: replace svc_serv->sv_bc_xprt by boolean flag ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] sunrpc: use-after-free in svc_process_common() ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [fs] svcauth_gss: Close connection when dropping an incoming message ("J. Bruce Fields") [1660818 1653675] {CVE-2018-16884}
  - [tty] Fix low_latency BUG (Aristeu Rozanski) [1715331 1710039]
  - [tty] n_tty: Fix termios_rwsem lockdep false positive (Artem Savkov) [1715328 1712744]
  - [tty] Fix lock order in tty_do_resize() (Aristeu Rozanski) [1708063 1684982]
  - [tty] n_tty: Access termios values safely (Aristeu Rozanski) [1708063 1684982]
  - [tty] Convert termios_mutex to termios_rwsem (Aristeu Rozanski) [1708063 1684982]
  - [md] batch flush requests. (Xiao Ni) [1713564 1576466]
  - [md] revert "md: fix lock contention for flush bios" (Xiao Ni) [1713564 1576466]
  - [mm] tlb: Remove tlb_remove_table() non-concurrent condition (Vitaly Kuznetsov) [1712766 1448188]
  - [kernel] sched/fair: Do not re-read ->h_load_next during hierarchical load calculation (Phil Auld) [1712764 1707397]
  - [x86] livepatch: apply alternatives and paravirt patches after relocations (Artem Savkov) [1712761 1706733]
  - [block] blk-mq: fix IO accounting in case of none io scheduler (Ming Lei) [1711013 1669684]
  - [net] netfilter: ipv6: Don't preserve original oif for loopback address (Florian Westphal) [1709186 1701496]
  - [net] netfilter: ipv6: Preserve link scope traffic original oif (Florian Westphal) [1709186 1701496]
  - [x86] mce/amd, edac/mce_amd: Add new error descriptions for some SMCA bank types (Gary Hook) [1703376 1685269]
  - [edac] x86/mce/amd, edac/mce_amd: Add new McaTypes for CS, PSP, and SMU units (Gary Hook) [1703376 1685269]
  - [edac] x86/mce/amd, edac/mce_amd: Add new MP5, NBIO, and PCIE SMCA bank types (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Fix the thresholding machinery initialization order (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Read MCx_MISC block addresses on any CPU (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Cache SMCA MISC block addresses (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Carve out SMCA get_block_address() code (Gary Hook) [1703376 1685269]
  - [x86] mce/amd: Get address from already initialized block (Gary Hook) [1703376 1685269]
  - [edac] x86/mce/amd, edac/mce_amd: Enumerate Reserved SMCA bank type (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Pass the bank number to smca_get_bank_type() (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Define a function to get SMCA bank type (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Allow any CPU to initialize the smca_banks array (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Carve out SMCA bank configuration (David Arcari) [1712763 1676301]
  - [x86] mce: Convert threshold_bank.cpus from atomic_t to refcount_t (David Arcari) [1712763 1676301]
  - [x86] ras/amd: Make sysfs names of banks more user-friendly (David Arcari) [1712763 1676301]
  - [x86] mce/amd: Make the init code more robust (David Arcari) [1712763 1676301]
  - [x86] ras: Hide SMCA bank names (David Arcari) [1712763 1676301]
  - [powerpc] security: Fix spectre_v2 reporting (Gustavo Duarte) [1708546 1694459]
  - [powerpc] fsl: Update Spectre v2 reporting (Gustavo Duarte) [1708546 1694459]
  - [powerpc] fsl: Add nospectre_v2 command line argument (Gustavo Duarte) [1708546 1694459]
  - [powerpc] fsl: Fix spectre_v2 mitigations reporting (Gustavo Duarte) [1708546 1694459]
  - [powerpc] powernv: Query firmware for count cache flush settings (Gustavo Duarte) [1708546 1694459]
  - [powerpc] pseries: Query hypervisor for count cache flush settings (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Add support for software count cache flush (Gustavo Duarte) [1708546 1694459]
  - [powerpc] Introduce asm-prototypes.h (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Add new security feature flags for count cache flush (Gustavo Duarte) [1708546 1694459]
  - [powerpc] asm: Add a patch_site macro & helpers for patching instructions (Gustavo Duarte) [1708546 1694459]
  - [powerpc] Add helper to check if offset is within relative branch range (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Make meltdown reporting Book3S 64 specific (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Call setup_barrier_nospec() from setup_arch() (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Add CONFIG_PPC_BARRIER_NOSPEC (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Make stf barrier PPC_BOOK3S_64 specific (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Disable the speculation barrier from the command line (Gustavo Duarte) [1708546 1694459]
  - [powerpc] powerpc64s: Show ori31 availability in spectre_v1 sysfs file not v2 (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Enhance the information in cpu_show_spectre_v1() (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64: Use barrier_nospec in syscall entry (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Enable barrier_nospec based on firmware settings (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Patch barrier_nospec in modules (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Add support for ori barrier_nospec patching (Gustavo Duarte) [1708546 1694459]
  - [powerpc] 64s: Add barrier_nospec (Gustavo Duarte) [1708546 1694459]
  - [powerpc] reuse asm-generic/barrier.h (Gustavo Duarte) [1708546 1694459]
  - [x86] locking/arch: Rename set_mb() to smp_store_mb() (Waiman Long) [1708546 1522387]
  - [kernel] locking/arch: Add WRITE_ONCE() to set_mb() (Waiman Long) [1708546 1522387]
  - [kernel] rcu: Don't wake rcuc/X kthreads on NOCB CPUs (Daniel Bristot de Oliveira) [1711325 1626129]
  - [x86] Update stepping values for coffee lake desktop (David Arcari) [1710803 1704812]
  - [security] selinux: overhaul sidtab to fix bug and improve performance (Ondrej Mosnacek) [1710468 1335986]
  - [security] selinux: use separate table for initial SID lookup (Ondrej Mosnacek) [1710468 1335986]
  - [security] selinux: refactor sidtab conversion (Ondrej Mosnacek) [1710468 1335986]
  - [nvme] nvme-pci: fix memory leak on probe failure (David Milburn) [1710799 1689008]
  - [nvme] nvme-pci: limit max IO size and segments to avoid high order allocations (David Milburn) [1710799 1689008]
  - [lib] locking/rwsem: Prevent decrement of reader count before increment (Waiman Long) [1709704 1708667]
  - [fs] nfsd: COPY and CLONE operations require the saved filehandle to be set (Scott Mayhew) [1672147 1645353] {CVE-2018-16871}
  - [iommu] amd: Set exclusion range correctly (Jerry Snitselaar) [1698338 1702763]
  - [iommu] amd: Reserve exclusion range in iova-domain (Jerry Snitselaar) [1698338 1691196]
  - [nvdimm] libnvdimm, pmem: Fix badblocks population for 'raw' namespaces (Frank Ramsay) [1708548 1672302]
  - [netdrv] mac80211_hwsim: Fix possible Spectre-v1 for hwsim_world_regdom_custom (Stanislaw Gruszka) [1706698 1639674]
  - [net] nl80211: Fix possible Spectre-v1 for NL80211_TXRATE_HT (Stanislaw Gruszka) [1706698 1639674]
  - [net] nl80211: Fix possible Spectre-v1 for CQM RSSI thresholds (Stanislaw Gruszka) [1706698 1639674]
  - [netdrv] mac80211_hwsim: fix possible memory leak in hwsim_new_radio_nl() (Stanislaw Gruszka) [1706698 1626463]
  - [md] dm cache metadata: Fix loading discard bitset (Mike Snitzer) [1703586 1701619]
  - [infiniband] hfi1: Close race condition on user context disable and close (Alex Estrin) [1705369 1680069]
  - [mm] thp: relocate flush_cache_range() in migrate_misplaced_transhuge_page() (Andrea Arcangeli) [1698108 1636066]
  - [mm] thp: fix mmu_notifier in migrate_misplaced_transhuge_page() (Andrea Arcangeli) [1698108 1636066]
  - [mm] thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition (Andrea Arcangeli) [1698108 1636066]
  - [mm] revert "mm: numa: defer TLB flush for THP migration as long as possible" (Andrea Arcangeli) [1698108 1636066]
  - [mm] thp/migration: switch from flush_tlb_range to flush_pmd_tlb_range (Andrea Arcangeli) [1698108 1636066]
  - [mm] migrate.c: stabilise page count when migrating transparent hugepages (Andrea Arcangeli) [1698108 1636066]
  - [mm] numa: add migrated transhuge pages to LRU the same way as base pages (Andrea Arcangeli) [1698108 1636066]
  - [mm] thp: fix MADV_DONTNEED vs. MADV_FREE race (Andrea Arcangeli) [1698108 1636066]
  - [mm] memcg, slab: simplify synchronization scheme (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: do not schedule cache destruction when last page goes away (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: separate memcg vs root cache creation paths (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: cleanup memcg cache creation (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: remove KMEM_ACCOUNTED_ACTIVATED flag (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: RCU protect memcg_params for root caches (Aaron Tomlin) [1691428 1674401]
  - [mm] slab: do not panic if we fail to create memcg cache (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: get rid of kmem_cache_dup() (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: fix possible NULL deref while traversing memcg_slab_caches list (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, slab: fix barrier usage when accessing memcg_caches (Aaron Tomlin) [1691428 1674401]
  - [mm] slab: clean up kmem_cache_create_memcg() error handling (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, kmem: use cache_from_memcg_idx instead of hard code (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg, kmem: rename cache_from_memcg to cache_from_memcg_idx (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: make memcg_update_cache_sizes() static (Aaron Tomlin) [1691428 1674401]
  - [mm] memcg: fix kmem_account_flags check in memcg_can_account_kmem() (Aaron Tomlin) [1691428 1674401]
  - [security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.27.1.el7]
changelog:
  - [x86] Update stepping values for Whiskey Lake U/Y (David Arcari) [1718690 1704810]
  - [x86] perf/amd: Resolve NMI latency issues for active PMCs (David Arcari) [1721611 1696764]
  - [x86] perf/amd: Resolve race condition when disabling PMC (David Arcari) [1721611 1696764]
  - [edac] amd64: Set maximum channel layer size depending on family (Gary Hook) [1720266 1705210]
  - [edac] amd64: Adjust printed chip select sizes when interleaved (Gary Hook) [1720266 1705210]
  - [edac] amd64: Recognize x16 symbol size (Gary Hook) [1720266 1705210]
  - [edac] amd64: Support more than two Unified Memory Controllers (Gary Hook) [1720266 1705210]
  - [edac] amd64: Use a macro for iterating over Unified Memory Controllers (Gary Hook) [1720266 1705210]
  - [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1720266 1705210]
  - [edac] amd64: Add Family 17h, models 10h-2fh support (Gary Hook) [1720266 1670608]
  - [x86] mark AMD Rome processors supported (David Arcari) [1721604 1543509]
  - [x86] Mark AMD EPYC guests as supported (David Arcari) [1721604 1664507]
  - [x86] mark amd rome as unsupported (David Arcari) [1721604 1638504]
  - [net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
  - [net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
  - [net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
  - [net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
  - [net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}


