# changelog

author: Remi Collet <rcollet@redhat.com> - 5.4.16-27
changelog:
  - gd: fix NULL pointer dereference in gdImageCreateFromXpm().
    CVE-2014-2497
  - gd: fix NUL byte injection in file names. CVE-2014-5120
  - fileinfo: fix extensive backtracking in regular expression
    (incomplete fix for CVE-2013-7345). CVE-2014-3538
  - fileinfo: fix mconvert incorrect handling of truncated
    pascal string size. CVE-2014-3478
  - fileinfo: fix cdf_read_property_info
    (incomplete fix for CVE-2012-1571). CVE-2014-3587
  - spl: fix use-after-free in ArrayIterator due to object
    change during sorting. CVE-2014-4698
  - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
  - network: fix segfault in dns_get_record
    (incomplete fix for CVE-2014-4049). CVE-2014-3597


author: Remi Collet <rcollet@redhat.com> - 5.4.16-29
changelog:
  - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
  - core: fix integer overflow in unserialize() CVE-2014-3669
  - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670


author: Remi Collet <rcollet@redhat.com> - 5.4.16-33
changelog:
  - core: use after free vulnerability in unserialize()
    CVE-2014-8142 and CVE-2015-0231
  - core: fix use-after-free in unserialize CVE-2015-2787
  - core: fix NUL byte injection in file name argument of
    move_uploaded_file() CVE-2015-2348
  - date: use after free vulnerability in unserialize CVE-2015-0273
  - enchant: fix heap buffer overflow in enchant_broker_request_dict
    CVE-2014-9705
  - exif: free called on unitialized pointer CVE-2015-0232
  - fileinfo: fix out of bounds read in mconvert CVE-2014-9652
  - gd: fix buffer read overflow in gd_gif_in.c CVE-2014-9709
  - phar: use after free in phar_object.c CVE-2015-2301
  - soap: fix type confusion through unserialize


author: Remi Collet <rcollet@redhat.com> - 5.4.16-34
changelog:
  - fix memory corruption in fileinfo module on big endian
    machines #1082624
  - fix segfault in pdo_odbc on x86_64 #1159892
  - fix segfault in gmp allocator #1154760


author: Remi Collet <rcollet@redhat.com> - 5.4.16-35
changelog:
  - core: fix multipart/form-data request can use excessive
    amount of CPU usage CVE-2015-4024
  - fix various functions accept paths with NUL character
    CVE-2015-4025, CVE-2015-4026, #1213407
  - fileinfo: fix denial of service when processing a crafted
    file #1213442
  - ftp: fix integer overflow leading to heap overflow when
    reading FTP file listing CVE-2015-4022
  - phar: fix buffer over-read in metadata parsing CVE-2015-2783
  - phar: invalid pointer free() in phar_tar_process_metadata()
    CVE-2015-3307
  - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
  - phar: fix memory corruption in phar_parse_tarfile caused by
    empty entry file name CVE-2015-4021
  - soap: fix type confusion through unserialize #1222538
  - apache2handler: fix pipelined request executed in deinitialized
    interpreter under httpd 2.4 CVE-2015-3330


author: Matej Muzila <mmuzila@redhat.com> - 1:5.5.40-1
changelog:
  - Rebase to 5.5.40
    Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464
    CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507 CVE-2014-6520
    CVE-2014-6530 CVE-2014-6551 CVE-2014-6555 CVE-2014-6559 CVE-2014-6564
    Resolves: #1160549


author: Matej Muzila <mmuzila@redhat.com> - 1:5.5.41-1
changelog:
  - Rebase to 5.5.41
    Also fixes: CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382
    CVE-2015-0391 CVE-2015-0411 CVE-2015-0432
    Resolves: #1186110


author: Jakub Dorňák <jdornak@redhat.com> - 1:5.5.44-3
changelog:
  - MDEV-8827 Duplicate key with auto increment
    fix innodb auto-increment handling three bugs:
      1. innobase_next_autoinc treated the case of current<offset incorrectly
      2. ha_innobase::get_auto_increment didn't recalculate current when increment changed
      3. ha_innobase::get_auto_increment didn't pass offset down to innobase_next_autoinc
    Resolves: #1300621


author: Jakub Dorňák <jdornak@redhat.com> - 1:5.5.47-1
changelog:
  - Rebase to 5.5.47
    Also fixes: CVE-2015-4792 CVE-2015-4802 CVE-2015-4815 CVE-2015-4816
    CVE-2015-4819 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858
    CVE-2015-4861 CVE-2015-4870 CVE-2015-4879 CVE-2015-4913 CVE-2015-7744
    CVE-2016-0505 CVE-2016-0546 CVE-2016-0596 CVE-2016-0597 CVE-2016-0598
    CVE-2016-0600 CVE-2016-0606 CVE-2016-0608 CVE-2016-0609 CVE-2016-0616
    CVE-2016-2047
    Resolves: #1304515


