<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2">
<package pkgid="4e565b83672cc7e281dcc3e36480e3ef46e569c3" name="kernel-obs-build" arch="ppc64">
    <version epoch="0" ver="3.16.7" rel="37.1"/>

<changelog author="mkubecek@suse.cz" date="1449230400">- Update references of
  patches.fixes/ipv6-addrconf-validate-new-MTU-before-applying-it.patch
  (add bsc#955354 CVE-2015-8215).
- commit cba0017</changelog>
<changelog author="tiwai@suse.de" date="1449662400">- ALSA: hda - Fix noise problems on Thinkpad T440s (boo#958504).
- commit 297b944</changelog>
<changelog author="mmarek@suse.com" date="1449748800">- genksyms: Handle string literals with spaces in reference files (bsc#958510).
- commit c5fd1ab</changelog>
<changelog author="neilb@suse.com" date="1450094400">- KEYS: Make /proc/keys unconditional if CONFIG_KEYS=y
  (boo#956934).
- commit 9773f94</changelog>
<changelog author="oneukum@suse.com" date="1450353600">- cdrom: Random writing support for BD-RE media (bnc#959568).
- commit bfa4f1d</changelog>
<changelog author="jbeulich@suse.com" date="1450440000">- xen/pciback: Don't allow MSI-X ops if PCI_COMMAND_MEMORY is
  not set (bsc#957990 XSA-157).
- xen/pciback: For XEN_PCI_OP_disable_msi[|x] only disable
  if device has MSI(X) enabled (bsc#957990 CVE-2015-8551
  CVE-2015-8552 XSA-157).
- xen/pciback: Return error on XEN_PCI_OP_enable_msix when
  device has MSI or MSI-X enabled (bsc#957990 CVE-2015-8551
  CVE-2015-8552 XSA-157).
- xen/pciback: Return error on XEN_PCI_OP_enable_msi when
  device has MSI or MSI-X enabled (bsc#957990 CVE-2015-8551
  CVE-2015-8552 XSA-157).
- guarantee one time reads of shared ring contents (bsc#957988
  CVE-2015-8550 XSA-155).
- commit 8130b50</changelog>
<changelog author="jbohac@suse.cz" date="1450440001">- net: add validation for the socket syscall protocol argument
  (bsc#958886, CVE-2015-8543).
- commit e7df446</changelog>
<changelog author="bp@suse.de" date="1450526400">- bluetooth: Validate socket address length in sco_sock_bind()
  (bsc#959399, CVE-2015-8575).
- commit 58dbffd</changelog>
<changelog author="bp@suse.de" date="1450699200">- pptp: verify sockaddr_len in pptp_bind() and pptp_connect()
  (bsc#959190, CVE-2015-8569).
- commit 9d6c734</changelog>
<changelog author="oneukum@suse.com" date="1451908800">- Input: aiptek - fix crash on detecting device without endpoints
  (bnc#956708).
- commit d63cc64</changelog>
<changelog author="tiwai@suse.de" date="1453118400">- NFS: Fix a NULL pointer dereference of migration recovery ops
  for v4.2 client (bsc#960839).
- commit 0bddaca</changelog>
<changelog author="tiwai@suse.de" date="1453204800">- KVM: x86: update masterclock values on TSC writes (bsc#961739).
- commit c2d11b3</changelog>
<changelog author="jlee@suse.com" date="1453291200">- patches.fixes/keys-fix-leak.patch: (bnc#962075, CVE-2016-0728).
- commit f3cfd9f</changelog>
<changelog author="mkubecek@suse.cz" date="1453291201">- sctp: Prevent soft lockup when sctp_accept() is called during
  a timeout event (CVE-2015-8767 bsc#961509).
- commit 9a27648</changelog>
<changelog author="jlee@suse.com" date="1453291202">- KEYS: Fix race between read and revoke (bnc#958951,
  CVE-2015-7550).
- commit 79cfa19</changelog>
<changelog author="jeffm@suse.com" date="1453723200">- Delete patches.fixes/tulip-quad-NIC-ifdown.
  The original bug that this patch fixed was addressed in 2004, in v2.6.10
  (6379dd57 of linux-2.6-bk), but pci_disable_device was still required to
  shut down the device.
  Commit c321f7d7c87 in v3.14 added the pci_disable_device at the end of
  tulip_remove_one just far enough out of context so that this patch still
  applied.
- commit e740751</changelog>
<changelog author="acho@suse.com" date="1453809600">- Bluetooth: ath3k: workaround the compatibility issue with xHCI
  controller (bnc#907378).
- commit 4301e68</changelog>
<changelog author="jslaby@suse.cz" date="1453809601">- n_tty: Fix unsafe reference to "other" ldisc (bnc#961500
  CVE-2016-0723).
- tty: Fix unsafe ldisc reference via ioctl(TIOCGETD) (bnc#961500
  CVE-2016-0723).
- commit c6de32b</changelog>
<changelog author="mhocko@suse.cz" date="1453982400">- x86/mm: Add barriers and document switch_mm()-vs-flush
  synchronization (bnc#963767, CVE-2016-2069).
- commit 8cf960e</changelog>
<changelog author="tiwai@suse.de" date="1454673600">- kABI fix for addition of user_namespace.flags field (bnc#965308,
  bnc#965356).
- userns: Allow setting gid_maps without privilege when setgroups
  is disabled (bnc#965308, bnc#965356).
- userns: Add a knob to disable setgroups on a per user namespace
  basis (bnc#965308, bnc#965356).
- userns: Rename id_map_mutex to userns_state_mutex (bnc#965308,
  bnc#965356).
- commit 7400518</changelog>