author: Jan Stancek <jstancek@redhat.com> [3.10.0-957.27.2.el7]
changelog:
  - [x86] hyper-v: fix hyperv.h UAPI header (Vitaly Kuznetsov) [1727109 1692492]
  - [iommu] hyper-v: Add Hyper-V stub IOMMU driver (Vitaly Kuznetsov) [1727109 1661654]
  - [x86] hyper-v: Set x2apic destination mode to physical when x2apic is available (Vitaly Kuznetsov) [1727109 1661654]
  - [x86] hyper-v: Consolidate code for converting cpumask to vpset (Vitaly Kuznetsov) [1727109 1661654]
  - [x86] hyper-v: Fix the circular dependency in IPI enlightenment (Vitaly Kuznetsov) [1727109 1661654]
  - [pci] hv: Refactor hv_irq_unmask() to use cpumask_to_vpset() (Vitaly Kuznetsov) [1727109 1661654]
  - [pci] hv: Replace hv_vp_set with hv_vpset (Vitaly Kuznetsov) [1727109 1661654]
  - [pci] hv: Add __aligned(8) to struct retarget_msi_interrupt (Vitaly Kuznetsov) [1727109 1661654]
  - [hwmon] k10temp: Add support for AMD family 17h, model 30h CPUs (Gary Hook) [1728000 1643292]
  - [x86] amd_nb: Add PCI device IDs for family 17h, model 30h (Gary Hook) [1728000 1643292]
  - [x86] amd_nb: Add support for newer PCI topologies (Gary Hook) [1728000 1643292]
  - [hwmon] k10temp, x86/amd_nb: Consolidate shared device IDs (Gary Hook) [1728000 1643292]
  - [hwmon] (k10temp) Use API function to access System Management Network (Gary Hook) [1728000 1643292]
  - [x86] amd_nb: Add support for Raven Ridge CPUs (Gary Hook) [1728000 1643292]
  - [hwmon] (k10temp) Add support for AMD Ryzen w/ Vega graphics (Gary Hook) [1728000 1643292]
  - [hwmon] (k10temp) Add temperature offset for Ryzen 2700X (Gary Hook) [1728000 1643292]
  - [x86] cpu/amd: Apply the Erratum 688 fix when the BIOS doesn't (Gary Hook) [1728000 1643292]


author: Karanbir Singh <kbsingh@centos.org> 0.7.5-2.el7.centos.1
changelog:
  - Add OpenNebula patch to work with requiretty in sudoers (Jfontan #7543)
  - Add cloudstack url workaround patch (Lucian #7544)


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 2:2.73-2
changelog:
  - moved changelog entries:
  - Define spc_t as a container_domain, so that container_runtime will transition
  to spc_t even when setup with nosuid.
  - Allow container_runtimes to setattr on callers fifo_files
  - Fix restorecon to not error on missing directory


author: Dan Walsh <dwalsh@fedoraproject.org> - 2.76-1
changelog:
  - Allow containers to use fuse file systems by default
  - Allow containers to sendto dgram socket of container runtimes
  - Needed to run container runtimes in notify socket unit files.


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-487
changelog:
  - add upstream tests
  - dracut.sh: fail hard, if we find modules and modules.dep is missing
  Resolves: rhbz#1298656
  - add dracut.pc pkg-config file
  Resolves: rhbz#1397853
  - systemd/dracut-cmdline.sh: unset "UNSET" $root
  Releated: rhbz#1365667
  - dracut.conf.5.asc: add Warning about leading and trailing spaces in lists
  - fips/module-setup.sh: make tcrypt non-optional


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-495
changelog:
  - ifup: don't ifup team master indefinitely
  Resolves: rhbz#1416958
  - write-ifcfg: do't write MTU twice for regular eth devices
  Resolves: rhbz#1366163
  - network/ifup: write override file before dhcp_do
  Resolves: rhbz#1415004


author: Lukáš Nykrýn <lnykryn@redhat.com> - 033-499
changelog:
  - module-setup.sh: Add ARM specific driver to initramfs image
  Resolves: #1459277
  - Revert "systemd/dracut-initqueue.sh: don't go into emergency"
  Resolves: #1396865
  - udev-rules: pull in 40-redhat-cpu-hotplug.rules
  Resolves: #1460707


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.72
changelog:
  -     The following issues are resolved in this version:
      
        \- iLO gets stalled when IPv4 static address is not assigned in an IPv6 only
      environment using Embedded Remote Support.  
        \- Embedded Remote Support crashes if more than 17 IP addresses are assigned
      to host network interface.  
        \- Embedded Remote Support is not reporting all host IP addresses in Service
      Events.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.73
changelog:
  -      Added fix for Embedded Remote Support in an IPv6-only environment.
        * Added fix for Embedded Remote Support data collection for systems with multiple Smart Array Controllers.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.74
changelog:
  -      iLO 4  does not enforce the requirement for strong host keys when the Enforce AES/3DES Encryption and FIPS mode settings are enabled


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.76
changelog:
  -      On a server that is registered for Remote Support, if you download the Active Health System Log when Active Health System reporting information is being sent to Hewlett Packard Enterprise, the downloaded file might contain only baseline information.
        * The Smart Storage Battery might be listed on the System Information > Network page in the iLO web interface.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.77
changelog:
  -      Potential vulnerabilities in network stack. Click [here](https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04070en_us) to know more about the Security Vulnerabilities.
        * Active directory test may fail during LDAP authentication.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.78
changelog:
  -     \- IML reports fan modules failed for D3000 only after server reboot  
          \- eRS service event added for Critical events like System Power Fault Detection  
          \- Security fixes  
                \- Added a Content Security Policy( CSP) to harden the web interfaces  
                \- Enhanced Input validation for user controlled data
      
      \- Fixes for multiple security vulnerabilities


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2012.08.14
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Resolved a processor issue where certain instructions and conditions could
      result in an application-level error, blue screen, kernel panic, or other
      unpredictable system behavior. This issue affects platforms utilizing Intel
      Xeon E3-series processors. This issue is not unique to HP ProLiant servers and
      could impact any system using affected processors. This revision of the System
      ROM contains an updated version of Intel's microcode for affected processors
      that addresses this issue.
      
      Resolved an issue where the ROM Based Setup Utility Command Line Interface
      (CLI) Mode may not function properly.  Previous versions of the system ROM may
      have experienced an issue where certain commands in CLI mode would not
      function properly.
      
      Resolved a rare issue where USB Support in a pre-boot environment, such as in
      DOS or the ROM Based Setup Utility (RBSU), may not function properly. This
      issue could have resulted in the system not booting properly from USB media or
      the USB Keyboard may becoming unresponsive.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2012.12.10
changelog:
  -     Optimized the memory settings to improve the reliability of the memory system.
      
      Added a ROM-Based Setup Utility (RBSU) option for HP Option ROM Prompting.
      This option is enabled by default.  Disabling this option prevents HP Smart
      Array controllers and iLO from prompting to enter their setup tools during
      system boot.  This allows for faster boot times.  This option requires updated
      revisions of Smart Array Controller firmware and iLO Firmware to function.  If
      this option is disabled, the HP Smart Array and iLO will continue to prompt to
      enter their setup tools if an updated revision of these firmware deliverables
      are not installed.
      
      Added the latest product names of optional expansion cards and updated
      language translations (for non-English modes) in the ROM-Based Setup Utility
      (RBSU).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2012.12.10
changelog:
  -     *Important Notes:**  
        
      None  
        
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Resolved a processor issue where certain instructions and conditions could
      result in an application-level error, blue screen, kernel panic, or other
      unpredictable system behavior. This issue affects platforms utilizing Intel
      Xeon E3-series processors. This issue is not unique to HP ProLiant servers and
      could impact any system using affected processors. This revision of the System
      ROM contains an updated version of Intel's microcode for affected processors
      that addresses this issue.
      
      Resolved a rare issue where the system may experience a temporary loss of
      video, such as a blank screen on the local monitor and iLO Remote Console,  if
      a key is pressed during POST during Option ROM Execution.
      
      Resolved an issue where the platform may experience a virtualization fault
      (which may result in an NMI or Machine Check Exception) when IOMMU is enabled
      under a Hypervisor based Operating System. In some instances, Linux kernel
      messaging (DMESG) would reflect an inability to enable IOMMO on the platform.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2013.08.24
changelog:
  -     Added the latest product names of optional expansion cards and updated
      language translations (for non-English modes) in the ROM-Based Setup Utility
      (RBSU).
      
      Added support to allow industry standard utilities to display the operating
      voltage of installed DIMMs as well as the minimum and maximum voltage
      supported by installed DIMMs. This System ROM revision supports newly defined
      industry standard fields in the industry standard SMBIOS tables. Utilities to
      display this information may not yet be available.
      
      Added support to allow industry standard utilities to display the HP DIMM Part
      Number for HP SmartMemory DIMMs. This information will also be displayed in
      the HP iLO GUI interface when using an updated revision of iLO Firmware.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2013.08.24
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed a processor issue under which a rare and complex sequence of
      internal processor microarchitecture events that occur in specific operating
      environments could cause a server system to experience unexpected page faults,
      general protection faults, or machine check exceptions or other unpredictable
      system behavior. While all processors supported by this server have this
      issue, to be affected by this issue the server must be operating in a
      virtualized environment, have Intel Hyperthreading enabled, have a hypervisor
      that enables Intel VT FlexPriority and Extended Page Tables, and have a guest
      OS utilizing 32-bit PAE Paging Mode. This issue is not unique to HP ProLiant
      servers and could impact any system utilizing affected processors operating
      with the conditions listed above. This revision of the System ROM contains an
      updated version of Intel's microcode that addresses this issue. Due to the
      potential severity of the issue addressed in this revision of the System ROM,
      this System ROM upgrade is considered a critical fix.
      