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.22.1.el7]
changelog:
  - [mm] mmu_notifier: fix memory corruption (Jerome Glisse) [1335727 1307042]
  - [misc] cxl: Increase timeout for detection of AFU mmio hang (Steve Best) [1335419 1329682]
  - [misc] cxl: Configure the PSL for two CAPI ports on POWER8NVL (Steve Best) [1336389 1278793]
  - [powerpc] Define PVR value for POWER8NVL processor (Steve Best) [1336389 1278793]
  - [x86] Mark Intel Knights Landing-F processor as not supported (Steve Best) [1335407 1331516]
  - [netdrv] ixgbevf: fix spoofed packets with random MAC (Ken Cox) [1335406 1247345]
  - [netdrv] ixgbevf: use ether_addr_copy instead of memcpy (Ken Cox) [1335406 1247345]
  - [scsi] hpsa: update rev to 3.4.10-0-RH3 (Joseph Szczypek) [1334773 1296287]
  - [scsi] hpsa: check for a null phys_disk pointer in ioaccel2 path (Joseph Szczypek) [1334773 1296287]
  - [cpufreq] intel_pstate: Fix divide by zero on Knights Landing (Steve Best) [1334438 1273305]
  - [mm] hugetlbfs: optimize when NUMA=n (Rui Wang) [1334436 1274624]
  - [mm] hugetlb: use memory policy when available (Rui Wang) [1334436 1274624]
  - [mm] optimize put_mems_allowed() usage (Rui Wang) [1334436 1274624]
  - [x86] Mark Intel Knights Landing processor as supported (Steve Best) [1332991 1158238]
  - [block] virtio-blk: use VIRTIO_BLK_F_WCE and VIRTIO_BLK_F_CONFIG_WCE in virtio1 (Fam Zheng) [1327611 1266008]
  - [x86] mm: suitable memory should go to ZONE_MOVABLE (Igor Mammedov) [1327588 1265880]
  - [mm] memory-hotplug: add zone_for_memory() for selecting zone for new memory (Igor Mammedov) [1327588 1265880]
  - [s390] mm: Fix memory hotplug for unaligned standby memory (Igor Mammedov) [1327588 1265880]
  - [mm] memory-hotplug: Remove "weak" from memory_block_size_bytes() declaration (Igor Mammedov) [1327588 1265880]
  - [mm] Add prototype declaration to the header file (Igor Mammedov) [1327588 1265880]
  - [mm] hotplug: verify hotplug memory range (Igor Mammedov) [1327588 1265880]
  - [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1327587 1284936]
  - [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Xin Long) [1324748 1270586] {CVE-2015-8767}
  - [net] sctp: Whitespace fix (Xin Long) [1324748 1270586] {CVE-2015-8767}
  - [fs] xfs: fix splice/direct-IO deadlock (Bill O'Donnell) [1324098 824796]
  - [fs] vfs: split generic splice code from i_mutex locking (Bill O'Donnell) [1324098 824796]
  - [lib] keys: Fix ASN.1 indefinite length object parsing (David Howells) [1308814 1308815] {CVE-2016-0758}


