<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="78">
<package pkgid="5a5b4c37421da10eecc241003677926a62c9383e59b3d2fb5f9735ad27e1e08b" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.36.0" rel="7.el8_6"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.36.0-0.7" date="1643371200">- Upgrade to 1.35.7 release (development)
- core: fix crash related to DHCPv6 leases (rh #2028849)
- wifi: fix stale ActiveAccessPoint in D-Bus (rh #1983747)
- libnm: fix dangling pointer in NMObject (rh #2039331)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.36.0-0.8" date="1643976000">- Upgrade to 1.35.91 release (release candidate)
- bond: fix duplicate IPv4 address detection (rh #2028751)
- core: add support for blackhole routes (rh #1937823) (rh #2013587)
- core: re-assess IP configuration if one IP family times out (rh #2051904)
- ovs: remove ovsdb entry on interface removal (rh #2047302)
- ovs: properly clean up devices on daemon shutdown (rh #2029937)
- core: avoid losing addresses on handover from initrd to ral root (rh #2047302)
- core: fix a possibe assertion failure in ACD (rh #2047788)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.36.0-0.9" date="1645272000">- revert: generate docs during build instead of using pre-generated (rh #1995915)
- Upgrade to 1.35.92 (release candidate)
- ppp: increase disconnect timeout (rh #2049596)
- core: finish activation after all objects are committed (rh #2043133)
- ipv6: add support for multipath routes (rh #1837254)
- keyfile: do not write empty string list properties (rh #2022623)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.36.0-1" date="1645704000">- Upgrade to 1.36.0 release
- core: avoid losing L3 configuration the second time it's applied (rh #2043514)
- ovs: avoid removing OVSDB entries on daemon shutdown (rh #2055665)
- nmcli: fix defaults for some properties on interactive add (rh #2053603)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.36.0-2" date="1646049600">- core: fix setting DNS from WWAN and PPP (rh #2059138)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.36.0-3" date="1647000000">- core: preserve external bridge ports during checkpoint rollback (rh #2035519)
- ovs-port: fix removal of ovsdb entry if the interface goes away (rh #1935026)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.0-4" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2059673)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.0-5" date="1653480000">- Fix DHCP loses lease when restarting (rh #2090280)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.36.0-6" date="1654603200">- core: set "src" attribute for routes from DHCPv4 (rh #2092807)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.0-7" date="1654776000">- platform: workaround for preserving IPv6 address order (rh #2090280)</changelog>
</package>
<package pkgid="0fff97f911be496d963b56a4019cf37207e4a250770f087478c9f1cdd5f6c399" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.36.0" rel="9.el8_6"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.36.0-0.9" date="1645272000">- revert: generate docs during build instead of using pre-generated (rh #1995915)
- Upgrade to 1.35.92 (release candidate)
- ppp: increase disconnect timeout (rh #2049596)
- core: finish activation after all objects are committed (rh #2043133)
- ipv6: add support for multipath routes (rh #1837254)
- keyfile: do not write empty string list properties (rh #2022623)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1:1.36.0-1" date="1645704000">- Upgrade to 1.36.0 release
- core: avoid losing L3 configuration the second time it's applied (rh #2043514)
- ovs: avoid removing OVSDB entries on daemon shutdown (rh #2055665)
- nmcli: fix defaults for some properties on interactive add (rh #2053603)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.36.0-2" date="1646049600">- core: fix setting DNS from WWAN and PPP (rh #2059138)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.36.0-3" date="1647000000">- core: preserve external bridge ports during checkpoint rollback (rh #2035519)
- ovs-port: fix removal of ovsdb entry if the interface goes away (rh #1935026)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.0-4" date="1647864000">- n-dhcp4: discard NAKs from different servers in SELECTING (rh #2059673)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.0-5" date="1653480000">- Fix DHCP loses lease when restarting (rh #2090280)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.36.0-6" date="1654603200">- core: set "src" attribute for routes from DHCPv4 (rh #2092807)</changelog>
  <changelog author="Fernando Fernandez Mancera &lt;ferferna@redhat.com&gt; - 1:1.36.0-7" date="1654776000">- platform: workaround for preserving IPv6 address order (rh #2090280)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.36.0-8" date="1658750400">- dhcp: fix "selecting lease failed" problem after receiving a NAK (rh #2105088)
- core: fix memory leak when removing devices (rh #2105974)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.36.0-9" date="1664452800">- core: update DNS when the device enters IP_CONFIG state (rh #2100456)</changelog>
</package>
<package pkgid="e5b46df13321012cf45a7c84b67d5881e1887b5c2aadf6cd2d9ecb53b383fb28" name="alsa-sof-firmware" arch="src">
  <version epoch="0" ver="1.9.3" rel="4.el8_6"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.4.2-2" date="1587470400">- Initial version (Open Sound Firmware v1.4.2)</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.5-2" date="1591617600">- Update to v1.5</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.6-1" date="1605096000">- Update to v1.6 (Oct 13)</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.6-2" date="1607601600">- Update to v1.6 (Dec 9)</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.6.1-1" date="1609675200">- Update to v1.6.1</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.8-1" date="1626955200">- Update to v1.8
- Add SST Skylake HDA topology binary</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.9-1" date="1635249600">- Update to v1.9</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.9.2-1" date="1637668800">- Update to v1.9.2</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.9.3-1" date="1639656000">- Update to v1.9.3</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.9.3-4" date="1652270400">- Add sof-adl-rt711-l2-rt1316-l01.tplg topology file</changelog>
</package>
<package pkgid="2170d528af8ed26f797128af129bd941c7c105cd532771e52887737e3cf8f18c" name="bash" arch="src">
  <version epoch="0" ver="4.4.20" rel="4.el8_6"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.4.19-9" date="1562760000">- Fix `$$` expansion in subshell
  Resolves: #1727952</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.4.19-10" date="1566475200">- Fix runtime option to enable history logging to syslog
  Related: #1687835</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.4.19-11" date="1592827200">- Drop saved UID when effective UID is not equal to its real UID
  Resolves: #1793943</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.4.19-12" date="1592827201">- Avoid duplicating user path entries
  Resolves: #1667008</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.4.19-13" date="1602244800">- Correctly drop saved UID when effective UID is not equal to its real UID
  Resolves: #1793943</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.4.19-14" date="1604491200">- Fix hang when limit for nproc is very high
  Resolves: #1890888</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.4.20-1" date="1616760000">- Fix infinite loop in long running scripts
  Resolves: #1943495</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.4.20-2" date="1627300800">- Fix crash if a timestamp in a history file overflowed a time_t
  Resolves: #1794884</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.4.20-3" date="1633003200">- Bump version number
  Resolves: #2004189</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.4.20-4" date="1649160000">- Fix a crash in buffered_getchar() function
  Resolves: #2062291</changelog>
</package>
<package pkgid="e819dfc1f8cd6dad387d02240222e677238a0c3df458a90b22b63bf01b4d9328" name="bind" arch="src">
  <version epoch="32" ver="9.11.36" rel="3.el8_6.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-4" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)
- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-5" date="1620388800">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1953056)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-6" date="1625832000">- Use random entropy to generate unique TKEY identifiers (#1980916)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-7" date="1629806400">- Do not request softhsm from bind-pkcs11, it is only in modular build
  (#1934035)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-8" date="1634126400">- Propagate ephemeral port ranges to chroot (#1950714)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.26-9" date="1635768000">- Correct tsig system test</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-1" date="1635768001">- Update to 9.11.36</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-2" date="1640088000">- Rebuilt on a new side-tag (#2013993)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-3" date="1644494400">- Reduce memory used per-view on machine with few processors (#2030239)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.36-3.1" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="26ab619effb180fcd1c5e63ac86482bf7a246fb567badb3f0b8e2e28787fe720" name="ca-certificates" arch="src">
  <version epoch="0" ver="2022.2.54" rel="80.2.el8_6"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-1" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-  Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "ComSign CA"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-81" date="1591790400">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-82" date="1592395200">- fix post issues</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-81" date="1623153600">- Update to CKBI 2.48 from NSS 3.64
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-82" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Trustis FPS Root CA"
-    Adding:
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-82" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-81" date="1657540800">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "GlobalSign Root CA - R2"
-     # Certificate "DST Root CA X3"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
-    Adding:
-     # Certificate "TunTrust Root CA"
-     # Certificate "HARICA TLS RSA Root CA 2021"
-     # Certificate "HARICA TLS ECC Root CA 2021"
-     # Certificate "HARICA Client RSA Root CA 2021"
-     # Certificate "HARICA Client ECC Root CA 2021"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "vTrus ECC Root CA"
-     # Certificate "vTrus Root CA"
-     # Certificate "ISRG Root X2"
-     # Certificate "HiPKI Root CA - G1"
-     # Certificate "Telia Root CA v2"
-     # Certificate "D-TRUST BR Root CA 1 2020"
-     # Certificate "D-TRUST EV Root CA 1 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-80.0" date="1657886400">- Update to CKBI 2.54 from NSS 3.79
-    Adding:
-     # Certificate "CAEDICOM Root"
-     # Certificate "I.CA Root CA/RSA"
-     # Certificate "MULTICERT Root Certification Authority 01"
-     # Certificate "Certification Authority of WoSign G2"
-     # Certificate "CA WoSign ECC Root"
-     # Certificate "CCA India 2015 SPL"
-     # Certificate "Swedish Government Root Authority v3"
-     # Certificate "Swedish Government Root Authority v2"
-     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "OpenTrust Root CA G2"
-     # Certificate "OpenTrust Root CA G3"
-     # Certificate "Certplus Root CA G1"
-     # Certificate "Certplus Root CA G2"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Thailand National Root Certification Authority - G1"
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Certification Authority of WoSign"
-     # Certificate "CA 沃通根证书"
-     # Certificate "SSC GDL CA Root B"
-     # Certificate "SAPO Class 2 Root CA"
-     # Certificate "SAPO Class 3 Root CA"
-     # Certificate "SAPO Class 4 Root CA"
-     # Certificate "CA Disig Root R1"
-     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
-     # Certificate "ApplicationCA2 Root"
-     # Certificate "GlobalSign"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Halcom Root CA"
-     # Certificate "Swisscom Root EV CA 2"
-     # Certificate "CFCA GT CA"
-     # Certificate "Digidentity L3 Root CA - G2"
-     # Certificate "SITHS Root CA v1"
-     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "IGC/A AC racine Etat francais"
-     # Certificate "PersonalID Trustworthy RootCA 2011"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "Swiss Government Root CA II"
-     # Certificate "Swiss Government Root CA I"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "LuxTrust Global Root"
-     # Certificate "AC1 RAIZ MTIN"
-     # Certificate "Microsoft Root Certificate Authority 2011"
-     # Certificate "CCA India 2011"
-     # Certificate "ANCERT Certificados Notariales V2"
-     # Certificate "ANCERT Certificados CGN V2"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "China Internet Network Information Center EV Certificates Root"
-     # Certificate "Verizon Global Root CA"
-     # Certificate "SwissSign Silver Root CA - G3"
-     # Certificate "SwissSign Platinum Root CA - G3"
-     # Certificate "SwissSign Gold Root CA - G3"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "SITHS CA v3"
-     # Certificate "Certinomis - Autorité Racine"
-     # Certificate "ANF Server CA"
-     # Certificate "Thawte Premium Server CA"
-     # Certificate "Thawte Server CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "KEYNECTIS ROOT CA"
-     # Certificate "I.CA - Standard Certification Authority, 09/2009"
-     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
-     # Certificate "VI Registru Centras RCSC (RootCA)"
-     # Certificate "CCA India 2007"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Actalis Authentication CA G1"
-     # Certificate "A-Trust-Qual-03"
-     # Certificate "AddTrust External CA Root"
-     # Certificate "ECRaizEstado"
-     # Certificate "Configuration"
-     # Certificate "FNMT-RCM"
-     # Certificate "StartCom Certification Authority"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "E-ME SSI (RCA)"
-     # Certificate "ACEDICOM Root"
-     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
-     # Certificate "Correo Uruguayo - Root CA"
-     # Certificate "CNNIC ROOT"
-     # Certificate "Common Policy"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "Cisco Root CA 2048"
-     # Certificate "CA Disig"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "UCA Global Root"
-     # Certificate "UCA Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Starfield Services Root Certificate Authority"
-     # Certificate "I.CA - Qualified root certificate"
-     # Certificate "I.CA - Standard root certificate"
-     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
-     # Certificate "Japanese Government"
-     # Certificate "AdminCA-CD-T01"
-     # Certificate "Admin-Root-CA"
-     # Certificate "Izenpe.com"
-     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
-     # Certificate "Halcom CA FO"
-     # Certificate "Halcom CA PO 2"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "ACNLB"
-     # Certificate "state-institutions"
-     # Certificate "state-institutions"
-     # Certificate "SECOM Trust Systems CO.,LTD."