      Addressed an issue where the system experienced unexpected system behavior or
      report ACPI issues through the OS boot logs (such as Linux DMESG) when IOMMU
      was enabled in a virtualized operating system environment.
      
      Addressed an issue where Linux Operating Systems reported the following
      message: ERST: Failed to get Error Log Address Range, in the Linux DMESG log.
      
      Addressed an issue where the server's Legacy USB support would not properly
      report the drive capacity of a USB Drive Key that was larger than 8GB
      resulting in an inability to boot USB Drive Keys larger than 8 GB.
      
      Addressed an issue where the system may not be able to properly execute the HP
      SmartStart Scripting Toolkit (SSSTK) under Linux based Operating Systems. In
      some cases, executing the HP SSSTK would result in a segfault error message
      being reported by the Linux kernel.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2013.11.09
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Added additional options to the ROM Based Setup Utility (RBSU) Power-On Delay
      Option for delay times of 15, 30, 40 and 60 seconds (in addition to the
      previous options of No Delay and Random Delay). For these new selections to
      function, the system must be using Integrated Lights-Out (iLO) Firmware
      version 1.20 or later. If the system is configured to one of the new options
      without having iLO Firmware version 1.20 or later, the Power-On Delay Option
      will function as if the No Delay option were chosen.
      
      Enhanced the System ROM's detection of valid boot devices such as USB Drive
      Keys or Hard Drives. Previously, the System ROM may have attempted to boot
      certain bootable media with invalid boot records resulting in a Non-System
      Disk error. In some cases, the System ROM will now be able to detect the
      invalid boot record and skip attempting to boot the device. This allows the
      System ROM to attempt to boot the next device in the boot order.
      
      Added the latest product names of optional expansion cards and updated
      language translations (for non-English modes) in the ROM-Based Setup Utility
      (RBSU).
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2013.11.09-4.1
changelog:
  -     *Important Notes:**  
        
      Ver. 2013.11.09 (D) contains a change to the Firmware RPM install command name
      from "cpqsetup" to "hpsetup" and is functionally equivalent to ver.
      2013.11.09.  It is not necessary to upgrade with Revision D if a previous
      component Revision was used to upgrade the system ROM to version 2013.11.09.
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Added additional options to the ROM Based Setup Utility (RBSU) Power-On Delay
      Option for delay times of 15, 30, 40 and 60 seconds (in addition to the
      previous options of No Delay and Random Delay). For these new selections to
      function, the system must be using Integrated Lights-Out (iLO) Firmware
      version 1.20 or later. If the system is configured to one of the new options
      without having iLO Firmware version 1.20 or later, the Power-On Delay Option
      will function as if the No Delay option were chosen.
      
      Enhanced the System ROM's detection of valid boot devices such as USB Drive
      Keys or Hard Drives. Previously, the System ROM may have attempted to boot
      certain bootable media with invalid boot records resulting in a Non-System
      Disk error. In some cases, the System ROM will now be able to detect the
      invalid boot record and skip attempting to boot the device. This allows the
      System ROM to attempt to boot the next device in the boot order.
      
      Added the latest product names of optional expansion cards and updated
      language translations (for non-English modes) in the ROM-Based Setup Utility
      (RBSU).
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2018.01.22
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which, in combination with operating system updates, provides
      mitigation for Variant 2 of the Side Channel Analysis vulnerability, also
      known as Spectre. The revision of the microcode included in this System ROM
      does NOT have issues with more frequent reboots and unpredictable system
      behavior which impacted the previous Intel microcode which was part of the
      Spectre Variant 2 mitigation. Additional information is available from Intel's
      Security Exploit Newsroom, <https://newsroom.intel.com/press-kits/security-
      exploits-intel-products/>.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Updated the Intel processor microcode to the latest version.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2018.05.21
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which, in combination with operating system updates, provides
      mitigation for the Speculative Store Bypass (also known as Variant 4) security
      vulnerability. A Medium level CVE has been assigned to this issue with ID
      CVE-2018-3639. Systems with microprocessors utilizing speculative execution
      and speculative execution of memory reads before the addresses of all prior
      memory writes are known may allow unauthorized disclosure of information to an
      attacker with local user access via a side-channel analysis. This security
      vulnerability is not unique to HPE servers and impacts any systems utilizing
      impacted processors.
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigation for the Rogue Register Read (also known as
      Variant 3a) security vulnerability. A Medium level CVE has been assigned to
      this issue with ID CVE-2018-3640. Systems with microprocessors utilizing
      speculative execution and that perform speculative reads of system registers
      may allow unauthorized disclosure of system parameters to an attacker with
      local user access via a side-channel analysis. This security vulnerability is
      not unique to HPE servers and impacts any systems utilizing impacted
      processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which, in combination with operating system updates, provides
      mitigation for the Speculative Store Bypass (also known as Variant 4) security
      vulnerability. A Medium level CVE has been assigned to this issue with ID
      CVE-2018-3639. Systems with microprocessors utilizing speculative execution
      and speculative execution of memory reads before the addresses of all prior
      memory writes are known may allow unauthorized disclosure of information to an
      attacker with local user access via a side-channel analysis. This security
      vulnerability is not unique to HPE servers and impacts any systems utilizing
      impacted processors.
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigation for the Rogue Register Read (also known as
      Variant 3a) security vulnerability. A Medium level CVE has been assigned to
      this issue with ID CVE-2018-3640. Systems with microprocessors utilizing
      speculative execution and that perform speculative reads of system registers
      may allow unauthorized disclosure of system parameters to an attacker with
      local user access via a side-channel analysis. This security vulnerability is
      not unique to HPE servers and impacts any systems utilizing impacted
      processors.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2019.04.04
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which, in combination with operating system and/or hypervisor
      updates, provides mitigation for a new group of side channel vulnerabilities
      known as Microarchitectural Data Sampling (MDS). This includes support for
      mitigating the following vulnerabilities: CVE-2018-12126 - Microarchitectural
      Store Buffer Data Sampling, CVE-2018-12130 - Microarchitectural Fill Buffer
      Data Sampling, CVE-2018-12127 - Microarchitectural Load Port Data Sampling,
      and CVE-2019-11091 - Microarchitectural Data Sampling Uncacheable Memory.
      These issues are not unique to HPE servers.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which, in combination with operating system and/or hypervisor
      updates, provides mitigation for a new group of side channel vulnerabilities
      known as Microarchitectural Data Sampling (MDS). This includes support for
      mitigating the following vulnerabilities: CVE-2018-12126 - Microarchitectural
      Store Buffer Data Sampling, CVE-2018-12130 - Microarchitectural Fill Buffer
      Data Sampling, CVE-2018-12127 - Microarchitectural Load Port Data Sampling,
      and CVE-2019-11091 - Microarchitectural Data Sampling Uncacheable Memory.
      These issues are not unique to HPE servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2013.11.14
changelog:
  -     Added support for Intel Trusted Execution Technology (TXT) for Intel Xeon
      E5-2600 v2 Series processors.
      
      Added additional options to the ROM Based Setup Utility (RBSU) Power-On Delay
      Option for delay times of 15, 30, 40 and 60 seconds (in addition to the
      previous options of No Delay and Random Delay). For these new selections to
      function, the system must be using Integrated Lights-Out (iLO) Firmware
      version 1.20 or later. If the system is configured to one of the new options
      without having iLO Firmware version 1.20 or later, the Power-On Delay Option
      will function as if the No Delay option were chosen.
      
      Enhanced the System ROM's detection of valid boot devices such as USB Drive
      Keys or Hard Drives. Previously, the System ROM may have attempted to boot
      certain bootable media with invalid boot records resulting in a Non-System
      Disk error. In some cases, the System ROM will now be able to detect the
      invalid boot record and skip attempting to boot the device. This allows the
      System ROM to attempt to boot the next device in the boot order.
      
      Added the latest product names of optional expansion cards and updated
      language translations (for non-English modes) in the ROM-Based Setup Utility
      (RBSU).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2013.11.14
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the server may not be able to enter processor idle
      power states (C-states) which can increase idle power when configured with 2
      Intel Xeon E5-2600 v2Series Processors. This issue may also result in a
      reduction of the frequency of the processor entering Turbo Mode which can
      reduce performance under certain workloads.
      
      Addressed an issue where Online Spare memory Mode may not function properly
      when 10 or 12 core Intel Xeon E5-2600 Series v2 processors were installed in
      the server platform. This issue was typically exhibited as an Online Spare
      switchover not completing and not being logged into the Integrated Management
      Log (IML).
      
      Addressed an issue where the system may experience a no boot condition on the
      reset due to a fatal error. This issue is typically seen as the server hanging
      at 20% progress in the Early Video Initialization.
      
      Addressed an issue where certain memory configurations with non-HP SmartMemory
      may have been running at frequencies lower than supported by the processor.
      This issue only effects systems configured with Intel Xeon E5-2600 v2 Series
      Processors and non-HP Smart Memory.
      
      Addressed an issue where servers configured with Intel Xeon E5-2600 v2
      processors and 32 GB LRDIMMs may experience an increased rate of corrected
      memory errors or uncorrected memory errors. This issue impacts servers
      configured with 2 DIMMs per channel or 3 DIMMs per channel. Any server
      configured with Intel Xeon E5-2600 v2 processors using LRDIMMs should be
      updated to this revision of the System ROM or later. If experiencing memory
      errors with the indicated configuration, HP recommends updating to this
      revision of the System ROM or later before contacting HP service.
      
      Addressed an issue where Memory Address or Command Parity errors are not
      logged to the Integrated Management Log (IML) if they occur. With previous
      revisions of the System ROM, these types of errors would cause the server to
      reset without any notification of the error. A "283-Memory Address/Command
      Parity Error Detected" error will now be displayed during system boot and
      logged to the IML.
      