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.23.1.el7]
changelog:
  - [net] af_unix: Guard against other == sk in unix_dgram_sendmsg (Jakub Sitnicki) [1337513 1285792]
  - [net] unix: avoid use-after-free in ep_remove_wait_queue (Paolo Abeni) [1337513 1285792]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.26.1.el7]
changelog:
  - [block] blk-mq: fix race between timeout and freeing request (David Milburn) [1347743 1288601]
  - [x86] nmi: Fix use of unallocated cpumask_var_t (Jerry Snitselaar) [1346176 1069217]
  - [x86] nmi: Perform a safe NMI stack trace on all CPUs (Jerry Snitselaar) [1346176 1069217]
  - [kernel] printk: Add per_cpu printk func to allow printk to be diverted (Jerry Snitselaar) [1346176 1069217]
  - [lib] seq: Add minimal support for seq_buf (Jerry Snitselaar) [1346176 1069217]
  - [fs] ovl: use a minimal buffer in ovl_copy_xattr (Vivek Goyal) [1347235 1306358]
  - [fs] ovl: allow zero size xattr (Vivek Goyal) [1347235 1306358]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.27.1.el7]
changelog:
  - [md] raid5: check_reshape() shouldn't call mddev_suspend (Jes Sorensen) [1344313 1312828]
  - [net] sctp: Potentially-Failed state should not be reached from unconfirmed state (Xin Long) [1347809 1333696]
  - [net] sctp: fix the transports round robin issue when init is retransmitted (Xin Long) [1347809 1333696]
  - [net] sctp: fix suboptimal edge-case on non-active active/retrans path selection (Xin Long) [1347809 1333696]
  - [net] sctp: spare unnecessary comparison in sctp_trans_elect_best (Xin Long) [1347809 1333696]
  - [net] sctp: improve sctp_select_active_and_retran_path selection (Xin Long) [1347809 1333696]
  - [net] sctp: migrate most recently used transport to ktime (Xin Long) [1347809 1333696]
  - [net] sctp: refactor active path selection (Xin Long) [1347809 1333696]
  - [net] sctp: remove NULL check in sctp_assoc_update_retran_path (Xin Long) [1347809 1333696]
  - [net] sctp: rework multihoming retransmission path selection to rfc4960 (Xin Long) [1347809 1333696]
  - [net] sctp: retran_path not set properly after transports recovering (Xin Long) [1347809 1333696]
  - [mm] memcg: fix endless loop caused by mem_cgroup_iter (Herton R. Krzesinski) [1344750 1297381]
  - [scsi] qla2xxx: Set relogin flag when we fail to queue login requests (Chad Dupuis) [1347344 1273080]
  - [x86] perf/x86/intel/uncore: Add Broadwell-EP uncore support (Jiri Olsa) [1347374 1259976]
  - [x86] perf/x86/intel/uncore: Add Broadwell-DE uncore support (Jiri Olsa) [1348063 1306834]
  - [lib] rhashtable: Do hashing inside of rhashtable_lookup_compare() (Phil Sutter) [1343639 1238749]
  - [s390] mm: four page table levels vs. fork (Hendrik Brueckner) [1341547 1308879] {CVE-2016-2143}
  - [firmware] dmi_scan: Fix UUID endianness for SMBIOS >= 2.6 (Prarit Bhargava) [1340118 1294461]
  - [misc] cxl: Export AFU error buffer via sysfs (Gustavo Duarte) [1343537 1275968]
  - [misc] cxl: Poll for outstanding IRQs when detaching a context (Alexander Gordeev) [1338886 1332487]
  - [misc] cxl: Keep IRQ mappings on context teardown (Alexander Gordeev) [1338886 1332487]
  - [netdrv] mlx4_en: Fix endianness bug in IPV6 csum calculation (kamal heib) [1337431 1325358]
  - [acpi] srat: fix SRAT parsing order with both LAPIC and X2APIC present (Prarit Bhargava) [1336821 1331394]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.28.1.el7]
changelog:
  - [netdrv] e1000: Double Tx descriptors needed check for 82544 (Jarod Wilson) [1349448 1274170]
  - [netdrv] e1000: Do not overestimate descriptor counts in Tx pre-check (Jarod Wilson) [1349448 1274170]
  - [scsi] 3w-9xxx: version string touch (Tomas Henzl) [1348833 1322447]
  - [scsi] 3w-9xxx: don't unmap bounce buffered commands (Tomas Henzl) [1348833 1322447]
  - [scsi] 3w-9xxx: fix command completion race (Tomas Henzl) [1348833 1322447]
  - [fs] gfs2: don't set rgrp gl_object until it's inserted into rgrp tree (Robert S Peterson) [1348829 1344363]
  - [fs] fanotify: fix notification of groups with inode & mount marks (Miklos Szeredi) [1348828 1308393]
  - [fs] ovl: fix permission checking for setattr (Vivek Goyal) [1293980 1293981]
  - [security] keys: potential uninitialized variable (David Howells) [1345935 1341352] {CVE-2016-4470}
  - [tty] Invert tty_lock/ldisc_sem lock order (Herton R. Krzesinski) [1336823 1327403]
  - [tty] Don't hold tty_lock for ldisc release (Herton R. Krzesinski) [1336823 1327403]
  - [tty] Reset hupped state on open (Herton R. Krzesinski) [1336823 1327403]
  - [tty] Fix hangup race with TIOCSETD ioctl (Herton R. Krzesinski) [1336823 1327403]
  - [tty] Clarify ldisc variable (Herton R. Krzesinski) [1336823 1327403]
  - [infiniband] security: Restrict use of the write() interface (Don Dutile) [1332553 1316685] {CVE-2016-4565}