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "D-TRUST Root Class 2 CA 2007"
-     # Certificate "D-TRUST Root Class 3 CA 2007"
-     # Certificate "SSC Root CA A"
-     # Certificate "SSC Root CA B"
-     # Certificate "SSC Root CA C"
-     # Certificate "Autoridad de Certificacion de la Abogacia"
-     # Certificate "Root CA Generalitat Valenciana"
-     # Certificate "VAS Latvijas Pasts SSI(RCA)"
-     # Certificate "ANCERT Certificados CGN"
-     # Certificate "ANCERT Certificados Notariales"
-     # Certificate "ANCERT Corporaciones de Derecho Publico"
-     # Certificate "GLOBALTRUST"
-     # Certificate "Certipost E-Trust TOP Root CA"
-     # Certificate "Certipost E-Trust Primary Qualified CA"
-     # Certificate "Certipost E-Trust Primary Normalised CA"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "GlobalSign"
-     # Certificate "IGC/A"
-     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "Swisscom Root CA 1"
-     # Certificate "Microsec e-Szigno Root CA"
-     # Certificate "LGPKI"
-     # Certificate "AC RAIZ DNIE"
-     # Certificate "Common Policy"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 1"
-     # Certificate "KISA RootCA 3"
-     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Staat der Nederlanden Root CA"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Global CA 2"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root Certification Authority"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Microsoft Root Authority"
-     # Certificate "Microsoft Root Certificate Authority"
-     # Certificate "Microsoft Root Certificate Authority 2010"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "UTN-USERFirst-Object"
-     # Certificate "BYTE Root Certification Authority 001"
-     # Certificate "CISRCA1"
-     # Certificate "ePKI Root Certification Authority - G2"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "SSL.com EV Root Certification Authority RSA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "ACA ROOT"
-     # Certificate "Security Communication ECC RootCA1"
-     # Certificate "Security Communication RootCA3"
-     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
-     # Certificate "Network Solutions RSA Certificate Authority"
-     # Certificate "Network Solutions ECC Certificate Authority"
-     # Certificate "Australian Defence Public Root CA"
-     # Certificate "SI-TRUST Root"
-     # Certificate "Halcom Root Certificate Authority"
-     # Certificate "Application CA G3 Root"
-     # Certificate "GLOBALTRUST 2015"
-     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
-     # Certificate "emSign Root CA - G2"
-     # Certificate "emSign Root CA - C2"
-     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
-     # Certificate "DigiCert CS ECC P384 Root G5"
-     # Certificate "DigiCert CS RSA4096 Root G5"
-     # Certificate "DigiCert RSA4096 Root G5"
-     # Certificate "DigiCert ECC P384 Root G5"
-     # Certificate "HARICA Code Signing RSA Root CA 2021"
-     # Certificate "HARICA Code Signing ECC Root CA 2021"
-     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-80.1" date="1658923200">- Update to CKBI 2.54 from NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-80.2" date="1659009600">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "Izenpe.com"
-     # Certificate "state-institutions"
-     # Certificate "GlobalSign"
-     # Certificate "Common Policy"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "AC Raíz Certicámara S.A."</changelog>
</package>
<package pkgid="3c4c2c10e03bff6dc1f7b6efc7bcab9cbd9bb0fb1667e6cc14903b9054360e83" name="cockpit" arch="src">
  <version epoch="0" ver="264.2" rel="1.el8_6"/>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 255-1" date="1634212800">- Restrict frame embedding to same origin (rhbz#1984902, CVE-2021-3660)
- kdump: Show "Directory" field for NFS mounts (rbhz#2004041)</changelog>
  <changelog author="Katerina Koukiou &lt;kkoukiou@redhat.com&gt; - 257-1" date="1636545600">- Support for reading TLS certificates with any permissions
- cockpit-ws no longer supports merged certificates
- Services: Show user-owned systemd units (rhbz#1792270)</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 258-1" date="1637841600">- Tweak login screen UI
- Fix SELinux policy installation</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 259-1" date="1639396800">- Translation updates</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 260-1" date="1641297600">- Certificate login validation (rhbz#1992620, CVE-2021-3698)
- Client: Show previously used hosts
- Client: Support port specification
- bridge: Warning on missing cockpit-system package</changelog>
  <changelog author="Matej Marusak &lt;mmarusak@redhat.com&gt; - 261-1" date="1643112000">- shell: Allow adding keys with passphrase</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 263-1" date="1645099200">- Overview: Show scheduled shutdowns
- Networking: Add firewall service description
- Shell: Fix browser history</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 264-1" date="1645790400">- Metrics: Improve layout on small resolutions
 - Networking: Fix checkpoint handling and IP settings dialog (rhbz#2056386)
 - Services: Show error message instead of eternal "Loading..." state
 - Accounts: Add override button to confirm weak password
 - Accounts: Fix parsing of "last login" date</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 264.1-1" date="1646308800">- metrics: Fix link construction for user services
- Translation updates (rhbz#2016998)</changelog>
  <changelog author="Martin Pitt &lt;mpitt@redhat.com&gt; - 264.2-1" date="1663934400">- login: Use valid selectors when testing for :is() / :where() support (rhbz#2129055)
- Don't run sudo without explicit request (rhbz#2129058)</changelog>
</package>
<package pkgid="0f3648aaa2471b9cf513fc1ac772d2fb6b6b60d985ee88b23f4f9ef4ab752d57" name="cups" arch="src">
  <version epoch="1" ver="2.2.6" rel="45.el8_6.2"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.2.6-38" date="1590494400">- 1775590 - rastertoepson filter crashes with paper size A6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.2.6-39" date="1620216000">- 1941437 - cupsd doesn't log job ids when logging into journal
- 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP
- 1938384 - CUPS doesn't start if sssd starts after cupsd</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.2.6-40" date="1620993600">- 1955964 - PreserveJobHistory doesn't work with seconds
- 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.2.6-41" date="1635940800">- 2006987 - Unauthenticated users can't move print jobs in Web UI
- 2017919 - Setting 'MaxJobTime 0' does not set a job time to unlimited
- 1726383 - "lpadmin -p &lt;queue&gt; -o cupsSNMPSupplies:false" doesn't work
- 1982891 - Printing of banner before PCL file only prints banner
- 2006591 - Trying to restart and hold a job doesn't work
- 1811716 - lpr to non-existent printer reports incorrect error</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.2.6-42" date="1638187200">- 2015182 - RFE: Implement IdleExitTimeout configuration during build</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.2.6-42" date="1639656000">- 2013865 - RFE: Implement TimeoutStartSec configuration during build</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.2.6-43" date="1641470400">- 2032965 - [RFE] RHEL8 - CUPS Web UI supports adding IPP Everywhere</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.2.6-44" date="1642593600">- 2015182 - RFE: Implement IdleExitTimeout configuration during build</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.2.6-45.1" date="1649505600">- 2073531 - 30-second delays printing to Windows 2016 server via HTTPS</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:2.2.6-45.2" date="1653566400">- CVE-2022-26691 cups: authorization bypass when using "local" authorization</changelog>
</package>
<package pkgid="198c63a0143194bdb98987b39d95fb66762f15107f9cec1a1ede569ceb8c7732" name="curl" arch="src">
  <version epoch="0" ver="7.61.1" rel="22.el8_6.3"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-16" date="1604664000">- fix multiarch conflicts in libcurl-minimal (#1895391)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-17" date="1605182400">- validate an ssl connection using an intermediate certificate (#1895355)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22.el8_6.1" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22.el8_6.2" date="1651665600">- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22.el8_6.3" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)</changelog>
</package>
<package pkgid="56d8715cc15b8047daa946c515aa9f5bcd0b5d685c6a6b0710a457978b54ecb0" name="curl" arch="src">
  <version epoch="0" ver="7.61.1" rel="22.el8_6.4"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-17" date="1605182400">- validate an ssl connection using an intermediate certificate (#1895355)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-18" date="1611835200">- http: send payload when (proxy) authentication is done (#1918692)
- curl: Inferior OCSP verification (CVE-2020-8286)
- libcurl: FTP wildcard stack overflow (CVE-2020-8285)
- curl: trusting FTP PASV responses (CVE-2020-8284)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-19" date="1619179200">- make `curl --head file://` work as expected (#1947493)
- prevent automatic referer from leaking credentials (CVE-2021-22876)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-20" date="1619179201">- fix a cppcheck's false positive in 0029-curl-7.61.1-CVE-2021-22876.patch</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-21" date="1628164800">- fix TELNET stack contents disclosure again (CVE-2021-22925)
- fix TELNET stack contents disclosure (CVE-2021-22898)
- fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
- disable metalink support to fix the following vulnerabilities
    CVE-2021-22923 - metalink download sends credentials
    CVE-2021-22922 - wrong content via metalink not discarded</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22" date="1631880000">- fix STARTTLS protocol injection via MITM (CVE-2021-22947)
- fix protocol downgrade required TLS bypass (CVE-2021-22946)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22.el8_6.1" date="1651147200">- fix credential leak on redirect (CVE-2022-27774)
- fix auth/cookie leak on redirect (CVE-2022-27776)
- fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22.el8_6.2" date="1651665600">- fix invalid type in printf() argument detected by Coverity</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22.el8_6.3" date="1652270400">- fix too eager reuse of TLS and SSH connections (CVE-2022-27782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.61.1-22.el8_6.4" date="1656504000">- fix HTTP compression denial of service (CVE-2022-32206)
- fix FTP-KRB bad message verification (CVE-2022-32208)</changelog>
</package>
<package pkgid="0e66cbeb69ec7ab1a29e83caa9422aea2229eb3c79ba9bd0fa184a38065badca" name="dbus" arch="src">
  <version epoch="1" ver="1.12.8" rel="18.el8_6.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-10" date="1586174400">- Improve permissions on ghosted /run/dbus (#1797833)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-11" date="1593518400">- Fix CVE-2020-12049 (#1851997)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-12" date="1606132800">- Install X11 SSH forwarding snippets (#1874282)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-13" date="1616500800">- Fix raising hard fd limit (#1839753)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-14" date="1619524800">- Fix dbus-launch call in sh snippet (#1940348)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-15" date="1622030400">- Packaging updates from Fedora (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-16" date="1623326400">- Add Conflicts on older redhat-release versions (#1941642)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1:1.12.8-17" date="1636372800">- Improve SSH session bus starting (#1940067)</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.12.8-18" date="1638792000">- Ensure session bus started for SSH sessions gets used by those
  sessions.