</package>

<package pkgid="76010d93b79071305d4ddc97176edd49bdf92ee0" name="kernel-obs-build" arch="src">
    <version epoch="0" ver="3.16.7" rel="37.1"/>

<changelog author="mkubecek@suse.cz" date="1449230400">- Update references of
  patches.fixes/ipv6-addrconf-validate-new-MTU-before-applying-it.patch
  (add bsc#955354 CVE-2015-8215).
- commit cba0017</changelog>
<changelog author="tiwai@suse.de" date="1449662400">- ALSA: hda - Fix noise problems on Thinkpad T440s (boo#958504).
- commit 297b944</changelog>
<changelog author="mmarek@suse.com" date="1449748800">- genksyms: Handle string literals with spaces in reference files (bsc#958510).
- commit c5fd1ab</changelog>
<changelog author="neilb@suse.com" date="1450094400">- KEYS: Make /proc/keys unconditional if CONFIG_KEYS=y
  (boo#956934).
- commit 9773f94</changelog>
<changelog author="oneukum@suse.com" date="1450353600">- cdrom: Random writing support for BD-RE media (bnc#959568).
- commit bfa4f1d</changelog>
<changelog author="jbeulich@suse.com" date="1450440000">- xen/pciback: Don't allow MSI-X ops if PCI_COMMAND_MEMORY is
  not set (bsc#957990 XSA-157).
- xen/pciback: For XEN_PCI_OP_disable_msi[|x] only disable
  if device has MSI(X) enabled (bsc#957990 CVE-2015-8551
  CVE-2015-8552 XSA-157).
- xen/pciback: Return error on XEN_PCI_OP_enable_msix when
  device has MSI or MSI-X enabled (bsc#957990 CVE-2015-8551
  CVE-2015-8552 XSA-157).
- xen/pciback: Return error on XEN_PCI_OP_enable_msi when
  device has MSI or MSI-X enabled (bsc#957990 CVE-2015-8551
  CVE-2015-8552 XSA-157).
- guarantee one time reads of shared ring contents (bsc#957988
  CVE-2015-8550 XSA-155).
- commit 8130b50</changelog>
<changelog author="jbohac@suse.cz" date="1450440001">- net: add validation for the socket syscall protocol argument
  (bsc#958886, CVE-2015-8543).
- commit e7df446</changelog>
<changelog author="bp@suse.de" date="1450526400">- bluetooth: Validate socket address length in sco_sock_bind()
  (bsc#959399, CVE-2015-8575).
- commit 58dbffd</changelog>
<changelog author="bp@suse.de" date="1450699200">- pptp: verify sockaddr_len in pptp_bind() and pptp_connect()
  (bsc#959190, CVE-2015-8569).
- commit 9d6c734</changelog>
<changelog author="oneukum@suse.com" date="1451908800">- Input: aiptek - fix crash on detecting device without endpoints
  (bnc#956708).
- commit d63cc64</changelog>
<changelog author="tiwai@suse.de" date="1453118400">- NFS: Fix a NULL pointer dereference of migration recovery ops
  for v4.2 client (bsc#960839).
- commit 0bddaca</changelog>
<changelog author="tiwai@suse.de" date="1453204800">- KVM: x86: update masterclock values on TSC writes (bsc#961739).
- commit c2d11b3</changelog>
<changelog author="jlee@suse.com" date="1453291200">- patches.fixes/keys-fix-leak.patch: (bnc#962075, CVE-2016-0728).
- commit f3cfd9f</changelog>
<changelog author="mkubecek@suse.cz" date="1453291201">- sctp: Prevent soft lockup when sctp_accept() is called during
  a timeout event (CVE-2015-8767 bsc#961509).
- commit 9a27648</changelog>
<changelog author="jlee@suse.com" date="1453291202">- KEYS: Fix race between read and revoke (bnc#958951,
  CVE-2015-7550).
- commit 79cfa19</changelog>
<changelog author="jeffm@suse.com" date="1453723200">- Delete patches.fixes/tulip-quad-NIC-ifdown.
  The original bug that this patch fixed was addressed in 2004, in v2.6.10
  (6379dd57 of linux-2.6-bk), but pci_disable_device was still required to
  shut down the device.
  Commit c321f7d7c87 in v3.14 added the pci_disable_device at the end of
  tulip_remove_one just far enough out of context so that this patch still
  applied.
- commit e740751</changelog>
<changelog author="acho@suse.com" date="1453809600">- Bluetooth: ath3k: workaround the compatibility issue with xHCI
  controller (bnc#907378).
- commit 4301e68</changelog>
<changelog author="jslaby@suse.cz" date="1453809601">- n_tty: Fix unsafe reference to "other" ldisc (bnc#961500
  CVE-2016-0723).
- tty: Fix unsafe ldisc reference via ioctl(TIOCGETD) (bnc#961500
  CVE-2016-0723).
- commit c6de32b</changelog>
<changelog author="mhocko@suse.cz" date="1453982400">- x86/mm: Add barriers and document switch_mm()-vs-flush
  synchronization (bnc#963767, CVE-2016-2069).
- commit 8cf960e</changelog>
<changelog author="tiwai@suse.de" date="1454673600">- kABI fix for addition of user_namespace.flags field (bnc#965308,
  bnc#965356).
- userns: Allow setting gid_maps without privilege when setgroups
  is disabled (bnc#965308, bnc#965356).
- userns: Add a knob to disable setgroups on a per user namespace
  basis (bnc#965308, bnc#965356).
- userns: Rename id_map_mutex to userns_state_mutex (bnc#965308,
  bnc#965356).
- commit 7400518</changelog>

</package>

</otherdata>