      Addressed an issue where a false inlet ambient temperature sensor reading
      would cause a "System Overheating" message in the Integrated Management Log
      (IML).
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2013.12.20
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where Memory Address or Command Parity errors may occur on
      servers configured with Intel Xeon E5-2600 series v2 processors and memory
      configurations where the memory speed is running at 1600 MHz or 1866 MHz.
      These errors may have resulted in the server resetting without notification of
      the error or the system resetting and displaying a "283-Memory Address/Command
      Parity Error Detected Error" and logging the event to the Integrated
      Management Log (IML). HP strongly recommends that all servers utilizing Intel
      E5-2600 v2 processors with impacted memory speeds update to this revision of
      the System ROM or later. This issue does NOT affect servers configured with
      the Intel Xeon E5-2600 series processor.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2014.02.10
changelog:
  -     Added support for the latest names for PCIe expansion devices to the ROM-Based
      Setup Utility (RBSU).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2014.02.10
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None.
      
      **Problems Fixed:**
      
      Addressed a processor issue which can result in a Blue Screen of Death (BSOD)
      in a Windows virtual machine or Linux Kernel Panic in a Linux virtual machine
      when running on Microsoft Hyper-V or VMware ESX 5.x on Intel Xeon E5-2600
      series v2 processors. This issue is not unique to HP ProLiant servers and
      could impact any system using affected processors operating with the
      conditions listed. This revision of the System ROM contains an updated version
      of Intel's microcode that addresses this issue. This issue does NOT affect
      servers configured with the Intel Xeon E5-2600 series processors.
      
      Addressed an issue where servers using the 11/14/2013 or 12/20/2013 revisions
      of the System ROM might not be able to boot certain operating system
      installations that install a Master Boot Record that is not marked as Active.
      When this issue occurs, the server might experience a Non-System Disk Error or
      not boot the intended media. This issue does NOT impact any System ROM
      revisions other than the 11/14/2013 and 12/20/2013 revisions.
      
      Addressed an extremely rare issue that can result in a system configured with
      Intel Xeon E5-2600 v2 series processors becoming unresponsive early in the
      POST boot process after an uncorrectable memory error occurs. When this issue
      occurs, the server will indicate an early boot progress of 20% and a "Memory
      and QPI Link Initialization Start" message will be displayed on the screen
      output. This issue does not impact servers configured with Intel Xeon E5-2600
      series processors.
      
      Addressed an issue where the System ROM does not properly retry booting
      certain Network Adapters under some conditions including when the user presses
      F12 to attempt a PXE boot. Instead, the System ROM will only attempt to boot
      the Network Adapter one time and then will continue trying to boot devices in
      the order specified by the Standard Boot Order (IPL).
      
      Addressed an issue where systems configured with Intel Xeon E5-2600 v2 series
      processors and an HP 331FLR FlexLOM or HP NC332T Network Controller might see
      intermittent issues with the NIC not being detected by the platform. When the
      issue occurs, the NIC will not PXE boot or be identified or used by the
      operating system.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2014.08.02
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed a rare issue where systems configured with Intel Xeon E5 2600 v2
      processors and Registered DIMMs (RDIMMs) in a 2 DIMM per Channel or 3 DIMM per
      Channel configuration may experience a 207 - Memory Initialization error
      message where certain DIMMs may not be initialized properly. This issue is
      seen intermittently after a system reboot.
      
      Addressed an issue where the server may become unresponsive during POST when
      an optional Video card is installed.
      
      Addressed an issue where certain option cards that request very large amounts
      of non-prefetchable memory will not function properly. This issue only impacts
      a very small number of non-HP option cards.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2015.07.01
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where a device interrupt may not be handled properly and
      result in a lost interrupt or an uncorrectable machine check exception. This
      issue is NOT unique to HP servers. HP recommends that users experiencing these
      issues update to this revision of the System ROM before replacing any hardware
      components.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2013.11.12
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the system may experience a no boot condition on the
      reset due to a fatal error. This issue is typically seen as the server hanging
      at 20% progress in the Early Video Initialization.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2013.12.20
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where Memory Address or Command Parity errors may occur on
      servers configured with Intel Xeon E5-2400 series v2 processors and memory
      configurations where the memory speed is running at 1600 MHz or 1866 MHz.
      These errors may have resulted in the server resetting without notification of
      the error or the system resetting and displaying a "283-Memory Address/Command
      Parity Error Detected Error" and logging the event to the Integrated
      Management Log (IML). HP strongly recommends that all servers utilizing Intel
      E5-2400 v2 processors with impacted memory speeds update to this revision of
      the System ROM or later. This issue does NOT affect servers configured with
      the Intel Xeon E5-2400 series processor.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2014.02.10
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed a processor issue which can result in a Blue Screen of Death (BSOD)
      in a Windows virtual machine or Linux Kernel Panic in a Linux virtual machine
      when running on Microsoft Hyper-V or VMware ESX 5.x on Intel Xeon E5-2400
      series v2 processors. This issue is not unique to HP ProLiant servers and
      could impact any system using affected processors operating with the
      conditions listed. This revision of the System ROM contains an updated version
      of Intel's microcode that addresses this issue. This issue does NOT affect
      servers configured with the Intel Xeon E5-2400 series processors.
      
      Addressed an issue where servers using the 11/12/2013 or 12/20/2013 revisions
      of the System ROM might not be able to boot certain operating system
      installations that install a Master Boot Record that is not marked as Active.
      When this issue occurs, the server might experience a Non-System Disk Error or
      not boot the intended media. This issue does NOT impact any System ROM
      revisions other than the 11/12/2013 and 12/20/2013 revisions.
      
      Addressed an extremely rare issue that can result in a system configured with
      Intel Xeon E5-2400 v2 series processors becoming unresponsive early in the
      POST boot process after an uncorrectable memory error occurs. When this issue
      occurs, the server will indicate an early boot progress of 20% and a "Memory
      and QPI Link Initialization Start" message will be displayed on the screen
      output. This issue does not impact servers configured with Intel Xeon E5-2400
      series processors.
      
      Addressed an issue where the System ROM does not properly retry booting
      certain Network Adapters under some conditions including when the user presses
      F12 to attempt a PXE boot. Instead, the System ROM will only attempt to boot
      the Network Adapter one time and then will continue trying to boot devices in
      the order specified by the Standard Boot Order (IPL).
      
      Addressed an issue where systems configured with Intel Xeon E5-2400 v2 series
      processors and an HP 331FLR FlexLOM or HP NC332T Network Controller might see
      intermittent issues with the NIC not being detected by the platform. When the
      issue occurs, the NIC will not PXE boot or be identified or used by the
      operating system.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2014.08.02
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the server may become unresponsive during POST when
      an optional Video card is installed.
      
      Addressed an issue where certain option cards that request very large amounts
      of non-prefetchable memory will not function properly. This issue only impacts
      a very small number of non-HP option cards.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2014.08.02-4.1
changelog:
  -     *Important Notes:**  
        
      Ver. 2014.08.02 (D) contains a change to the Firmware RPM install command name
      from "cpqsetup" to "hpsetup" and is functionally equivalent to ver.
      2014.08.02.  It is not necessary to upgrade with Revision D if a previous
      component Revision was used to upgrade the system ROM to version 2014.08.02.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the server may become unresponsive during POST when
      an optional Video card is installed.
      
      Addressed an issue where certain option cards that request very large amounts
      of non-prefetchable memory will not function properly. This issue only impacts
      a very small number of non-HP option cards.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2014.11.02
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an extremely rare issue where the server may experience an
      unexpected shutdown, usually seen as a power fault in the iLO Integrated
      Management Log (IML), when configured with certain Intel Xeon E5-2600 series
      processors.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2014.12.01
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Added the latest product names of optional expansion cards and updated
      language translations (for non-English modes) in the ROM-Based Setup Utility
      (RBSU).
      
      Added support for the AMD FirePro S9150 accelerator.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2015.05.01
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Updated the thermal support for systems configured with AMD GPGPUs.
      
      **Known Issues:**
      
      None


author: Carlos O'Donell <carlos@redhat.com> - 2.17-188
changelog:
  - Improve exp() and pow() performance in libm (#1409611)
  - Add optimized strcmp and strncmp for IBM POWER9 hardware (#1320947)


author: Carlos O'Donell <carlos@redhat.com> - 2.17-190
changelog:
  - Add transparent lock elision for default POSIX mutexes on
    Intel hardware with support for Intel TSX (#841653).
  - Update dynamic loader trampoline for Intel Skylake server (#1421155).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-191
changelog:
  - Add transparent lock elision for default POSIX mutexes on
    IBM POWER hardware with support for IBM POWER HTM (#731835).


author: Carlos O'Donell <carlos@redhat.com> - 2.17-192
changelog:
  - Exclude lock elision support for older Intel hardware with
    Intel TSX that has hardware errata (#841653).


author: Dominik Mierzejewski <rpm@greysector.net> - 5.1.25-4
changelog:
  - don't unpack the main source twice
  - clean up obsolete specfile parts
  - clean up some rpmlint warnings
  - tighten file list
  - install icons from debian patch
  - update icon cache scriptlets


author: Terje Rosten <terje.rosten@ntnu.no> - 5.1.25-12
changelog:
  - Fix font issue, thanks to Andrew Schultz, Michael Weinert, sammy,
    David Kaspar and others (rhbz#1502175)
  - Remove icon cache update
  - Some clean up


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.50
changelog:
  -     Note for ESXi users: If you are booted from the Embedded SD Card, it is
      strongly  
      Recommended that you reboot the server immediately after updating to iLO 4
      v2.50.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.50
changelog:
  -     This version adds support for the following features and enhancements:
      
        * Implemented Garbage collection on the RESTful API allowing for automatic recovery in the case of bad or missing data.
        * Updates to the enclosure connection status (CPQSTSYS cpqSsBoxConnectionStatus) now correctly report when an enclosure is disconnected or reconnected, and sends trap cpqSsConnectionStatusChange where appropriate.
        * This version adds protection to the lifespan of the embedded 4GB non-volatile storage (NAND) by implementing a daily write count limit that is well above the normal daily activity.  This ensures a runaway process will not inadvertently write to the NAND excessively leading to eventual failure.
        * Changed the default SSL certificate signing to SHA-256.
        * Added support for IP addresses in the SubjectAltName field of the iLO SSL certificate.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.50
changelog:
  -     The following issues are resolved in this version:
      