  Related: #1940067</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1:1.12.8-18.1" date="1655380800">- Ensure SSH session monitoring script is cleaned up when the
  session exits.
  Resolves: #2097784</changelog>
</package>
<package pkgid="602ceeb3cb76010cfd7530b0f5625e226b44b866eb1e40aef448d45c8d5cba2d" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.8.4" rel="22.el8_6.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-14" date="1626091200">- Add 0072-RH-mpathconf-correctly-handle-spaces-after-option-na.patch
- Resolves: bz #1979470</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-15" date="1626955200">- Add 0073-multipath.conf-fix-typo-in-checker_timeout-descripti.patch
- Resolves: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-16" date="1626955201">- Add missing patch
- Related: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17" date="1627041600">- Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
  * Fixes bz #1984723
- Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
  * Fixes bz #1973592
- Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
  * Found by coverity
- Resolves: bz #1973592, #1984723</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-18" date="1633608000">- Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
  * Fixes bz #2008101
- Add 0078-libmulitpath-add-section-name-to-invalid-keyword-out.patch
  * Fixes bz #1918150
- Resolves: bz #1918150, #2008101</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-19" date="1635422400">- Fix multipath_conf_syntax test to work with bz #1918150
- Resolves: bz #1918150</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-20" date="1637236800">- Add 0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
- Add 0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
- Add 0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
- Add 0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
- Add 0083-libmultipath-improve-checks-for-set_str.patch
- Add 0084-libmultipath-split-set_int-to-enable-reuse.patch
- Add 0085-libmultipath-cleanup-invalid-config-handling.patch
- Add 0086-libmultipath-don-t-return-error-on-invalid-values.patch
  * Above 8 patches fix bz #1900595
- Add 0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
  * Fixes bz #2009624
- Resolves: bz #1900595, #2009624, #2021823</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-21" date="1642507200">- Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
- Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
- Resolves: bz #1862032</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22.1" date="1654603200">- Add 0091-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
- Resolves: bz #2094472</changelog>
</package>
<package pkgid="78a287d89edbe36a12d46a0949b2afc4c8e0ba21fdf7f9feccaedc9eb0625bf4" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.8.4" rel="22.el8_6.2"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-15" date="1626955200">- Add 0073-multipath.conf-fix-typo-in-checker_timeout-descripti.patch
- Resolves: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-16" date="1626955201">- Add missing patch
- Related: bz #1982598</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-17" date="1627041600">- Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
  * Fixes bz #1984723
- Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
  * Fixes bz #1973592
- Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
  * Found by coverity
- Resolves: bz #1973592, #1984723</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-18" date="1633608000">- Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
  * Fixes bz #2008101
- Add 0078-libmulitpath-add-section-name-to-invalid-keyword-out.patch
  * Fixes bz #1918150
- Resolves: bz #1918150, #2008101</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-19" date="1635422400">- Fix multipath_conf_syntax test to work with bz #1918150
- Resolves: bz #1918150</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-20" date="1637236800">- Add 0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
- Add 0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
- Add 0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
- Add 0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
- Add 0083-libmultipath-improve-checks-for-set_str.patch
- Add 0084-libmultipath-split-set_int-to-enable-reuse.patch
- Add 0085-libmultipath-cleanup-invalid-config-handling.patch
- Add 0086-libmultipath-don-t-return-error-on-invalid-values.patch
  * Above 8 patches fix bz #1900595
- Add 0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
  * Fixes bz #2009624
- Resolves: bz #1900595, #2009624, #2021823</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-21" date="1642507200">- Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
- Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
- Resolves: bz #1862032</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22" date="1644235200">- Add 0090-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
- Resolves: bz #1981240</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22.1" date="1654603200">- Add 0091-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
- Resolves: bz #2094472</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.8.4-22.2" date="1665662400">- Add 0092-multipathd-ignore-duplicated-multipathd-command-keys.patch
- Resolves: bz #2133994</changelog>
</package>
<package pkgid="3a41194a9ea5918e1d3dc4a3eab3825624b76df3de52a763cdee0ec40c32857f" name="dracut" arch="src">
  <version epoch="0" ver="049" rel="202.git20220511.el8_6"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-133.git20210112" date="1610452800">- 95fcoe: Fix startup when fcoe module is included
- Fix pre-trigger stage by replacing exit with return in</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-134.git20210114" date="1610625600">- spec: dracut-network is happy with either NM or dhclient</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-135.git20210121" date="1611230400">- 95fcoe: default rd.nofcoe to false</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-136.git20210426" date="1619438400">- Remove stratis module</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-151.git20210719" date="1626696000">- Drop 51-dracut-rescue-postinst.sh entirely
- fix(fips): add dh and ecdh ciphers
- 35network-legacy: discard pointless RTNETLINK message
- 95fcoe: don't install if there is no FCoE hostonly devices
- 95nfs: set correct ownership and permissions for statd 
- fix(dracut.sh): harden dracut against GZIP environment
- fix(multipath): stop multipath before udev db cleanup
- fix(dracut-functions): implement a cache for get_maj_min
- fix(dracut-functions): get_maj_min without
- fix(fcoe): rd.nofcoe=0 should disable fcoe
- fix(fcoe): rename rd.nofcoe to rd.fcoe
- fix(mdraid): remove offroot
- fix(mdraid): add grow continue service
- net-lib.sh: support infiniband network mac addresses
- 95nvmf: add nvmf-autoconnect script</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-188.git20210802" date="1627905600">- dracut-functions: fix botched backport
- squash: unsquash the root image instead of mounting it on
- 99squash: fail early if can't install require modules in
- 99squash: Don't hardcode the squash sub directories
- 99squash: improve pre-requirements check
- Fixed some SUSE specific typos and outputs
- 99squash: simplify the code
- 99squash: Check require module earlier, and properly
- fix(99squash): use kernel config instead of modprobe to check
- kill bogus comment
- busybox: simplify listing of supported utilities
- fix: use find_binary
- fix: shellcheck for modules.d/99squash/setup-squash.sh
- fix: shellcheck for modules.d/99squash/clear-squash.sh
- fix: shellcheck for modules.d/99squash/module-setup.sh
- fix(squash): this module shouldn't depend on bash
- refactor(squash): move the post install scripts into the
- fix: revise squash module checks
- fix(squash): post install should be the last step before
- refactor(squash): move all setup code to init-squash.sh
- feat(squash): install and depmod modules seperately
- refactor(squash): don't record mount points in text file
- lsinitrd: list squash content as well
- refactor(squash): structure in a cleaner way
- feat(squash): use busybox for early setup if available
- feat: squash module follow --compress option
- perf: disable initrd compression when squash module is
- fix(squash): shellcheck for modules.d/99squash
- fix(squash): don't mount the mount points if already mounted
- feat(squash): install umount util
- fix(squash): create relative symlinks
- fix(dracut.sh): handle '-i' option to include files beginning
- fix(dracut.sh): handle symlinks appropriately while using
- fix(squash): keep ld cache under initdir
- dracut-functions: backport block_is_* functions
- fix(squash): fixes related to squash module rebase
- fix(squash): remove tailing '/' when installing ld.so.conf.d</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-190.git20210811" date="1628683200">- fix(lsinitrd): TMP_DIR doesn't exist in RHEL8
- fix(squash): apply FIPS and libpthread workaround</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 049-191.git20210920" date="1632139200">- fix(install): extend hwcaps library handling to libraries</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-201.git20220131" date="1643630400">- ci: introduce C8S based GHA CI
- ci: backport TEST-21-NFS-NM
- dracut.sh: fix early microcode detection logic
- fix(url-lib): make pre-pivot hook separetely per nfs mount
- fix(watchdog): replace return with echo
- fix(network): add errors and warnings when network interface
- dracut.sh: add check for invalid configuration files
- fips: removed false-positive 'FATAL: Module xxx not found'
- fix(shutdown): be robust against forced shutdown
- fix(fips): handle s390x OSTree systems</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 049-202.git20220511" date="1652270400">- fix(fips): start iterating from 0 over BOOT_IMAGE entries</changelog>
</package>
<package pkgid="9cb903b0551d8ab09b3ec50c0aec49b5239ba3a0277f4d1732f0647659324085" name="expat" arch="src">
  <version epoch="0" ver="2.2.5" rel="8.el8_6.2"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-1" date="1509624000">- update to 2.2.5 (#1508667)</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.2.5-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.5-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-4" date="1587729600">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; -  2.2.5-5" date="1644840000">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-6" date="1646308800">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-7" date="1646395200">- Fix patch for CVE-2022-25235
- Resolves: CVE-2022-25235</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-8" date="1647259200">- Improve patch for CVE-2022-25236
- Related: CVE-2022-25236</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-8.1" date="1651492800">- Fix multiple CVEs
- Resolves: CVE-2022-25314
- Resolves: CVE-2022-25313</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-8.2" date="1651579200">- Improve fix for CVE-2022-25313
- Related: CVE-2022-25313</changelog>
</package>
<package pkgid="a039162acdc6099b099d0cfa819199c802aef377e320ac957ca2f91bc9dbeab5" name="expat" arch="src">