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.28.2.el7]
changelog:
  - [net] bridge: include in6.h in if_bridge.h for struct in6_addr (Jiri Benc) [1331285 1268057]
  - [net] inet: defines IPPROTO_* needed for module alias generation (Jiri Benc) [1331285 1268057]
  - [net] sync some IP headers with glibc (Jiri Benc) [1331285 1268057]


author: Alexander Gordeev <agordeev@redhat.com> [3.10.0-327.28.3.el7]
changelog:
  - [net] tcp: enable per-socket rate limiting of all 'challenge acks' (Florian Westphal) [1355603 1355605] {CVE-2016-5696}
  - [net] tcp: uninline tcp_oow_rate_limited() (Florian Westphal) [1355603 1355605] {CVE-2016-5696}
  - [net] tcp: make challenge acks less predictable (Florian Westphal) [1355603 1355605] {CVE-2016-5696}


author: Robert Kuska <rkuska@redhat.com> - 2.7.5-32
changelog:
  - Backport SSLSocket.version function
  - Temporary disable test_gdb on ppc64le rhbz#1260558
  Resolves: rhbz#1259421


author: Tomas Orsava <torsava@redhat.com> - 2.7.5-36
changelog:
  - Fix for CVE-2016-0772 python: smtplib StartTLS stripping attack (rhbz#1303647)
    Raise an error when STARTTLS fails (upstream patch)
  - Fix for CVE-2016-5699 python: http protocol steam injection attack (rhbz#1303699)
    Disabled HTTP header injections in httplib (upstream patch)
  Resolves: rhbz#1346356


author: stephane de Labrusse <stephdl@de-labrusse.fr> 2.4.0-44.sme
changelog:
  - The mountpoint is tested before to do the console backup [SME: 9089]
  - added e-smith-backup-2.4.0.bz9089.Test_Backup_MountPoint.patch


author: Jean-Philipe Pialasse <tests@pialasse.com> 2.6.0-2.sme
changelog:
  - avoid restoration on every reboot[SME: 9436]
  - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
    by assuming the date is correct and changing the weekday.
    Thu Feb 14 2001 --> Thu Feb 08 2001 or Wed Feb 14 2001 or Thu Feb 15 2001 or ....
    Sat Dec 25 2005 --> Sat Dec 24 2005 or Sun Dec 25 2005 or Sat Dec 31 2005 or ....
    Sat Mar 07 2008 --> Sat Mar 01 2008 or Fri Mar 07 2008 or Sat Mar 08 2008 or ....
    Sat Oct 10 2010 --> Sat Oct 09 2010 or Sun Oct 10 2010 or Sat Oct 16 2010 or ....
    Tue Dec 02 2013 --> Tue Nov 26 2013 or Mon Dec 02 2013 or Tue Dec 03 2013 or ....
    Thu Mar 10 2014 --> Thu Mar 06 2014 or Mon Mar 10 2014 or Thu Mar 13 2014 or ....
    Fri Mar 11 2014 --> Fri Mar 07 2014 or Tue Mar 11 2014 or Fri Mar 14 2014 or ....


author: stephane de Labrusse <stephdl@de-labrusse.fr> 2.6.0-4.sme
changelog:
  - Add or remove path in your backup by a file *.include and *.exclude
  - Added e-smith-backup-2.6.0.Add_Or_Remove_Path_In_Backup.patch [SME: 9607]
  - Test if the remote host (cifs/nfs) is up, else save and display a warning.
  - Added e-smith-backup-2.6.0.bz9090.Testing_the_remote_host_parameters.patch [SME: 9090]
  - The 'tar backup to desktop' of the backup panel takes consideration of exclusion
  - Added e-smith-backup-2.6.0.Do_Tar_Exclusion_In_Panel.patch [SME: 9635]
  - The 'dar workstation backup' of the backup panel takes consideration of exclusion
  - Added e-smith-backup-2.6.0.Do_Dar_Exclusion.patch [SME: 9633]
  - The 'tar backup' of the console takes consideration of exclusion and display a page with the exclusion content
  - e-smith-backup-2.6.0.Do_Tar_Exclusion_In_the_console.patch [SME: 9635]


author: stephane de Labrusse <stephdl@de-labrusse.fr> 2.6.0-5.sme
changelog:
  - Remove the dar exclusion message in the email if there is no exclusion.
  - Modified e-smith-backup-2.6.0.Do_Dar_Exclusion.patch [SME: 9633]
  - Added two commented files backup.{include,exclude} in /etc/backup-data.d
  - Modified e-smith-backup-2.6.0.Add_Or_Remove_Path_In_Backup.patch [SME: 9607]


author: stephane de Labrusse <stephdl@de-labrusse.fr> 2.6.0-6.sme
changelog:
  - fixed bug on the dar catalog when backups are not added in it [SME: 9563]
  - Added e-smith-backup-2.6.0.bz9563.UpdateDarCatalogFollowingBackups.patch