        * Dynamic Power Capping still works when set to disabled.
        * Server may shut down after repeated insertion and removal of hot-plug power input modules for RPS backplanes. 
        * Repeated LDAP tests cause iLO LDAP User Authentication to fail.
        * The reporting of location discovery services data via the RESTful API on ML/DL servers failed even with iLO Advanced license installed.
        * Rare memory leak that could lead to slow or failed iLO interfaces due to unverified data returns from unregistered providers.
        * Corrected the link on the direct connect registration page to point to [www.hpe.com/support/hpesc](http://www.hpe.com/support/hpesc) instead of [www.hpe.com/services/hpesc](http://www.hpe.com/services/hpesc).
        * OA communication issue after OneView SPP update.
        * Status of pure Fibre Channel cards show up as Unknown in Network Tab of iLO System Information.
        * External Rest Providers removed after upgrading BIOS, booting, and then resetting iLO.
        * Rarely a GET to the SNMP MIB will fail.
        * Rarely updates using HPSUT fail.
        * iLOs won't join Federation group or respond to SSDP requests if DHCPv4 is configured but an IP address is not obtained at iLO boot time.
        * Prev/Next links and list behavior of iLO federation are not consistent.
        * Security fixes/enhancements: 
          * Improved AlertMail message body encoding.
          * CBC Mode ciphers disabled in FIPS/AES Modes (both Webserver and SSH).
          * RC4 has been removed from the default cipher list.
          * 3DES and SHA-1 are disabled in FIPS mode.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.53
changelog:
  -     This version adds support for the following features and enhancements:  
         iLO Amplifier Pack - Advanced Server Firmware/Driver and License
      Management Solution  
         OpenLDAP  
         OpenSSL 1.0.1u FIPS  
         PSRT 301  
         CSRs no longer include the iLO IP address by default. To include the iLO
      IP address in the CSR, enable  
          the include iLO IP Address(es) option in the iLO web interface.  
         Added an iLO RESTful API option to include the iLO IP address in SSL
      certificate CSRs.  
         AlertMail formatting improvements.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.53
changelog:
  -     The following issues are resolved in this version:  
         Fixed an issue that led to POST Error: 333-iLO RESTful API Error - Unable
      to communicate with the iLO firmware when an SD card is was installed.  
         Fix handling of logical drive indexing, found in cases where logical
      drives are not contiguous.  
         Power loss occurs when hot-plugging RPS backplane during runtime.  
         High fan noise occurs during ML110 Gen9 server system startup.  
         IPMI Drive fault is incorrectly mapped to "In Failed Array" on drive
      sensors.  
         Target node iLO is unavailable when an HPE OneView server profile is
      applied.  
         The iLO RESTful API Software Inventory is incomplete when compared to the
      iLO web interface.  
         The iLO RESTful API does not return complete version strings for all
      software components.  
         Unable to use IPMI to "Set Serial Number" and "Set Product ID".  
         Fan failure and server shutdown occur on SL230s Gen8 servers.  
         Reverse Address Translate returns bad values when called with hponcfg.  
         The iLO RESTful API does not return the exact PCI device location for PCIe
      components.  
         An incorrect device type is reported for the embedded SATA controller.  
         Performing a NAND format may leave the REST provider registration in an
      unstable state.  
         Solid state drives are intermittently reported as hard disk drives.  
         Fixed SNMP configuration read failure issue due to wrong FQDN trap
      destination configuration.  
         Fixed an issue that could lead to distorted video after setting boot mode
      to UEFI via RIBCL.  
         False Self-Test error on USB port may be reported when an HPE ProLiant
      Gen8-Series server is powered Off (Advisory found at:
      http://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-
      a00007681en_us)


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.54
changelog:
  -     This version adds support for the following features and enhancements:
      
        * iLO Amplifier Pack - Advanced Server Firmware/Driver and License Management Solution
        * OpenLDAP
        * OpenSSL 1.0.1u FIPS
        * PSRT 301
        * CSRs no longer include the iLO IP address by default. To include the iLO IP address in the CSR, enable the include iLO IP Address(es) option in the iLO web interface.
        * Added an iLO RESTful API option to include the iLO IP address in SSL certificate CSRs.
        * AlertMail formatting improvements.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.54
changelog:
  -     The following issues are resolved in this version:
      
        * Resolved an issue where in some cases iLO configuration data could be reset to default values after an iLO firmware upgrade (only affects Gen8 servers).
        * Improved the mechanism to reset communication to the non-volatile storage (NAND) upon a warm reboot of the server (to reset an inaccessible NAND)
        * NOTE: If the NAND is inaccessible when upgrading to iLO 4 2.54 firmware, an AC power pull may be necessary to reset an inaccessible NAND.
      
      The following issues are resolved in version 2.53 (replaced by 2.54):
      
        * Fixed an issue that led to POST Error: 333-iLO RESTful API Error - Unable to communicate with the iLO firmware when an SD card is was installed.
        * Fix handling of logical drive indexing, found in cases where logical drives are not contiguous.
        * Power loss occurs when hot-plugging RPS backplane during runtime.
        * High fan noise occurs during ML110 Gen9 server system startup.
        * IPMI Drive fault is incorrectly mapped to "In Failed Array" on drive sensors.
        * Target node iLO is unavailable when an HPE OneView server profile is applied.
        * The iLO RESTful API Software Inventory is incomplete when compared to the iLO web interface.
        * The iLO RESTful API does not return complete version strings for all software components.
        * Unable to use IPMI to "Set Serial Number" and "Set Product ID".
        * Fan failure and server shutdown occur on SL230s Gen8 servers.
        * Reverse Address Translate returns bad values when called with hponcfg.
        * The iLO RESTful API does not return the exact PCI device location for PCIe components.
        * An incorrect device type is reported for the embedded SATA controller.
        * Performing a NAND format may leave the REST provider registration in an unstable state.
        * Solid state drives are intermittently reported as hard disk drives.   
        * Fixed SNMP configuration read failure issue due to wrong FQDN trap destination configuration.  
        * Fixed an issue that could lead to distorted video after setting boot mode to UEFI via RIBCL.
        * False Self-Test error on USB port may be reported when an HPE ProLiant Gen8-Series server is powered Off (Advisory found at: http://h20565.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-a00007681en_us)
        * Improved error handling of option card AHS data that could result in excessive descriptor growth resulting in large AHS data files.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.55
changelog:
  -     This version adds support for the following features and enhancements:
      
        * The Self-signed SSL certificate can now be regenerated.
        * New iLO RESTful API command to allow an auxiliary power cycle of the server on the next host power down.
        * Added THERM_TRIP events, OS_STOP_SHUTDOWN, OS_NMI, ACPI, PCI-E Bus Error and CPU error logs to the SEL. 
        * Added OEM type SEL event with IML info on critical events.
        * Improved reliability of Embedded Media attach and diagnostics.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.55
changelog:
  -     The following issues are resolved in this version:
      
        * Masked out errant failures due to charging of storage battery.
        * Implemented cell voltage separation pre-failure warning for storage battery.
        * iLO RESTful API output might display incorrect power supply information.
        * iLO Federation group authentication errors might occur if you repeatedly add and remove groups during a query.
        * An iLO RESTful API event subscription might be lost when DELETE and CREATE subscriptions occur at the same time that the transmitter waits to retry an action.
        * During CAC smartcard authentication, the iLO RESTful API returns a session URI that incorrectly contains uppercase letters.
        * In certain conditions, the Rest server becomes unavailable during a GET of the IELs.
        * The iLO web interface language pack redirects to English.
        * The iLO RESTful API output text represents upper threshold values as lower thresholds.
        * The Linux openipmi driver does not poll the receive message queue if KCS host irq not enabled.
        * The iLO RESTful API EthernetInterfaces link should be under the system/1 root resource, and not in the OEM section.
        * SNMPv3 Engine Boot is not getting incremented on iLO reset.
        * IPMI FRU read returns incorrect completion code for response too long.
        * IPMI Get PEF Capabilities returns the number of valid table entries instead of the total number of table entries.  
        * IPMI Set Boot Options for one time change for boot mode UEFI/Legacy fixed.  
        * iLO restserver suspends when patching bad payload to external provider array.
        * iLO REST API returned 500 internal error for a GET of systems/1/ leading to failed One View Profile Apply.
        * iLO RESfulT API events are sending incorrect "Host" header when using IPv6.
        * iLO time becomes Unset after update from 2.50 or prior to 2.54.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.60
changelog:
  -     The following issues are resolved in this version:
      
        *  iLO 4 unexpectedly restored itself to factory default settings when an user did not initiate the process. 
        * When Auto Power-On is set to Always Power On to Restore Last Power State, the server might not power on after a cold reset. 
        * False nonvolatile flash memory (NAND) test failures might occur after a firmware upgrade.
        * Incorrect RAM and Storage values are displayed on the HPE OneView for VMware vCenter tab.
        * Remote Support disk events include the text "Not Available" for the variables when data is missing.
        * Some Power Supply information is missing from the iLO web interface.
        * iLO displays Failed status instead of Disabled status when the Smart Array Cache Module battery is disconnected.
        * An iLO SSH port disconnection issue was observed after more than two days of continuous operation.
        * Values do not move up when the preceding entries in the Directory User Context fields are cleared.
        * Boot failures might occur when booting with a MicroSD card in Legacy mode.
        * Changed the resolution of a Redfish SSD wear field to display in percentage.
        * The date and time settings are reset after a firmware update.
        * The server powers on instead of shutting down when multiple power-on requests are sent.
      