  <version epoch="0" ver="2.2.5" rel="8.el8_6.3"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 2.2.5-2" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.5-3" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.2.5-4" date="1587729600">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; -  2.2.5-5" date="1644840000">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-6" date="1646308800">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-7" date="1646395200">- Fix patch for CVE-2022-25235
- Resolves: CVE-2022-25235</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-8" date="1647259200">- Improve patch for CVE-2022-25236
- Related: CVE-2022-25236</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-8.1" date="1651492800">- Fix multiple CVEs
- Resolves: CVE-2022-25314
- Resolves: CVE-2022-25313</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-8.2" date="1651579200">- Improve fix for CVE-2022-25313
- Related: CVE-2022-25313</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.5-8.3" date="1664539200">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
</package>
<package pkgid="24c73ba802565dfe09c513d8d9c612a39c1f13688ff49ab26e95be8d891b8e74" name="gcc" arch="src">
  <version epoch="0" ver="8.5.0" rel="10.1.el8_6"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-2" date="1622548800">- revert upstream PR85873 gcc-8 fix, apply the fix from gcc-9 (#1960701)
- fix 'this' adjustment for devirtualized call (PR c++/100797, #1965951)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-3" date="1626177600">- fix mangling of lambdas in default args (PR c++/91241, #1981822)
- add a few Provides: bundled</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-4" date="1637236800">- add -Wbidi-chars patch (#2008392)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-5" date="1638273600">- when linking against libgcc_s, link libgcc.a too (#2022588)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-6" date="1638532800">- avoid cycling on certain subreg reloads (PR rtl-optimization/96796, #2028798)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-7" date="1639137600">- backport PCH tweaks (#2030878)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-8" date="1643025600">- aarch64: Add -mtune=neoverse-512tvb (#1845932)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-9" date="1643025601">- apply cprop_hardreg fix for narrow mode != lowpart targets (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10" date="1643284800">- fix typo in the cprop_hardreg patch (#2028609)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 8.5.0-10.1" date="1651060800">- backport Default widths with -fdec-format-defaults patch (#2079578)</changelog>
</package>
<package pkgid="8486207c30f8ecb2a90f3c228be1d7ad67440a7d646e7b33d5c28a9345974bea" name="glib2" arch="src">
  <version epoch="0" ver="2.56.4" rel="158.el8_6.1"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.4-158" date="1638360000">- Fix GNetworkMonitor after NetworkManager D-Bus API changes
- Resolves: #2014652</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.4-158.1" date="1662120000">- Add --interface-info-[body|header] modes to gdbus-codegen
- Related: #2123429</changelog>
</package>
<package pkgid="c0002dc4324dc32520d7cf02ff22151997940d2bf91444e481bddab5ee244374" name="glib2" arch="src">
  <version epoch="0" ver="2.56.4" rel="159.el8"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.4-158" date="1638360000">- Fix GNetworkMonitor after NetworkManager D-Bus API changes
- Resolves: #2014652</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.4-159" date="1650628800">- Add --interface-info-[body|header] modes to gdbus-codegen
- Related: #2061994</changelog>
</package>
<package pkgid="96408c26c2bf1e0fda8f6637d8a1d391a5fcafc77b44e218d0bd59720db1370e" name="glibc" arch="src">
  <version epoch="0" ver="2.28" rel="189.5.el8_6"/>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.28-185" date="1642680000">- Adjust to rpm's find-debuginfo.sh changes, to keep stripping binaries (#1661513)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.28-186" date="1642766400">- Fix pthread_once regression with C++ exceptions (#2007327)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-187" date="1643025600">- CVE-2021-3999: getcwd: Set errno to ERANGE for size == 1 (#2032281)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-188" date="1643112000">- CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
  for "unix" and svcunix_create (#2045063).</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.28-189" date="1643284800">- CVE-2021-3999: getcwd: align stack on clone in aarch64 and fix a memory leak
  (#2032281)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-189.1" date="1646913600">- nss: Avoid clobbering errno in get*ent via dlopen (#2061727)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.28-189.2" date="1652443200">- timezone: Fix a test that causes occasional build failure (#2073432)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.28-189.3" date="1652443201">- Add missing MACRON to EBCDIC character sets (#2084564)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.28-189.4" date="1654603200">- Fix incorrect strncpy results on POWER9 (#2094540)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.28-189.5" date="1654689600">- Increase tempnam randomness (#2093457)</changelog>
</package>
<package pkgid="9eed8d68a50b46d6f056a737e851b5835afe3e463dcec44a4ab77f43402f7b03" name="gnupg2" arch="src">
  <version epoch="0" ver="2.2.20" rel="3.el8_6"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.2.3-1" date="1511265600">- upgrade to 2.2.3</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.2.4-1" date="1515758400">- upgrade to 2.2.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.4-2" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.2.5-1" date="1519992000">- upgrade to 2.2.5</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.2.6-1" date="1523448000">- upgrade to 2.2.6</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.2.8-1" date="1528718400">- upgrade to 2.2.8 fixing CVE 2018-12020</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.2.9-1" date="1533124800">- upgrade to 2.2.9</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.2.20-1" date="1588248000">- upgrade to 2.2.20</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.2.20-2" date="1588593600">- fixes for issues found in Coverity scan</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.2.20-3" date="1659528000">- Fix CVE-2022-34903 (#2108447)</changelog>
</package>
<package pkgid="9b186fa344ed3f87a4eef57211190919c90d1afe622150786414aa75760a32ba" name="gnutls" arch="src">
  <version epoch="0" ver="3.6.16" rel="5.el8_6"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-6" date="1598270400">- Fix memory leak when serializing iovec_t (#1844112)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-7" date="1604404800">- Increase DH key bits to &gt;= 2048 in self-tests (#1879506)
- Implement self-tests for KDF and CMAC (#1890870)
- Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-8" date="1605096000">- Depend on specific NVR of gmp and nettle (#1812933)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-9" date="1606219200">- Revert the previous change</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.14-10" date="1617278400">- Port fixes for potential miscalculation in ecdsa_verify (#1942931)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-1" date="1621857600">- Update to upstream 3.6.16 release (#1956783)
- Fix potential use-after-free in key_share handling (#1927597)
- Fix potential use-after-free in pre_shared_key handling (#1927593)
- Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
- Fix cert expiration issue in tests (#1908110)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-2" date="1622030400">- Filter certificate_types in TLS 1.2 CR based on signature algorithms (#1942216)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-3" date="1623067200">- Treat SHA-1 signed CA in the trusted set differently (#1965445)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-4" date="1624881600">- p11tool: Document ID reuse behavior when importing certs (#1776250)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.6.16-5" date="1661774400">- Fix double-free in gnutls_pkcs7_verify (#2109787)</changelog>
</package>
<package pkgid="5120d2d34c2b55ad6936c765ea3179a4e38e62fc12cf653dcaedc15e39d8317c" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="123.el8_6.8"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-115" date="1645185600">- Re-arm GRUB_ENABLE_BLSCFG=false
- Resolves: #1899903</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-116" date="1645704000">- Add efidisk/connectefi patches
- Resolves: #2048904
- Resolves: #2032294</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-117" date="1645704001">- Once more, for signing
- Resolves: #2048904</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-118" date="1645790400">- Fix check on blscfg conditional (mlewando)
- Resolves: #1899903</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.06-119" date="1646049600">- Enable connectefi module
- Resolves: #2032294</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.06-120" date="1646049601">- Bump signing
- Resolves: #2032294</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.06-121" date="1646740800">- Backport support for loading initrd above 4GB
- Resolves: #2048433</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.06-122" date="1646827200">- Fix initialization on efidisk patch
- Resolves: #2061252</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.06-123" date="1648468800">- Bump for signing
- Resolves: #2061252</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.06-123.el8_6.8" date="1654257600">- CVE fixes for 2022-06-07
- CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
- CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
- Resolves: #2031899</changelog>
</package>
<package pkgid="766e5737df2437a77258a78a5f54ef4119791d025a72cb4ef4384a518cfd25a9" name="initscripts" arch="src">
  <version epoch="0" ver="10.00.17" rel="1.el8_6.2"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.00.10-1" date="1604664000">- Allow updating rfkill switch status while in readonly root mode
- service: Prevent variables from globbing
- Allow updating mlocate.db while in readonly root mode</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.00.11-1" date="1608033600">- network: add option to keep the link down
- makefile: Use rpmdev-bumpspec's legacy date option</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.00.12-1" date="1608206400">- network: fix set_link_up()</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.00.13-1" date="1611316800">- doc: Documents ifcfg option LINKSTATUS</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.00.14-1" date="1612440000">- network: fix condition in set_link_up()</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.00.15-1" date="1613390400">- doc: Document ARPING_WAIT and ARPING_UPDATE_WAIT
- network scripts: Avoid infinite loop of arping</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.00.16-1" date="1642161600">- rename_device: also support dracut-style kernel cmdline configuration
- ifup-routes: Log when using `ip $type replace`
- ifup-routes: Use `ip route repace` to avoid race</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.00.17-1" date="1643025600">- ifup-routes: Revert quotes
- ifup-routes: Use `ip replace` only on type `route`
- ci: introduce GA ci from master to rhel8-branch
- ci: Setup packit for RHEL8 branch
- ci: Get rid of old ci files (travis and zanata)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.00.17-1.1" date="1660564800">- Rebuild</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.00.17-1.2" date="1660564801">- Fix changelog</changelog>
</package>
<package pkgid="eb237b606d83798881beddf5b24089e8ddf24e95594734e59ec89c703416ad65" name="iproute" arch="src">
  <version epoch="0" ver="5.15.0" rel="4.el8_6.1"/>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [5.12.0-0.el8]" date="1619697600">- New version 5.12.0 [1939382]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [5.12.0-1.el8]" date="1624881600">- tc: f_flower: Add missing ct_state flags to usage description (Andrea Claudi) [1957243]
- tc: f_flower: Add option to match on related ct state (Andrea Claudi) [1957243]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [5.12.0-2.el8]" date="1628251200">- add build and run-time dependencies on libbpf (Andrea Claudi) [1990402]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [5.12.0-3.el8]" date="1628769600">- tc: htb: improve burst error messages (Andrea Claudi) [1910745]
- tc: u32: Fix key folding in sample option (Andrea Claudi) [1979425]
- police: Fix normal output back to what it was (Andrea Claudi) [1981393]
- police: Add support for json output (Andrea Claudi) [1981393]
- police: add support for packet-per-second rate limiting (Andrea Claudi) [1981393]
- Update kernel headers (Andrea Claudi) [1981393]
- mptcp: add support for port based endpoint (Andrea Claudi) [1984733]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; [5.12.0-4.el8]" date="1633608000">- lib: bpf_legacy: fix bpffs mount when /sys/fs/bpf exists (Andrea Claudi) [1995082]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 5.15.0-1.el8" date="1637668800">- New version 5.15.0 (Andrea Claudi) [2016061]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 5.15.0-2.el8" date="1643198400">- vdpa: Enable user to set mtu of the vdpa device (Andrea Claudi) [2036880]
- vdpa: Enable user to set mac address of vdpa device (Andrea Claudi) [2036880]
- vdpa: Enable user to query vdpa device config layout (Andrea Claudi) [2036880]
- vdpa: align uapi headers (Andrea Claudi) [2036880]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 5.15.0-3.el8" date="1644235200">- tc: u32: add json support in `print_raw`, `print_ipv4`, `print_ipv6` (Andrea Claudi) [1989591]
- tc: u32: add support for json output (Andrea Claudi) [1989591]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 5.15.0-4.el8" date="1647864000">- vdpa: Update man page with added support to configure max vq pair (Andrea Claudi) [2056827]
- vdpa: Support reading device features (Andrea Claudi) [2056827]
- vdpa: Support for configuring max VQ pairs for a device (Andrea Claudi) [2056827]
- vdpa: Allow for printing negotiated features of a device (Andrea Claudi) [2056827]
- vdpa: Remove unsupported command line option (Andrea Claudi) [2056827]
- uapi: update vdpa.h (Andrea Claudi) [2056827]
- Update kernel headers and import virtio_net (Andrea Claudi) [2056827]</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 5.15.0-4.el8_6.1" date="1657540800">- tc: flower: Fix buffer overflow on large labels (Andrea Claudi) [2099364]</changelog>
</package>
<package pkgid="f10a9126d7a46fbd350a21bc9d17fe4036ed7dead2c5c3424d58cef075039e24" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="372.13.1.el8_6"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.4.1.el8]" date="1647950400">- igb: refactor XDP registration (Corinna Vinschen) [2040171]
- igc: avoid kernel warning when changing RX ring parameters (Corinna Vinschen) [2040171]
- scsi: qedi: Fix cmd_cleanup_cmpl counter mismatch issue (Nilesh Javali) [2054565]
- EDAC/amd64: Save max number of controllers for F19 M70 (Aristeu Rozanski) [2064285]
- CI: Use 8.6-rt branch for rhel8 realtime_check (Chris White)
- blk-mq: avoid extending delays of active hctx from blk_mq_delay_run_hw_queues (Ming Lei) [2046525]
- tipc: fix incorrect order of state message data sanity check (Xin Long) [2048971]
- tipc: improve size validations for received domain records (Xin Long) [2048971] {CVE-2022-0435}
- efi/x86: Call efi_parse_options() from efi_main() (Lenny Szubowicz) [2049233]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.5.1.el8]" date="1648468800">- scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Tomas Henzl) [2052278]
- scsi: mpi3mr: Fix memory leaks (Tomas Henzl) [2054814]
- scsi: mpi3mr: Fix reporting of actual data transfer size (Tomas Henzl) [2054814]
- scsi: mpi3mr: Fix cmnd getting marked as in use forever (Tomas Henzl) [2054814]
- scsi: mpi3mr: Fix hibernation issue (Tomas Henzl) [2054814]
- scsi: mpi3mr: Fix printing of pending I/O count (Tomas Henzl) [2054814]
- scsi: mpi3mr: Fix deadlock while canceling the fw event (Tomas Henzl) [2054814]
- scsi: mpi3mr: Fixes around reply request queues (Tomas Henzl) [2054814]
- scsi: mpi3mr: Enhanced Task Management Support Reply handling (Tomas Henzl) [2054814]
- scsi: mpi3mr: Use TM response codes from MPI3 headers (Tomas Henzl) [2054814]
- scsi: mpi3mr: Increase internal cmnds timeout to 60s (Tomas Henzl) [2054814]
- scsi: mpi3mr: Do access status validation before adding devices (Tomas Henzl) [2054814]
- scsi: mpi3mr: Update MPI3 headers - part2 (Tomas Henzl) [2054814]
- scsi: mpi3mr: Update MPI3 headers - part1 (Tomas Henzl) [2054814]
- scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Tomas Henzl) [2054814]
- scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Tomas Henzl) [2054814]
- scsi: mpi3mr: Add debug APIs based on logging_level bits (Tomas Henzl) [2054814]
- scsi: mpt3sas: Remove scsi_dma_map() error messages (Tomas Henzl) [2057021]
- net/mlx5: Fix wrong limitation of metadata match on ecpf (Amir Tzin) [2049094]
- nfsd: fix use-after-free due to delegation race (Thiago Becker) [2053262]
- dma-buf: cma_heap: Fix mutex locking section (Michel Dänzer) [2044440]
- drm/amdkfd: Check for null pointer after calling kmemdup (Michel Dänzer) [2044440]
- drm/atomic: Check new_crtc_state-&gt;active to determine if CRTC needs disable in self refresh mode (Michel Dänzer) [2044440]
- drm/amd: avoid suspend on dGPUs w/ s2idle support when runtime PM enabled (Michel Dänzer) [2044440]
- drm/i915/overlay: Prevent divide by zero bugs in scaling (Michel Dänzer) [2044440]
- dma-buf: heaps: Fix potential spectre v1 gadget (Michel Dänzer) [2044440]
- drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple Retina panels (Michel Dänzer) [2044440]
- drm/amd/display: watermark latencies is not enough on DCN31 (Michel Dänzer) [2044440]
- drm/amd/pm: correct the MGpuFanBoost support for Beige Goby (Michel Dänzer) [2044440]
- drm/i915/adlp: Fix TypeC PHY-ready status readout (Michel Dänzer) [2044440]
- drm/nouveau: fix off by one in BIOS boundary checking (Michel Dänzer) [2044440]
- drm/i915: Disable DSB usage for now (Michel Dänzer) [2044440]
- Revert "drm/ast: Support 1600x900 with 108MHz PCLK" (Michel Dänzer) [2044440]
- drm/amd/display: Fix FP start/end for dcn30_internal_validate_bw. (Michel Dänzer) [2044440]
- drm/atomic: Add the crtc to affected crtc only if uapi.enable = true (Michel Dänzer) [2044440]
- drm/amdgpu: Use correct VIEWPORT_DIMENSION for DCN2 (Michel Dänzer) [2044440]
- drm/amd/display: reset dcn31 SMU mailbox on failures (Michel Dänzer) [2044440]
- drm/vmwgfx: Remove explicit transparent hugepages support (Michel Dänzer) [2044440]
- drm/radeon: fix error handling in radeon_driver_open_kms (Michel Dänzer) [2044440]
- drm/i915/display/ehl: Update voltage swing table (Michel Dänzer) [2044440]
- drm/nouveau/kms/nv04: use vzalloc for nv04_display (Michel Dänzer) [2044440]
- drm/amd/display: Fix the uninitialized variable in enable_stream_features() (Michel Dänzer) [2044440]
- amdgpu/pm: Make sysfs pm attributes as read-only for VFs (Michel Dänzer) [2044440]
- drm/amdgpu: fixup bad vram size on gmc v8 (Michel Dänzer) [2044440]
- drm/amd/amdgpu: fix gmc bo pin count leak in SRIOV (Michel Dänzer) [2044440]
- drm/amd/amdgpu: fix psp tmr bo pin count leak in SRIOV (Michel Dänzer) [2044440]
- drm/amdkfd: Fix error handling in svm_range_add (Michel Dänzer) [2044440]
- drm/vmwgfx: Introduce a new placement for MOB page tables (Michel Dänzer) [2044440]
- drm/vmwgfx: Release ttm memory if probe fails (Michel Dänzer) [2044440]
- drm/amd/display: add else to avoid double destroy clk_mgr (Michel Dänzer) [2044440]
- drm/amdgpu/display: set vblank_disable_immediate for DC (Michel Dänzer) [2044440]
- drm/amd/display: check top_pipe_to_program pointer (Michel Dänzer) [2044440]
- drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L (Michel Dänzer) [2044440]
- drm/amd/display: Fix out of bounds access on DNC31 stream encoder regs (Michel Dänzer) [2044440]
- drm/amd/display: Fix bug in debugfs crc_win_update entry (Michel Dänzer) [2044440]
- drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() (Michel Dänzer) [2044440]
- drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() (Michel Dänzer) [2044440]
- drm/vmwgfx: Fail to initialize on broken configs (Michel Dänzer) [2044440]
- drm/vmwgfx: Remove the deprecated lower mem limit (Michel Dänzer) [2044440]
- drm/vboxvideo: fix a NULL vs IS_ERR() check (Michel Dänzer) [2044440]
- drm: fix null-ptr-deref in drm_dev_init_release() (Michel Dänzer) [2044440]
- drm/ttm: Put BO in its memory manager's lru list (Michel Dänzer) [2044440]
- dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() (Michel Dänzer) [2044440]
- drm/amd/display: explicitly set is_dsc_supported to false before use (Michel Dänzer) [2044440]
- drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() (Michel Dänzer) [2044440]
- drm/amd/pm: keep the BACO feature enabled for suspend (Michel Dänzer) [2044440]
- Revert "drm/amdgpu: stop scheduler when calling hw_fini (v2)" (Michel Dänzer) [2044440]
- drm/amd/display: Added power down for DCN10 (Michel Dänzer) [2044440]
- drm/amd/display: fix B0 TMDS deepcolor no dislay issue (Michel Dänzer) [2044440]
- drm/amdgpu: put SMU into proper state on runpm suspending for BOCO capable platform (Michel Dänzer) [2044440]
- drm/amd/pm: skip setting gfx cgpg in the s0ix suspend-resume (Michel Dänzer) [2044440]
- drm/amd/pm: Fix xgmi link control on aldebaran (Michel Dänzer) [2044440]
- drm/amdgpu: fix dropped backing store handling in amdgpu_dma_buf_move_notify (Michel Dänzer) [2044440]
- drm/amd/display: Changed pipe split policy to allow for multi-display pipe split (Michel Dänzer) [2044440]
- drm/amdgpu: add support for IP discovery gc_info table v2 (Michel Dänzer) [2044440]
- drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly enabled (Michel Dänzer) [2044440]
- drm/nouveau: wait for the exclusive fence after the shared ones v2 (Michel Dänzer) [2044440]
- drm/nouveau: always wait for the exclusive fence (Michel Dänzer) [2044440]
- drm/amd/display: Set optimize_pwr_state for DCN31 (Michel Dänzer) [2044440]
- drm/amd/display: Send s0i2_rdy in stream_count == 0 optimization (Michel Dänzer) [2044440]
- drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC (Michel Dänzer) [2044440]
- drm/amdgpu: don't override default ECO_BITs setting (Michel Dänzer) [2044440]
- drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE (Michel Dänzer) [2044440]
- drm/amd/pm: fix a potential gpu_metrics_table memory leak (Michel Dänzer) [2044440]
- drm/amd/display: Set exit_optimized_pwr_state for DCN31 (Michel Dänzer) [2044440]
- drm/i915/display: Fix an unsigned subtraction which can never be negative. (Michel Dänzer) [2044440]
- drm/ast: potential dereference of null pointer (Michel Dänzer) [2044440]
- drm: simpledrm: fix wrong unit with pixel clock (Michel Dänzer) [2044440]