      SECURITY FIXES:
      
        For the latest security bulletins and vulnerabilities addressed in this
      version, please visit:  
        https://support.hpe.com/hpesc/public/home  
      
      Security best practices:
      
        Please refer to the HPE Integrated Lights-Out Security Technology Brief for
      the latest on security best practices at:  
        http://www.hpe.com/support/iLO4_security_en


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 6.34
changelog:
  -     *Problems Fixed:**
      
        * Critical issue for all UEFI systems using 2.2 TB or greater volumes configured with GPT partitions. For additional information please refer to the customer advisory # [c04602001](http://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c04602001)
        * When a controller was set to RAID6 mode and a large number of recoverable errors were generated by hard disk drives in the system, the controller might go into a degraded mode and cease to function. A 0x0E error message would display during POST on subsequent power cycle and in the Integrated Management Log (IML)
        * The controller would report 0xE0 error to HP Smart Storage Administrator (HP SSA) and would cease to function when set to RAID 6 mode
        * Intermittent SSD SATA 6G drive failures would occur when drive was configured in Bay 1 of HP ProLiant BL465 Gen8 Server
        * Uncorrectable ECC errors would cause the controller to stop responding (Lockup 0x13).  This version of Smart Array firmware properly calculates the maximum controller memory bandwidth required to sustain streaming write operations with the current logical drive configuration and reduces the cache memory speed on configurations that do not require peak controller memory bandwidth.  When running at the slower memory speed, less power is consumed and performance degradation is expected to be negligible. For additional information, reference Customer Advisory # [c03755983](http://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03755983)
        * The HP D2220sb Storage Blade is not recognized when configuring it with the HP ProLiant BL460c Gen9 Server Blade. For additional information please refer to the customer advisory # [c04602866](http://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c04602866)


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 6.64
changelog:
  -      An intermittent aborted IO request with attached SATA drives resulted in a LUN (Logical Unit Number) reset.
        * When using SATA drives with a Px2x controller, the server may stop responding or shut down after an extended period of time due to a controller lockup (POST Lockup 0xAB).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 6.68
changelog:
  -      HP Smart Array Px3x controller with HP SmartCache enabled on boot volume could potentially encounter file corruption when booting the system if the Super-cap is not fully charged due to being replaced or being in a power down condition for several days (Example 7 days). File corruption is less likely to occur on non-boot volumes than on boot volumes. For additional information please refer to the customer advisory # [c04719000](http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04719000)
      
        * I/O may halt when the drive write cache is enabled.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 7.02
changelog:
  -      A physical drive configured as a spare drive might indicate predictive failure sooner than expected.
        * Controller might stop responding during run-time (POST Lockup 0x13).
        * When drive write-cache is enabled, protocol errors are observed.
        * After hot-plug replacement of a hard disk drive, incorrect hard disk drive firmware version and upgrade recommendation were displayed by HP Smart Storage Administrator.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 7.02-2.1
changelog:
  -     *Problems Fixed in 7.02:**
      
        * A physical drive configured as a spare drive might indicate predictive failure sooner than expected.
        * Controller might stop responding during run-time (POST Lockup 0x13).
        * When drive write-cache is enabled, protocol errors are observed.
        * After hot-plug replacement of a hard disk drive, incorrect hard disk drive firmware version and upgrade recommendation were displayed by HP Smart Storage Administrator.
      
      **Problems Fixed in 7.02 (B):**
      
        * Component would fail to install firmware in a system configured with two or more external drive enclosures attached to an HPE Host Bus Adapter H22x. The following message would be reported - "Device appears more than once in tree". The firmware installation failure was not observed in configurations having only one external drive enclosure attached to an HPE Host Bus Adapter H22x.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 8.00
changelog:
  -      Drive temperatures for SATA drives might not be reported after hot-inserting the drive.
        * System might hang at POST following a reboot.
        * System fans might go to 100% if connected drives were spun down.
        * SATA SSD's were incorrectly marked as worn out.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 8.32
changelog:
  -     System can potentially stop responding with no lockup code due to livelock
      condition where the RAID Stack thread is polling a queue for a completion to
      be returned by the base code firmware


author: HP Linux Development <Linux_SWdeliverables@external.groups.hp.com> 8.3.0
changelog:
  - ENHANCEMENTS
  - hpasmlited now supports long IML messages. 
  - Added "show powermeter" command in hpasmcli. It shows the aggregate power consumption of the server. 

  - FIXES
  - Fixed the following issues: 
         1.hpasmcli -s "show server" command showed the L2 and L3 cache information incorrectly on multi processor systems. 
         2.hpasmcli showed incorrect fan numbers on HP ProLiant G6 servers. 
         3.hpasmxld segmentation fault when the HP Integrated Lights Out 2 (iLO 2)  broadcast storm occurs.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hp.com> 8.3.1
changelog:
  - FIXES
  - Fixed hp-health daemon to prevent soft lockups from occurring when the HP Integrated Lights-Out (iLO) controller becomes un  responsive due to network storm.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hp.com> 8.3.2
changelog:
  - FIXES
  - Fixed a problem where if ambient temperature is very low, hpasmlited can incorrectly determine the system is over a tempera  ture threshold and improperly shut the system down.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hp.com> 8.4.0
changelog:
  - ENHANCEMENTS
  - Added support for Integrated Lights-Out 3 (iLO 3). 
  - Added 'SHOW SEL' option in hpasmcli to display the System Event Log (SEL) contents on HP ProLiant 100 series servers. 
  - Updated libcpqci.so, which take advantage of upstream changes to hpilo, to provide better performance to applications, such  as SNMP agents like cmasm2d from hp-snmp-agents. 
  - Added 64-bit hpbootcfg utility.

  - FIXES
  - The Intel processor hyperthreading configuration can be enabled and disabled using hpasmcli on HP ProLiant G6 servers. 
  - Fix POSIX-compliancy issue with initscript. 
  - Avoid sending a SIGKILL to the health daemon, preventing ASRs that may occur on platforms (e.g. DL785) where hp-health shu   tdowns may take an extended amount of time.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hp.com> 8.5.0
changelog:
  - ENHANCEMENTS
  - Split Advanced Server Recovery functionality into standalone hp-asrd service. For more information, execute 'man hp-asrd'.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hp.com> 8.7.0
changelog:
  - ENHANCEMENTS
  - hpasm interface redesigned to use sockets in order to remove timeout related issues caused by message queue interface when   the system is in stress.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hp.com> 10.0.0
changelog:
  - ENHANCEMENTS
  - Added support for HP ProLiant Gen9 Servers.

  - FIXES
  - HP Health may skip few lengthy POST error messages due to limitation of IPMI packet.


author: Sivakumar A <sivakumar.alagumalai@hp.com> 4.2.0-0
changelog:
  - v4.2.0 is mainly targeted for iLO4 1.30, iLO3 1.60 and iLO2 2.20
  - Created 32 bit and 64 bit RPM Packages to load shared library from hp-helth agent as libcpqci.so (in case of 32bit OS) and libcpqci64.so (in case of 64bit OS)


author: Ver:2.40-13.0
changelog:
  - Please refer to online documentation by searching for the 
  "HP Array Configuration Utility CLI" using the search box on
  http://www.hp.com. Then select the Download software link,
  select your operation system. Under the Enhancements tab is a 
  description of the changes. (Severity: Low)


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.12.1.el7]
changelog:
  - [alsa] control: Make sure that id->index does not overflow (Jaroslav Kysela) [1117313 1117314] {CVE-2014-4656}
  - [alsa] control: Handle numid overflow (Jaroslav Kysela) [1117313 1117314] {CVE-2014-4656}
  - [alsa] control: Protect user controls against concurrent access (Jaroslav Kysela) [1117338 1117339] {CVE-2014-4652}
  - [alsa] control: Fix replacing user controls (Jaroslav Kysela) [1117323 1117324] {CVE-2014-4654 CVE-2014-4655}
  - [net] sctp: fix remote memory pressure from excessive queueing (Daniel Borkmann) [1155750 1152755] {CVE-2014-3688}
  - [net] sctp: fix panic on duplicate ASCONF chunks (Daniel Borkmann) [1155737 1152755] {CVE-2014-3687}
  - [net] sctp: fix skb_over_panic when receiving malformed ASCONF chunks (Daniel Borkmann) [1147856 1152755] {CVE-2014-3673}
  - [net] sctp: handle association restarts when the socket is closed (Daniel Borkmann) [1147856 1152755] [1155737 1152755] [1155750 1152755]
  - [pci] Add ACS quirk for Intel 10G NICs (Alex Williamson) [1156447 1141399]
  - [pci] Add ACS quirk for Solarflare SFC9120 & SFC9140 (Alex Williamson) [1158316 1131552]
  - [lib] assoc_array: Fix termination condition in assoc array garbage collection (David Howells) [1155136 1139431] {CVE-2014-3631}
  - [block] cfq-iosched: Add comments on update timing of weight (Vivek Goyal) [1152874 1116126]
  - [block] cfq-iosched: Fix wrong children_weight calculation (Vivek Goyal) [1152874 1116126]
  - [powerpc] mm: Check paca psize is up to date for huge mappings (Gustavo Duarte) [1151927 1107337]
  - [x86] perf/intel: ignore CondChgd bit to avoid false NMI handling (Don Zickus) [1146819 1110264]
  - [x86] smpboot: initialize secondary CPU only if master CPU will wait for it (Phillip Lougher) [1144295 968147]
  - [x86] smpboot: Log error on secondary CPU wakeup failure at ERR level (Igor Mammedov) [1144295 968147]
  - [x86] smpboot: Fix list/memory corruption on CPU hotplug (Igor Mammedov) [1144295 968147]
  - [acpi] processor: do not mark present at boot but not onlined CPU as onlined (Igor Mammedov) [1144295 968147]
  - [fs] udf: Avoid infinite loop when processing indirect ICBs (Jacob Tanenbaum) [1142321 1142322] {CVE-2014-6410}
  - [hid] picolcd: fix memory corruption via OOB write (Jacob Tanenbaum) [1141408 1141409] {CVE-2014-3186}
  - [usb] serial/whiteheat: fix memory corruption flaw (Jacob Tanenbaum) [1141403 1141404] {CVE-2014-3185}
  - [hid] fix off by one error in various _report_fixup routines (Jacob Tanenbaum) [1141393 1141394] {CVE-2014-3184}
  - [hid] logitech-dj: fix OOB array access (Jacob Tanenbaum) [1141211 1141212] {CVE-2014-3182}
  - [hid] fix OOB write in magicmouse driver (Jacob Tanenbaum) [1141176 1141177] {CVE-2014-3181}
  - [acpi] Fix bug when ACPI reset register is implemented in system memory (Nigel Croxon) [1136525 1109971]
  - [fs] vfs: fix ref count leak in path_mountpoint() (Ian Kent) [1122481 1122376] {CVE-2014-5045}
  - [kernel] ptrace: get_dumpable() incorrect tests (Jacob Tanenbaum) [1111605 1111606] {CVE-2013-2929}
  - [media] media-device: fix an information leakage (Jacob Tanenbaum) [1109776 1109777] {CVE-2014-1739}
  - [target] rd: Refactor rd_build_device_space + rd_release_device_space (Denys Vlasenko) [1108754 1108755] {CVE-2014-4027}
  - [block] blkcg: fix use-after-free in __blkg_release_rcu() by making blkcg_gq refcnt an atomic_t (Vivek Goyal) [1158313 1118436]
  - [virt] kvm: fix PIT timer race condition (Petr  Matousek) [1144879 1144880] {CVE-2014-3611}
  - [virt] kvm/vmx: handle invept and invvpid vm exits gracefully (Petr  Matousek) [1145449 1116936] [1144828 1144829] {CVE-2014-3645 CVE-2014-3646}


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.13.1.el7]
changelog:
  - [powerpc] mm: Make sure a local_irq_disable prevent a parallel THP split (Don Zickus) [1151057 1083296]
  - [powerpc] Implement __get_user_pages_fast() (Don Zickus) [1151057 1083296]
  - [scsi] vmw_pvscsi: Some improvements in pvscsi driver (Ewan Milne) [1144016 1075090]
  - [scsi] vmw_pvscsi: Add support for I/O requests coalescing (Ewan Milne) [1144016 1075090]
  - [scsi] vmw_pvscsi: Fix pvscsi_abort() function (Ewan Milne) [1144016 1075090]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.15.1.el7]
changelog:
  - [scsi] ipr: wait for aborted command responses (Gustavo Duarte) [1162734 1156530]
  - [scsi] reintroduce scsi_driver.init_command (Ewan Milne) [1146983 1105204]
  - [block] implement an unprep function corresponding directly to prep (Ewan Milne) [1146983 1105204]
  - [scsi] Revert: reintroduce scsi_driver.init_command (Ewan Milne) [1146983 1105204]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.16.1.el7]
changelog:
  - [fs] aio: block exit_aio() until all context requests are completed (Jeff Moyer) [1163992 1122092]
  - [fs] aio: add missing smp_rmb() in read_events_ring (Jeff Moyer) [1154172 1131312]
  - [fs] aio: fix reqs_available handling (Jeff Moyer) [1163992 1122092]
  - [fs] aio: report error from io_destroy() when threads race in io_destroy() (Jeff Moyer) [1163992 1122092]
  - [fs] aio: block io_destroy() until all context requests are completed (Jeff Moyer) [1163992 1122092]
  - [fs] aio: v4 ensure access to ctx->ring_pages is correctly serialised for migration (Jeff Moyer) [1163992 1122092]
  - [fs] aio/migratepages: make aio migrate pages sane (Jeff Moyer) [1163992 1122092]
  - [fs] aio: clean up and fix aio_setup_ring page mapping (Jeff Moyer) [1163992 1122092]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.18.1.el7]
changelog:
  - [net] ipv6: fib: fix fib dump restart (Panu Matilainen) [1172795 1163605]
  - [net] ipv6: drop unused fib6_clean_all_ro() function and rt6_proc_arg struct (Panu Matilainen) [1172795 1163605]
  - [net] ipv6: avoid high order memory allocations for /proc/net/ipv6_route (Panu Matilainen) [1172795 1163605]
  - [mm] numa: Remove BUG_ON() in __handle_mm_fault() (Rik van Riel) [1170662 1119439]
  - [fs] aio: fix race between aio event completion and reaping (Jeff Moyer) [1154172 1131312]


author: Phillip Lougher <plougher@redhat.com> [3.10.0-123.19.1.el7]
changelog:
  - [mm] shmem: fix splicing from a hole while it's punched (Denys Vlasenko) [1118244 1118245] {CVE-2014-4171}
  - [mm] shmem: fix faulting into a hole, not taking i_mutex (Denys Vlasenko) [1118244 1118245] {CVE-2014-4171}
  - [mm] shmem: fix faulting into a hole while it's punched (Denys Vlasenko) [118244 1118245] {CVE-2014-4171}
  - [x86] traps: stop using IST for #SS (Petr  Matousek) [1172812 1172813] {CVE-2014-9322}
  - [net] vxlan: fix incorrect initializer in union vxlan_addr (Daniel Borkmann) [1156611 1130643]
  - [net] vxlan: fix crash when interface is created with no group (Daniel Borkmann) [1156611 1130643]
  - [net] vxlan: fix nonfunctional neigh_reduce() (Daniel Borkmann) [1156611 1130643]
  - [net] vxlan: fix potential NULL dereference in arp_reduce() (Daniel Borkmann) [1156611 1130643]
  - [net] vxlan: remove unused port variable in vxlan_udp_encap_recv() (Daniel Borkmann) [1156611 1130643]
  - [net] vxlan: remove extra newline after function definition (Daniel Borkmann) [1156611 1130643]
  - [net] etherdevice: Use ether_addr_copy to copy an Ethernet address (Stefan Assmann) [1156611 1091126]
  - [fs] splice: perform generic write checks (Eric Sandeen) [1163799 1155907] {CVE-2014-7822}
  - [fs] eliminate BUG() call when there's an unexpected lock on file close (Frank Sorenson) [1172266 1148130]
  - [net] sctp: fix NULL pointer dereference in af->from_addr_param on malformed packet (Daniel Borkmann) [1163094 1154002] {CVE-2014-7841}
  - [fs] lockd: Try to reconnect if statd has moved (Benjamin Coddington) [1150889 1120850]
  - [fs] sunrpc: Don't wake tasks during connection abort (Benjamin Coddington) [1150889 1120850]
  - [fs] cifs: NULL pointer dereference in SMB2_tcon (Jacob Tanenbaum) [1147528 1147529] {CVE-2014-7145}
  - [net] ipv6: addrconf: implement address generation modes (Jiri Pirko) [1144876 1107369]
  - [net] gre: add link local route when local addr is any (Jiri Pirko) [1144876 1107369]
  - [net] gre6: don't try to add the same route two times (Jiri Pirko) [1144876 1107369]
  - [fs] isofs: unbound recursion when processing relocated directories (Jacob Tanenbaum) [1142270 1142271] {CVE-2014-5471 CVE-2014-5472}
  - [fs] fs: seq_file: fallback to vmalloc allocation (Ian Kent) [1140302 1095623]
  - [fs] fs: /proc/stat: convert to single_open_size() (Ian Kent) [1140302 1095623]
  - [fs] fs: seq_file: always clear m->count when we free m->buf (Ian Kent) [1140302 1095623]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-686.el7]
changelog:
  - [fs] nfsv4.1: Keep a reference on lock states while checking (Scott Mayhew) [1458721]
  - [fs] nfsv4.1: Handle NFS4ERR_OLD_STATEID in nfs4_reclaim_open_state (Scott Mayhew) [1458721]
  - [fs] nfsv4: Don't call close if the open stateid has already been cleared (Scott Mayhew) [1458721]
  - [fs] nfsv4: Fix CLOSE races with OPEN (Scott Mayhew) [1458721]
  - [fs] nfsv4.1: Fix a regression in DELEGRETURN (Scott Mayhew) [1458721]
  - [fs] nfs: nfs_rename() - revalidate directories on -ERESTARTSYS (Benjamin Coddington) [1459404]
  - [fs] revert "nfs: nfs_rename() handle -ERESTARTSYS dentry left behind" (Benjamin Coddington) [1459404]
  - [s390] pci: moving check and allocation of device_rh ahead (Wei Xu) [1455117]
  - [netdrv] cxgb4: handle serial flash interrupt (Sai Vemuri) [1462266]
  - [netdrv] cxgb4: fix to bring link down after adapter crash (Sai Vemuri) [1462266]
  - [netdrv] cxgb4: handle interrupt raised when FW crashes (Sai Vemuri) [1462266]
  - [security] keys: Change the name of the dead type to ".dead" to prevent user access (David Howells) [1439264] {CVE-2017-6951}
  - [security] keys: Protect request_key() against a type with no match function (David Howells) [1433216] {CVE-2017-2647}
  - [security] keys: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [1389309] {CVE-2016-9604}