- Revert "drm/fb-helper: improve DRM fbdev emulation device names" (Michel Dänzer) [2044440]
- drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder-&gt;shutdown() (Michel Dänzer) [2044440]
- drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915 (Michel Dänzer) [2044440]
- drm/amdkfd: process_info lock not needed for svm (Michel Dänzer) [2044440]
- drm/amd/display: add connector type check for CRC source set (Michel Dänzer) [2044440]
- drm/amdkfd: fix double free mem structure (Michel Dänzer) [2044440]
- drm/amd/display: Fix for the no Audio bug with Tiled Displays (Michel Dänzer) [2044440]
- drm/amdgpu: check atomic flag to differeniate with legacy path (Michel Dänzer) [2044440]
- drm/amd/display: Fix DPIA outbox timeout after S3/S4/reset (Michel Dänzer) [2044440]
- drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence. (Michel Dänzer) [2044440]
- drm/i915/dp: Perform 30ms delay after source OUI write (Michel Dänzer) [2044440]
- drm/amd/display: Allow DSC on supported MST branch devices (Michel Dänzer) [2044440]
- dma-buf: system_heap: Use 'for_each_sgtable_sg' in pages free flow (Michel Dänzer) [2044440]
- drm/amd/amdgpu: fix potential memleak (Michel Dänzer) [2044440]
- drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again (Michel Dänzer) [2044440]
- drm/amd/pm: Remove artificial freq level on Navi1x (Michel Dänzer) [2044440]
- drm/amdgpu/gfx9: switch to golden tsc registers for renoir+ (Michel Dänzer) [2044440]
- drm/amd/display: Set plane update flags for all planes in reset (Michel Dänzer) [2044440]
- drm/amd/display: Fix DPIA outbox timeout after GPU reset (Michel Dänzer) [2044440]
- drm/aspeed: Fix vga_pw sysfs output (Michel Dänzer) [2044440]
- drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks (Michel Dänzer) [2044440]
- drm/amd/display: Fix OLED brightness control on eDP (Michel Dänzer) [2044440]
- drm/amdgpu: IH process reset count when restart (Michel Dänzer) [2044440]
- drm/amd/pm: avoid duplicate powergate/ungate setting (Michel Dänzer) [2044440]
- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors (Michel Dänzer) [2044440]
- drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern platforms (Michel Dänzer) [2044440]
- drm/i915/dp: Ensure max link params are always valid (Michel Dänzer) [2044440]
- drm/i915/dp: Ensure sink rate values are always valid (Michel Dänzer) [2044440]
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap (Michel Dänzer) [2044440]
- drm/udl: fix control-message timeout (Michel Dänzer) [2044440]
- drm/amd/display: Limit max DSC target bpp for specific monitors (Michel Dänzer) [2044440]
- drm/amd/display: Update swizzle mode enums (Michel Dänzer) [2044440]
- drm/cma-helper: Release non-coherent memory with dma_free_noncoherent() (Michel Dänzer) [2044440]
- Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping" (Michel Dänzer) [2044440]
- drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame (Michel Dänzer) [2044440]
- x86/speculation: Check CPU capability before applying IBRS spectre v2 mitigation (Waiman Long) [2062156 2062166] {CVE-2022-0001 CVE-2022-0002 CVE-2021-26401}
- x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT (Waiman Long) [2062156 2062166] {CVE-2022-0001 CVE-2022-0002 CVE-2021-26401}
- x86/speculation: Warn about Spectre v2 LFENCE mitigation (Waiman Long) [2062156 2062166] {CVE-2022-0001 CVE-2022-0002 CVE-2021-26401}
- x86/speculation: Update link to AMD speculation whitepaper (Waiman Long) [2062166] {CVE-2021-26401}
- x86/speculation: Use generic retpoline by default on AMD (Waiman Long) [2062166] {CVE-2021-26401}
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Waiman Long) [2062156] {CVE-2022-0001 CVE-2022-0002}
- Documentation/hw-vuln: Update spectre doc (Waiman Long) [2062156] {CVE-2022-0001 CVE-2022-0002}
- x86/speculation: Add eIBRS + Retpoline options (Waiman Long) [2062156] {CVE-2022-0001 CVE-2022-0002}
- x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Waiman Long) [2062156] {CVE-2022-0001 CVE-2022-0002}
- x86,bugs: Unconditionally allow spectre_v2=retpoline,amd (Waiman Long) [2062156] {CVE-2022-0001 CVE-2022-0002}
- x86: deduplicate the spectre_v2_user documentation (Waiman Long) [2062156] {CVE-2022-0001 CVE-2022-0002}
- fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi) [2064863] {CVE-2022-1011}
- ice: Do not enable VLAN pruning when spoofchk is enabled (Ivan Vecera) [2062343]
- ice: don't allow to run ice_send_event_to_aux() in atomic ctx (Ivan Vecera) [2062343]
- ice: fix 'scheduling while atomic' on aux critical err interrupt (Ivan Vecera) [2062343]
- ice: Fix MAC address setting (Ivan Vecera) [2062343]
- ice: Clear default forwarding VSI during release (Ivan Vecera) [2062343]
- ice: Fix broken IFF_ALLMULTI handling (Ivan Vecera) [2062343]
- iavf: Fix hang during reboot/shutdown (Ivan Vecera) [2062343]
- iavf: Fix double free in iavf_reset_task (Ivan Vecera) [2062343]
- ice: destroy flow director filter mutex after releasing VSIs (Ivan Vecera) [2062343]
- ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() (Ivan Vecera) [2062343]
- iavf: Fix adopting new combined setting (Ivan Vecera) [2062343]
- iavf: Fix handling of vlan strip virtual channel messages (Ivan Vecera) [2062343]
- iavf: Fix __IAVF_RESETTING state usage (Ivan Vecera) [2062343]
- iavf: Fix missing check for running netdev (Ivan Vecera) [2062343]
- iavf: Fix deadlock in iavf_reset_task (Ivan Vecera) [2062343]
- iavf: Fix race in init state (Ivan Vecera) [2062343]
- iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS (Ivan Vecera) [2062343]
- iavf: Fix init state closure on remove (Ivan Vecera) [2062343]
- iavf: Add waiting so the port is initialized in remove (Ivan Vecera) [2062343]
- iavf: Rework mutexes for better synchronisation (Ivan Vecera) [2062343]
- iavf: remove an unneeded variable (Ivan Vecera) [2062343]
- iavf: Fix limit of total number of queues to active queues of VF (Ivan Vecera) [2062343]
- iavf: Restrict maximum VLAN filters for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Ivan Vecera) [2062343]
- iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 offload enable/disable (Ivan Vecera) [2062343]
- iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 hotpath (Ivan Vecera) [2062343]
- iavf: Add support VIRTCHNL_VF_OFFLOAD_VLAN_V2 during netdev config (Ivan Vecera) [2062343]
- iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 negotiation (Ivan Vecera) [2062343]
- virtchnl: Add support for new VLAN capabilities (Ivan Vecera) [2062343]
- virtchnl: Use the BIT() macro for capability/offload flags (Ivan Vecera) [2062343]
- virtchnl: Remove unused VIRTCHNL_VF_OFFLOAD_RSVD define (Ivan Vecera) [2062343]
- virtchnl: Add missing padding to virtchnl_proto_hdrs (Ivan Vecera) [2062343]
- ice: Fix race condition during interface enslave (Ivan Vecera) [2062343]
- ice: Fix curr_link_speed advertised speed (Ivan Vecera) [2062343]
- ice: Don't use GFP_KERNEL in atomic context (Ivan Vecera) [2062343]
- ice: Fix error with handling of bonding MTU (Ivan Vecera) [2062343]
- ice: stop disabling VFs due to PF error responses (Ivan Vecera) [2062343]
- ice: initialize local variable 'tlv' (Ivan Vecera) [2062343]
- ice: check the return of ice_ptp_gettimex64 (Ivan Vecera) [2062343]
- ice: fix concurrent reset and removal of VFs (Ivan Vecera) [2062343]
- ice: fix setting l4 port flag when adding filter (Ivan Vecera) [2062343]
- ice: Match on all profiles in slow-path (Ivan Vecera) [2062343]
- ice: enable parsing IPSEC SPI headers for RSS (Ivan Vecera) [2062343]
- ice: Avoid RTNL lock when re-creating auxiliary device (Ivan Vecera) [2062343]
- ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler (Ivan Vecera) [2062343]
- ice: fix IPIP and SIT TSO offload (Ivan Vecera) [2062343]
- ice: fix an error code in ice_cfg_phy_fec() (Ivan Vecera) [2062343]
- ice: Use bitmap_free() to free bitmap (Ivan Vecera) [2062343]
- ice: Optimize a few bitmap operations (Ivan Vecera) [2062343]
- ice: Slightly simply ice_find_free_recp_res_idx (Ivan Vecera) [2062343]
- ice: improve switchdev's slow-path (Ivan Vecera) [2062343]
- ice: replay advanced rules after reset (Ivan Vecera) [2062343]
- ice: Add flow director support for channel mode (Ivan Vecera) [2062343]
- ice: trivial: fix odd indenting (Ivan Vecera) [2062343]
- ice: support crosstimestamping on E822 devices if supported (Ivan Vecera) [2062343]
- ice: exit bypass mode once hardware finishes timestamp calibration (Ivan Vecera) [2062343]
- ice: ensure the hardware Clock Generation Unit is configured (Ivan Vecera) [2062343]
- ice: implement basic E822 PTP support (Ivan Vecera) [2062343]
- ice: convert clk_freq capability into time_ref (Ivan Vecera) [2062343]
- ice: introduce ice_ptp_init_phc function (Ivan Vecera) [2062343]
- ice: use 'int err' instead of 'int status' in ice_ptp_hw.c (Ivan Vecera) [2062343]
- ice: PTP: move setting of tstamp_config (Ivan Vecera) [2062343]
- ice: introduce ice_base_incval function (Ivan Vecera) [2062343]
- ice: xsk: fix cleaned_count setting (Ivan Vecera) [2062343]
- ice: xsk: allow empty Rx descriptors on XSK ZC data path (Ivan Vecera) [2062343]
- ice: xsk: allocate separate memory for XDP SW ring (Ivan Vecera) [2062343]
- ice: xsk: return xsk buffers back to pool when cleaning the ring (Ivan Vecera) [2062343]
- ice: use modern kernel API for kick (Ivan Vecera) [2062343]
- ice: tighter control over VSI_DOWN state (Ivan Vecera) [2062343]
- ice: use prefetch methods (Ivan Vecera) [2062343]
- ice: update to newer kernel API (Ivan Vecera) [2062343]
- ice: support immediate firmware activation via devlink reload (Ivan Vecera) [2062343]
- ice: reduce time to read Option ROM CIVD data (Ivan Vecera) [2062343]
- ice: move ice_devlink_flash_update and merge with ice_flash_pldm_image (Ivan Vecera) [2062343]
- ice: move and rename ice_check_for_pending_update (Ivan Vecera) [2062343]
- ice: devlink: add shadow-ram region to snapshot Shadow RAM (Ivan Vecera) [2062343]
- ice: Remove unused ICE_FLOW_SEG_HDRS_L2_MASK (Ivan Vecera) [2062343]
- ice: Remove unnecessary casts (Ivan Vecera) [2062343]
- ice: Propagate error codes (Ivan Vecera) [2062343]
- ice: Remove excess error variables (Ivan Vecera) [2062343]
- ice: Cleanup after ice_status removal (Ivan Vecera) [2062343]
- ice: Remove enum ice_status (Ivan Vecera) [2062343]
- ice: Use int for ice_status (Ivan Vecera) [2062343]
- ice: Remove string printing for ice_status (Ivan Vecera) [2062343]
- ice: Refactor status flow for DDP load (Ivan Vecera) [2062343]
- ice: Refactor promiscuous functions (Ivan Vecera) [2062343]
- ice: refactor PTYPE validating (Ivan Vecera) [2062343]
- ice: Add package PTYPE enable information (Ivan Vecera) [2062343]
- ice: safer stats processing (Ivan Vecera) [2062343]
- ice: fix adding different tunnels (Ivan Vecera) [2062343]
- ice: fix choosing UDP header type (Ivan Vecera) [2062343]
- ice: ignore dropped packets during init (Ivan Vecera) [2062343]
- ice: rearm other interrupt cause register after enabling VFs (Ivan Vecera) [2062343]
- net/ice: Remove unused enum (Ivan Vecera) [2062343]
- net/ice: Fix boolean assignment (Ivan Vecera) [2062343]
- net/ice: Add support for enable_iwarp and enable_roce devlink param (Ivan Vecera) [2062343]
- ice: avoid bpf_prog refcount underflow (Ivan Vecera) [2062343]
- ice: fix vsi-&gt;txq_map sizing (Ivan Vecera) [2062343]
- ice: Hide bus-info in ethtool for PRs in switchdev mode (Ivan Vecera) [2062343]
- ice: Clear synchronized addrs when adding VFs in switchdev mode (Ivan Vecera) [2062343]
- ice: fix error return code in ice_get_recp_frm_fw() (Ivan Vecera) [2062343]
- ice: Fix clang -Wimplicit-fallthrough in ice_pull_qvec_from_rc() (Ivan Vecera) [2062343]
- ice: Add support to print error on PHY FW load failure (Ivan Vecera) [2062343]
- ice: Add support for changing MTU on PR in switchdev mode (Ivan Vecera) [2062343]
- ice: send correct vc status in switchdev (Ivan Vecera) [2062343]
- ice: support for GRE in eswitch (Ivan Vecera) [2062343]
- ice: low level support for tunnels (Ivan Vecera) [2062343]
- ice: VXLAN and Geneve TC support (Ivan Vecera) [2062343]
- ice: support for indirect notification (Ivan Vecera) [2062343]
- ice: Add tc-flower filter support for channel (Ivan Vecera) [2062343]
- ice: enable ndo_setup_tc support for mqprio_qdisc (Ivan Vecera) [2062343]
- ice: Add infrastructure for mqprio support via ndo_setup_tc (Ivan Vecera) [2062343]
- ice: fix an error code in ice_ena_vfs() (Ivan Vecera) [2062343]
- ice: use devm_kcalloc() instead of devm_kzalloc() (Ivan Vecera) [2062343]
- ice: Make use of the helper function devm_add_action_or_reset() (Ivan Vecera) [2062343]
- ice: Refactor PR ethtool ops (Ivan Vecera) [2062343]
- ice: Forbid trusted VFs in switchdev mode (Ivan Vecera) [2062343]
- ice: Manage act flags for switchdev offloads (Ivan Vecera) [2062343]
- ice: introduce XDP_TX fallback path (Ivan Vecera) [2062343]
- ice: optimize XDP_TX workloads (Ivan Vecera) [2062343]
- ice: propagate xdp_ring onto rx_ring (Ivan Vecera) [2062343]
- ice: do not create xdp_frame on XDP_TX (Ivan Vecera) [2062343]
- ice: unify xdp_rings accesses (Ivan Vecera) [2062343]
- ice: ndo_setup_tc implementation for PR (Ivan Vecera) [2062343]
- ice: ndo_setup_tc implementation for PF (Ivan Vecera) [2062343]
- ice: Allow changing lan_en and lb_en on all kinds of filters (Ivan Vecera) [2062343]
- ice: cleanup rules info (Ivan Vecera) [2062343]
- ice: allow deleting advanced rules (Ivan Vecera) [2062343]
- ice: allow adding advanced rules (Ivan Vecera) [2062343]
- ice: create advanced switch recipe (Ivan Vecera) [2062343]
- ice: manage profiles and field vectors (Ivan Vecera) [2062343]
- ice: implement low level recipes functions (Ivan Vecera) [2062343]
- ice: add port representor ethtool ops and stats (Ivan Vecera) [2062343]
- ice: switchdev slow path (Ivan Vecera) [2062343]
- ice: rebuild switchdev when resetting all VFs (Ivan Vecera) [2062343]
- ice: enable/disable switchdev when managing VFs (Ivan Vecera) [2062343]
- ice: introduce new type of VSI for switchdev (Ivan Vecera) [2062343]
- ice: set and release switchdev environment (Ivan Vecera) [2062343]
- net: export metadata_dst_free() (Ivan Vecera) [2062343]
- ice: allow changing lan_en and lb_en on dflt rules (Ivan Vecera) [2062343]
- ice: manage VSI antispoof and destination override (Ivan Vecera) [2062343]
- ice: allow process VF opcodes in different ways (Ivan Vecera) [2062343]
- ice: introduce VF port representor (Ivan Vecera) [2062343]
- ice: Move devlink port to PF/VF struct (Ivan Vecera) [2062343]
- ice: support basic E-Switch mode control (Ivan Vecera) [2062343]
- ethernet: use eth_hw_addr_set() for dev-&gt;addr_len cases (Ivan Vecera) [2062343]
- ethernet: use eth_hw_addr_set() instead of ether_addr_copy() (Ivan Vecera) [2062343]
- ice: Use xdp_buf instead of rx_buf for xsk zero-copy (Ivan Vecera) [2062343]
- ice: fix FDIR init missing when reset VF (Ivan Vecera) [2062343]
- intel: Remove rcu_read_lock() around XDP program invocation (Ivan Vecera) [2062343]
- intel: Update drivers to use ethtool_sprintf (Ivan Vecera) [2062343]
- ice: fix conversion to new udp_tunnel infrastructure (Ivan Vecera) [2062343]
- intel-ethernet: clean up W=1 warnings in kdoc (Ivan Vecera) [2062343]
- PCI: Use 'pci_channel_state_t' instead of 'enum pci_channel_state' (Ivan Vecera) [2062343]
- treewide: Use sizeof_field() macro (Ivan Vecera) [2062343]
- devlink: Add 'enable_iwarp' generic device param (Ivan Vecera) [2062343]
- devlink: Add new "enable_vnet" generic device param (Ivan Vecera) [2062343]
- devlink: Add new "enable_rdma" generic device param (Ivan Vecera) [2062343]
- devlink: Add new "enable_eth" generic device param (Ivan Vecera) [2062343]
- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2061665]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.6.1.el8]" date="1648814400">- configs: enable CONFIG_RMI4_F3A (Benjamin Tissoires) [2067219]
- Input: synaptics-rmi4 - add support for F3A (Benjamin Tissoires) [2067219]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032074] {CVE-2021-4028}
- drm/i915/adl_s: Remove require_force_probe protection (Michel Dänzer) [2025896]
- drm/i915/adl_s: Update ADL-S PCI IDs (Michel Dänzer) [2025896]
- drm/i915: Limit Wa_22010178259 to affected platforms (Michel Dänzer) [2025896]
- drm/i915/adl_s: Fix dma_mask_size to 39 bit (Michel Dänzer) [2025896]
- drm/i915/dmc: Update DMC to v2.14 on ADL-P (Michel Dänzer) [2060051]
- drm/i915: Update memory bandwidth formulae (Michel Dänzer) [2060051]
- drm/i915/fb: Fold modifier CCS type/tiling attribute to plane caps (Michel Dänzer) [2060051]
- drm/i915/fb: Don't store bitmasks in the intel_plane_caps enum (Michel Dänzer) [2060051]
- drm/i915/adl_p: Add ddc pin mapping (Michel Dänzer) [2060051]
- iommu/amd: Fix I/O page table memory leak (Jerry Snitselaar) [2053210]
- iommu/amd: Recover from event log overflow (Jerry Snitselaar) [2053210]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.7.1.el8]" date="1649246400">- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056728]
- KVM: SVM: Allow AVIC support on system w/ physical APIC ID &gt; 255 (Bandan Das) [2033068]
- PCI/ACPI: Fix acpi_pci_osc_control_set() kernel-doc comment (Mark Langsdorf) [2049209]
- PCI/ACPI: Check for _OSC support in acpi_pci_osc_control_set() (Mark Langsdorf) [2049209]
- PCI/ACPI: Move _OSC query checks to separate function (Mark Langsdorf) [2049209]
- PCI/ACPI: Move supported and control calculations to separate functions (Mark Langsdorf) [2049209]
- PCI/ACPI: Remove OSC_PCI_SUPPORT_MASKS and OSC_PCI_CONTROL_MASKS (Mark Langsdorf) [2049209]
- kabi: Adding symbol blkdev_get_by_dev (fs/block_dev.c) (Čestmír Kalina) [2010296]
- kabi: Adding symbol thaw_bdev (fs/block_dev.c) (Čestmír Kalina) [2010296]
- kabi: Adding symbol freeze_bdev (fs/block_dev.c) (Čestmír Kalina) [2010296]
- s390/cio: make ccw_device_dma_* more robust (Thomas Huth) [2066709]
- perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Michael Petlan) [2069237]
- redhat: switch secureboot kernel image signing to release keys (Augusto Caringi)
- ice: xsk: Stop Rx processing when ntc catches ntu (Ivan Vecera) [2069082]
- ice: xsk: Fix indexing in ice_tx_xsk_pool() (Ivan Vecera) [2069082]
- ice: Fix kernel crash in XDP scenario (Ivan Vecera) [2069082]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.8.1.el8]" date="1649678400">- esp6: fix check on ipv6_skip_exthdr's return value (Sabrina Dubroca) [2054075]
- scsi: iscsi: Fix nop handling during conn recovery (Chris Leech) [2069969]
- scsi: iscsi: Merge suspend fields (Chris Leech) [2069969]
- scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2069969]
- scsi: iscsi: Move iscsi_ep_disconnect (Chris Leech) [2069969]
- CI: Remove deprecated option (Veronika Kabatova)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.9.1.el8]" date="1650024000">- scsi: qedi: Fix failed disconnect handling (Chris Leech) [2071519]
- scsi: iscsi: Fix unbound endpoint error handling (Chris Leech) [2071519]
- scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Chris Leech) [2071519]
- scsi: iscsi: Fix endpoint reuse regression (Chris Leech) [2071519]
- scsi: iscsi: Release endpoint ID when its freed (Chris Leech) [2071519]
- scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2071519]
- Revert "scsi: iscsi: Fix offload conn cleanup when iscsid restarts" (Chris Leech) [2071519]
- scsi: iscsi: Speed up session unblocking and removal (Chris Leech) [2071519]
- scsi: iscsi: Fix recovery and unblocking race (Chris Leech) [2071519]
- scsi: iscsi: Unblock session then wake up error handler (Chris Leech) [2071519]
- bnxt_en: make hw-tc-offload default to off (Ken Cox) [2005101]
- bnxt_en: reject indirect blk offload when hw-tc-offload is off (Ken Cox) [2005101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.10.1.el8_6]" date="1652443200">- Fonts: Replace discarded const qualifier (Nico Pache) [2064762]
- Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Nico Pache) [2064762]
- fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Nico Pache) [2064762]
- CI: Drop baseline runs (Veronika Kabatova)
- redhat: drop the -sha512 suffix from default rhpkg invocation (Jarod Wilson)
- redhat: switch release to zstream (Augusto Caringi)
- ceph: fix possible NULL pointer dereference for req-&gt;r_session (Xiubo Li) [2080071]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.11.1.el8_6]" date="1653480000">- Revert "xfs: actually bump warning counts when we send warnings" (Carlos Maiolino) [2071713]
- SUNRPC: use different lock keys for INET6 and LOCAL (Guillaume Nault) [2079856]
- Revert "netfilter: conntrack: tag conntracks picked up in local out hook" (Florian Westphal) [2065266]
- Revert "netfilter: nat: force port remap to prevent shadowing well-known ports" (Florian Westphal) [2065266]
- KVM: PPC: Book3S HV: Add infrastructure to support 2nd DAWR (Laurent Vivier) [2079069]
- KVM: PPC: Book3S HV: Rename current DAWR macros and variables (Laurent Vivier) [2079069]
- esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca) [2062114] {CVE-2022-27666}
- esp: Fix possible buffer overflow in ESP transformation (Sabrina Dubroca) [2062114] {CVE-2022-27666}
- NFS: Don't loop forever in nfs_do_recoalesce() (Scott Mayhew) [2080998]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.12.1.el8_6]" date="1654084800">- sctp: use the correct skb for security_sctp_assoc_request (Xin Long) [2070959]
- net/mlx5e: Fix wrong source vport matching on tunnel rule (Amir Tzin) [2088610]
- net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (Amir Tzin) [2088611]
- net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (Amir Tzin) [2088611]
- net/mlx5: DR, Cache STE shadow memory (Amir Tzin) [2075553]
- net/mlx5: DR, Fix the threshold that defines when pool sync is initiated (Amir Tzin) [2075553]
- drm/i915/display: Remove check for low voltage sku for max dp source rate (Jocelyn Falempe) [2066644]
- net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it (Amir Tzin) [2088638]
- net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion (Amir Tzin) [2081011]
- net/mlx5e: TC, Skip redundant ct clear actions (Amir Tzin) [2079918]
- net/mlx5e: TC, fix decap fallback to uplink when int port not supported (Amir Tzin) [2088639]
- CI: Use zstream builder image (Veronika Kabatova)
- ice: Allow to pass VLAN tagged packets to VF when port VLAN is configured (Petr Oros) [2081794]
- ice: clear stale Tx queue settings before configuring (Petr Oros) [2081794]
- ice: fix crash when writing timestamp on RX rings (Petr Oros) [2081794]
- ice: Fix race during aux device (un)plugging (Petr Oros) [2081794]
- ice: fix PTP stale Tx timestamps cleanup (Petr Oros) [2081794]
- ice: ice_sched: fix an incorrect NULL check on list iterator (Petr Oros) [2081794]
- ice: fix use-after-free when deinitializing mailbox snapshot (Petr Oros) [2081794]
- ice: wait 5 s for EMP reset after firmware flash (Petr Oros) [2081794]
- ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix incorrect locking in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix memory leak in ice_get_orom_civd_data() (Petr Oros) [2081794]