author: Rafael Aquini <aquini@redhat.com> [3.10.0-687.el7]
changelog:
  - [fs] mntns: Remove incorrect put_mnt_ns ("Eric W. Biederman") [1463072]
  - [md] dm raid: fix oops on upgrading to extended superblock format (Mike Snitzer) [1464274]
  - [md] dm io: fix duplicate bio completion due to missing ref count (Mike Snitzer) [1461519]
  - [net] gro_cells: mark napi struct as not busy poll candidates (Eelco Chaudron) [1460078]
  - [x86] boot/kaslr: Skip kernel text relocation if no kaslr action is done (Baoquan He) [1458738]
  - [char] tpm/tpm_crb: enter the low power state upon device suspend (Jerry Snitselaar) [1463001]
  - [input] wacom: fix Wacom Cintiq 27QHD max pressure (Aristeu Rozanski) [1461910]
  - [kernel] nohz: Fix spurious warning when hrtimer and clockevent get out of sync (Frederic Weisbecker) [1366043]
  - [kernel] nohz: Fix buggy tick delay on IRQ storms (Frederic Weisbecker) [1366043]
  - [kernel] nohz: Reset next_tick cache even when the timer has no regs (Frederic Weisbecker) [1366043]
  - [kernel] nohz: Fix collision between tick and other hrtimers, again (Frederic Weisbecker) [1366043]
  - [kernel] nohz: Add hrtimer sanity check (Frederic Weisbecker) [1366043]
  - [kernel] revert "nohz: Fix collision between tick and other hrtimers" (Frederic Weisbecker) [1366043]
  - [powerpc] do not make the entire heap executable (Denys Vlasenko) [1330064]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-688.el7]
changelog:
  - [s390] move _text symbol to address higher than zero (Jiri Olsa) [1464800]
  - [netdrv] cxgb4: notify uP to route ctrlq compl to rdma rspq (Sai Vemuri) [1463324]
  - [powerpc] Add HAVE_PERF_USER_STACK_DUMP support (Jiri Olsa) [1449182]
  - [tools] perf report: Ensure the perf DSO mapping matches what libdw sees (Jiri Olsa) [1449182]
  - [tools] perf report: Include partial stacks unwound with libdw (Jiri Olsa) [1449182]
  - [tools] perf: libdw support for powerpc (Jiri Olsa) [1449182]
  - [firmware] efi/esrt: Cleanup bad memory map log messages (Prarit Bhargava) [1380812]
  - [firmware] efi/esrt: Fix typo in pr_err() message (Prarit Bhargava) [1380812]
  - [firmware] efi/esrt: Use memremap not ioremap to access ESRT table in memory (Prarit Bhargava) [1380812]
  - [firmware] efi: Work around ia64 build problem with ESRT driver (Prarit Bhargava) [1380812]
  - [firmware] efi/esrt: Don't preformat name (Prarit Bhargava) [1380812]
  - [firmware] efi: Make efi/esrt.c driver explicitly non-modular (Prarit Bhargava) [1380812]
  - [firmware] efi/esrt: Fix some compiler warnings (Prarit Bhargava) [1380812]
  - [firmware] efi: Add esrt support (Prarit Bhargava) [1380812]
  - [firmware] efi: Rename efi_guid_unparse to efi_guid_to_str (Prarit Bhargava) [1380812]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-690.el7]
changelog:
  - [mm] fix new crash in unmapped_area_topdown() (Larry Woodman) [1463241] {CVE-2017-1000364}
  - [mm] larger stack guard gap, between vmas (Larry Woodman) [1463241] {CVE-2017-1000364}
  - [mm] Revert "enlarge stack guard gap" (Larry Woodman) [1463241] {CVE-2017-1000364}
  - [crypto] testmgr - Reenable sha1/aes in FIPS mode (Herbert Xu) [1465234]
  - [crypto] testmgr - mark more algorithms as FIPS compliant (Herbert Xu) [1465234]
  - [target] tcmu: break up free_device callback (Mike Christie) [1430225]
  - [target] tcmu: perfom device add and del synchronously (Mike Christie) [1430225]
  - [target] tcmu: use idr for se_device dev index (Mike Christie) [1430225]
  - [target] tcmu: prep for sync add/rm device support (Mike Christie) [1430225]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-691.el7]
changelog:
  - [redhat] spec: Update dracut dependency to enable more algorithms as FIPS compliant (Rafael Aquini) [1466097]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-692.el7]
changelog:
  - [pci] Avoid FLR for Intel 82579 NICs (Jarod Wilson) [966840]
  - [net] netfilter: nf_ct_dccp/sctp: fix memory leak after netns cleanup (Davide Caratti) [1458687]
  - [net] netfilter: udplite: Remove duplicated udplite4/6 declaration (Davide Caratti) [1458687]
  - [net] netfilter: nat: merge udp and udplite helpers (Davide Caratti) [1458687]
  - [net] netfilter: merge udp and udplite conntrack helpers (Davide Caratti) [1458687]
  - [netdrv] mlx5: Tolerate irq_set_affinity_hint() failures (Kamal Heib) [1465830]
  - [netdrv] bonding: Restore old symlink names in sysfs to preserve ABI (Neil Horman) [1461892]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-693.el7]
changelog:
  - [x86] crypto: sha1-ssse3 - Disable avx2 (Benjamin Coddington) [1346106]
  - [net] geneve: fix hlist corruption (Jiri Benc) [1464292]
  - [net] vxlan: fix hlist corruption (Jiri Benc) [1464292]
  - [net] vxlan: fix use-after-free on deletion (Jiri Benc) [1464292]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-693.1.1.el7]
changelog:
  - [fs] dentry name snapshots (Miklos Szeredi) [1471131 1470403] {CVE-2017-7533}
  - [fs] fix the regression from "direct-io: Fix negative return from dio read beyond eof" (Eric Sandeen) [1475669 1473549]
  - [fs] direct-io: Fix negative return from dio read beyond eof (Eric Sandeen) [1475669 1473549]


author: Rafael Aquini <aquini@redhat.com> [3.10.0-685.el7]
changelog:
  - [mm] enlarge stack guard gap (Larry Woodman) [1452733] {CVE-2017-1000364}
  - [mm] userfaultfd: shmem: handle coredumping in handle_userfault() (Andrea Arcangeli) [1462267]
  - [fs] nfs: Don't send mode again in post-EXCLUSIVE4_1 SETATTR with umask (Benjamin Coddington) [1449466]
  - [hid] hid_wacom: temporaly disable power_supply usage from driver (Aristeu Rozanski) [1458348]
  - [drm] mgag200: Fix to always set HiPri for G200e4 V2 (Rob Clark) [1461985]
  - [nvme] submit nvme_admin_activate_fw to admin queue (David Milburn) [1456978]
  - [netdrv] i40e: set VFs to untrusted mode by default (Stefan Assmann) [1462105]
  - [netdrv] tun: use symmetric hash (Jason Wang) [1458645]
  - [crypto] qat: copy back iv on completion (Neil Horman) [1446394]
  - [crypto] chcr - Fix txq ids (Sai Vemuri) [1457392]
  - [crypto] chcr - fix itnull.cocci warnings (Sai Vemuri) [1426189]
  - [crypto] chcr - Change flow IDs (Sai Vemuri) [1426189]
  - [crypto] chcr - Check device is allocated before use (Sai Vemuri) [1426189]


author: Akemi Yagi <toracat@centos.org> [3.10.0-123.20.1.el7.centos.plus]
changelog:
  - Modifications to remove Red Hat from spec file
  - Modify config file for x86_64 with extra features turned on including
    some network adapters, BusLogic, IPX, Appletalk, ReiserFS, TOMOYO, AppArmor
  - Add in a patch that allows non-LogiTech remote to work [bug#5780]
  - Add in a patch that fixes compat msgrcv with negative msgtyp [bug#7099]
  - Add in a patch that fixes "Argument list too long" error
  - Add in a patch that fixes missing Unifying device issue [bug#7340]
  - JFS enabled [bug#7350]
  - NUMACHIP enabled [bug#7498]
  - AIC7xxx enabled [bug#7552]
  - Add in a patch that fixes waking up from S3 for AMD family [bug#7645]
  - Enabled via_velocity [bug#7877]
  - Add in a patch that fixes tick issue [bug#7852]
  - Add in a patch that fixes bnx2x issue [bug#7942]
  - Add in a patch that fixes libceph vuln CVE-2014-6416 [bug#7372]


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-9
changelog:
  - kdumpctl: bail out earlier in case of no reserved memory
  - kdumpctrl: kdump feasibility should fail if no crash memory
  - kdumpctl: improve "while read" time for /etc/kdump.conf
  - kdumpctl: update check_dump_fs_modified() to use "lsinitrd -f"
  - kdumpctl: improve check_wdt_modified()
  - kdumpctl: remove is_mode_switched()
  - arm64: cmdline: modify to optimize size for memory reservation


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-10
changelog:
  - kdumpctl: call strip_comments only when necessary to speedup
  - Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-12
changelog:
  - kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
  - Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-14
changelog:
  - kdump.conf.5: clarify the fence_kdump_nodes option
  - kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-15
changelog:
  - Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
  - udev rules: mask cpu hotplug rules


author: Rafael Aquini <aquini@redhat.com> - 20160728-47.git0daeaf3
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Core14 firmware release for 7265, 7260, 3160 wireless devices (rhbz 1358566)
  - Core19 firmware release for 7265D, 8260, 8265, 3168 wireless devices (rhbz 1358568)


author: Rafael Aquini <aquini@redhat.com> - 20160830-49.git7534e19
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update QCA6174/hw3.0/board-2.bin file to support ath10k devices (rhbz 1368159)


author: Rafael Aquini <aquini@redhat.com> - 20170217-50.git6d3bc88
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - chelsio: Update to the latest firmware released version (rhbz 1395322)
  - iwlwifi: Update to the latest firmware released version (rhbz 1385749)
  - ath10k: Update to the latest firmware released version (rhbz 1385743)
  - hfi1: Update to the latest firmware released version (rhbz 1382805)


author: Rafael Aquini <aquini@redhat.com> - 20170307-51.git87714d8
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - chelsio: Update to the latest firmware released version (rhbz 1385911)
  - drm: Update for radeon and amdgpu latest firmware released version (rhbz 1425197)


author: Rafael Aquini <aquini@redhat.com> - 20170328-52.git44d8e8d
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - nfp: add firmware for Netronome Ethernet Driver (rhbz 1432592)


author: Rafael Aquini <aquini@redhat.com> - 20170530-54.gitdf40d15
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2-42.el7.centos
changelog:
  - turn off crypto, hash, queue, and replication support, which aren't used,
    reduces the package size, and sidesteps needing to patch anything for #347741
  - create and populate new db files, moving them in place afterward so that we
    never have a partially-built db file "live" (patch from Kelsey Cummings,
    CentOS #1987)


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.1.pre1
changelog:
  - update to 2.2.3pre1, which you can still get from upstream
  - build with -fno-strict-aliasing to avoid problems triggered by strict aliasing
  - package the translations


author: Nalin Dahyabhai <nalin@redhat.com> - 2.2.3-0.3.pre1
changelog:
  - import Kees Cook's patch to fix accidental leakage of part of ./DB_CONFIG
    (#580191, CVE-2010-0826)


author: Nalin Dahyabhai <nalin@redhat.com> 3.1p1-1
changelog:
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x


author: Damien Miller <djm@mindrot.org>
changelog:
  - Merge in spec changes from seba@iq.pl (Sebastian Pachuta)
  - Add new {ssh,sshd}_config.5 manpages
  - Add new ssh-keysign program and remove setuid from ssh client


author: Damien Miller <djm@mindrot.org>
changelog:
  - Don't install profile.d scripts when not building with GNOME/GTK askpass
    (patch from bet@rahul.net)


author: Damien Miller <djm@mindrot.org>
changelog:
  - Remove noip6 option. This may be controlled at run-time in client config
    file using new AddressFamily directive


author: Ralph Bean <rbean@redhat.com> - 0.6.1-1
changelog:
  - New upstream version
  - Added support for python3
  - Included README, COPYING, and CHANGELOG in docs


author: systemd maintenance team <systemd-maint@redhat.com> - 219-77
changelog:
  - core: coldplug possible nop_job (#1829754)
  - core: make sure to restore the control command id, too (#1828953)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-78.1
changelog:
  - device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
  - device: don't emit PropetiesChanged needlessly (#1793527)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-78.2
changelog:
  - core: don't update unit description if it is already set to the same value (#1793527)
  - unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
  - core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)


author: systemd maintenance team <systemd-maint@redhat.com> - 219-78.4
changelog:
  - test: add a test/reproducer for BZ#1989245 (#1989245)
  - strv: fix buffer size calculation in strv_join_quoted() (#1989245)
  - install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)