- ice: fix crash in switchdev mode (Petr Oros) [2081794]
- Revert "iavf: Fix deadlock occurrence during resetting VF interface" (Petr Oros) [2081794]
- ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Petr Oros) [2081794]
- ice: clear cmd_type_offset_bsz for TX rings (Petr Oros) [2081794]
- ice: xsk: fix VSI state check in ice_xsk_wakeup() (Petr Oros) [2081794]
- ice: synchronize_rcu() when terminating rings (Petr Oros) [2081794]
- ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Petr Oros) [2081794]
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Petr Oros) [2081794]
- ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2081794]
- ice: Fix MAC address setting (Petr Oros) [2081794]
- openvswitch: Fix setting ipv6 fields causing hw csum failure (Eelco Chaudron) [2086549]
- sched/cputime, proc/stat: Fix incorrect guest nice cpustat value (Waiman Long) [2084138]
- procfs: Use all-in-one vtime aware kcpustat accessor (Waiman Long) [2084138]
- procfs: Use vtime aware kcpustat accessor to fetch CPUTIME_SYSTEM (Waiman Long) [2084138]
- proc: read kernel cpu stat pointer once (Waiman Long) [2084138]
- proc: use "unsigned int" in /proc/stat hook (Waiman Long) [2084138]
- sched/cputime: Support other fields on kcpustat_field() (Waiman Long) [2084138]
- sched/cputime: Add vtime guest task state (Waiman Long) [2084138]
- sched/cputime: Add vtime idle task state (Waiman Long) [2084138]
- sched/cputime: Spare a seqcount lock/unlock cycle on context switch (Waiman Long) [2084138]
- sched/vtime: Move task_struct_rh-&gt;vtime_cpu back to vtime structure (Waiman Long) [2084138]
- net: openvswitch: fix leak of nested actions (Eelco Chaudron) [2086590]
- net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner) [2074221]
- PCI: hv: Propagate coherence from VMbus device to PCI device (Vitaly Kuznetsov) [2074829]
- Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus device (Vitaly Kuznetsov) [2074829]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.13.1.el8_6]" date="1654516800">- openvswitch: always update flow key after nat (Aaron Conole) [2068476 2066885]
- KVM: PPC: Fix TCE handling for VFIO (Daniel Henrique Barboza) [2085572 2062687]
- rfkill: make new event layout opt-in (Jose Ignacio Tornos Martinez) [2087641 2023175]
- ASoC: Intel: soc-acpi: add entries in ADL match table (Jaroslav Kysela) [2090423 2052011]
- isert: support for unsolicited NOPIN with no response (Maurizio Lombardi) [2079433 2035915]
- iscsit: increment max_cmd_sn for isert on command release (Maurizio Lombardi) [2079433 2035915]
- net: tcp better handling of reordering then loss cases (Marcelo Ricardo Leitner) [2080972 2074566]
- tcp: tcp_mark_head_lost is only valid for sack-tcp (Marcelo Ricardo Leitner) [2080972 2074566]</changelog>
</package>
<package pkgid="20434fb790947ca982ab58b8d98d17c466c6cb6a878351e9f54b2f07dc190e81" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="372.16.1.el8_6"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.7.1.el8]" date="1649246400">- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056728]
- KVM: SVM: Allow AVIC support on system w/ physical APIC ID &gt; 255 (Bandan Das) [2033068]
- PCI/ACPI: Fix acpi_pci_osc_control_set() kernel-doc comment (Mark Langsdorf) [2049209]
- PCI/ACPI: Check for _OSC support in acpi_pci_osc_control_set() (Mark Langsdorf) [2049209]
- PCI/ACPI: Move _OSC query checks to separate function (Mark Langsdorf) [2049209]
- PCI/ACPI: Move supported and control calculations to separate functions (Mark Langsdorf) [2049209]
- PCI/ACPI: Remove OSC_PCI_SUPPORT_MASKS and OSC_PCI_CONTROL_MASKS (Mark Langsdorf) [2049209]
- kabi: Adding symbol blkdev_get_by_dev (fs/block_dev.c) (Čestmír Kalina) [2010296]
- kabi: Adding symbol thaw_bdev (fs/block_dev.c) (Čestmír Kalina) [2010296]
- kabi: Adding symbol freeze_bdev (fs/block_dev.c) (Čestmír Kalina) [2010296]
- s390/cio: make ccw_device_dma_* more robust (Thomas Huth) [2066709]
- perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Michael Petlan) [2069237]
- redhat: switch secureboot kernel image signing to release keys (Augusto Caringi)
- ice: xsk: Stop Rx processing when ntc catches ntu (Ivan Vecera) [2069082]
- ice: xsk: Fix indexing in ice_tx_xsk_pool() (Ivan Vecera) [2069082]
- ice: Fix kernel crash in XDP scenario (Ivan Vecera) [2069082]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.8.1.el8]" date="1649678400">- esp6: fix check on ipv6_skip_exthdr's return value (Sabrina Dubroca) [2054075]
- scsi: iscsi: Fix nop handling during conn recovery (Chris Leech) [2069969]
- scsi: iscsi: Merge suspend fields (Chris Leech) [2069969]
- scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2069969]
- scsi: iscsi: Move iscsi_ep_disconnect (Chris Leech) [2069969]
- CI: Remove deprecated option (Veronika Kabatova)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.9.1.el8]" date="1650024000">- scsi: qedi: Fix failed disconnect handling (Chris Leech) [2071519]
- scsi: iscsi: Fix unbound endpoint error handling (Chris Leech) [2071519]
- scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Chris Leech) [2071519]
- scsi: iscsi: Fix endpoint reuse regression (Chris Leech) [2071519]
- scsi: iscsi: Release endpoint ID when its freed (Chris Leech) [2071519]
- scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2071519]
- Revert "scsi: iscsi: Fix offload conn cleanup when iscsid restarts" (Chris Leech) [2071519]
- scsi: iscsi: Speed up session unblocking and removal (Chris Leech) [2071519]
- scsi: iscsi: Fix recovery and unblocking race (Chris Leech) [2071519]
- scsi: iscsi: Unblock session then wake up error handler (Chris Leech) [2071519]
- bnxt_en: make hw-tc-offload default to off (Ken Cox) [2005101]
- bnxt_en: reject indirect blk offload when hw-tc-offload is off (Ken Cox) [2005101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.10.1.el8_6]" date="1652443200">- Fonts: Replace discarded const qualifier (Nico Pache) [2064762]
- Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Nico Pache) [2064762]
- fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Nico Pache) [2064762]
- CI: Drop baseline runs (Veronika Kabatova)
- redhat: drop the -sha512 suffix from default rhpkg invocation (Jarod Wilson)
- redhat: switch release to zstream (Augusto Caringi)
- ceph: fix possible NULL pointer dereference for req-&gt;r_session (Xiubo Li) [2080071]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.11.1.el8_6]" date="1653480000">- Revert "xfs: actually bump warning counts when we send warnings" (Carlos Maiolino) [2071713]
- SUNRPC: use different lock keys for INET6 and LOCAL (Guillaume Nault) [2079856]
- Revert "netfilter: conntrack: tag conntracks picked up in local out hook" (Florian Westphal) [2065266]
- Revert "netfilter: nat: force port remap to prevent shadowing well-known ports" (Florian Westphal) [2065266]
- KVM: PPC: Book3S HV: Add infrastructure to support 2nd DAWR (Laurent Vivier) [2079069]
- KVM: PPC: Book3S HV: Rename current DAWR macros and variables (Laurent Vivier) [2079069]
- esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca) [2062114] {CVE-2022-27666}
- esp: Fix possible buffer overflow in ESP transformation (Sabrina Dubroca) [2062114] {CVE-2022-27666}
- NFS: Don't loop forever in nfs_do_recoalesce() (Scott Mayhew) [2080998]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.12.1.el8_6]" date="1654084800">- sctp: use the correct skb for security_sctp_assoc_request (Xin Long) [2070959]
- net/mlx5e: Fix wrong source vport matching on tunnel rule (Amir Tzin) [2088610]
- net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (Amir Tzin) [2088611]
- net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (Amir Tzin) [2088611]
- net/mlx5: DR, Cache STE shadow memory (Amir Tzin) [2075553]
- net/mlx5: DR, Fix the threshold that defines when pool sync is initiated (Amir Tzin) [2075553]
- drm/i915/display: Remove check for low voltage sku for max dp source rate (Jocelyn Falempe) [2066644]
- net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it (Amir Tzin) [2088638]
- net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion (Amir Tzin) [2081011]
- net/mlx5e: TC, Skip redundant ct clear actions (Amir Tzin) [2079918]
- net/mlx5e: TC, fix decap fallback to uplink when int port not supported (Amir Tzin) [2088639]
- CI: Use zstream builder image (Veronika Kabatova)
- ice: Allow to pass VLAN tagged packets to VF when port VLAN is configured (Petr Oros) [2081794]
- ice: clear stale Tx queue settings before configuring (Petr Oros) [2081794]
- ice: fix crash when writing timestamp on RX rings (Petr Oros) [2081794]
- ice: Fix race during aux device (un)plugging (Petr Oros) [2081794]
- ice: fix PTP stale Tx timestamps cleanup (Petr Oros) [2081794]
- ice: ice_sched: fix an incorrect NULL check on list iterator (Petr Oros) [2081794]
- ice: fix use-after-free when deinitializing mailbox snapshot (Petr Oros) [2081794]
- ice: wait 5 s for EMP reset after firmware flash (Petr Oros) [2081794]
- ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix incorrect locking in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix memory leak in ice_get_orom_civd_data() (Petr Oros) [2081794]
- ice: fix crash in switchdev mode (Petr Oros) [2081794]
- Revert "iavf: Fix deadlock occurrence during resetting VF interface" (Petr Oros) [2081794]
- ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Petr Oros) [2081794]
- ice: clear cmd_type_offset_bsz for TX rings (Petr Oros) [2081794]
- ice: xsk: fix VSI state check in ice_xsk_wakeup() (Petr Oros) [2081794]
- ice: synchronize_rcu() when terminating rings (Petr Oros) [2081794]
- ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Petr Oros) [2081794]
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Petr Oros) [2081794]
- ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2081794]
- ice: Fix MAC address setting (Petr Oros) [2081794]
- openvswitch: Fix setting ipv6 fields causing hw csum failure (Eelco Chaudron) [2086549]
- sched/cputime, proc/stat: Fix incorrect guest nice cpustat value (Waiman Long) [2084138]
- procfs: Use all-in-one vtime aware kcpustat accessor (Waiman Long) [2084138]
- procfs: Use vtime aware kcpustat accessor to fetch CPUTIME_SYSTEM (Waiman Long) [2084138]
- proc: read kernel cpu stat pointer once (Waiman Long) [2084138]
- proc: use "unsigned int" in /proc/stat hook (Waiman Long) [2084138]
- sched/cputime: Support other fields on kcpustat_field() (Waiman Long) [2084138]
- sched/cputime: Add vtime guest task state (Waiman Long) [2084138]
- sched/cputime: Add vtime idle task state (Waiman Long) [2084138]
- sched/cputime: Spare a seqcount lock/unlock cycle on context switch (Waiman Long) [2084138]
- sched/vtime: Move task_struct_rh-&gt;vtime_cpu back to vtime structure (Waiman Long) [2084138]
- net: openvswitch: fix leak of nested actions (Eelco Chaudron) [2086590]
- net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner) [2074221]
- PCI: hv: Propagate coherence from VMbus device to PCI device (Vitaly Kuznetsov) [2074829]
- Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus device (Vitaly Kuznetsov) [2074829]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.13.1.el8_6]" date="1654516800">- openvswitch: always update flow key after nat (Aaron Conole) [2068476 2066885]
- KVM: PPC: Fix TCE handling for VFIO (Daniel Henrique Barboza) [2085572 2062687]
- rfkill: make new event layout opt-in (Jose Ignacio Tornos Martinez) [2087641 2023175]
- ASoC: Intel: soc-acpi: add entries in ADL match table (Jaroslav Kysela) [2090423 2052011]
- isert: support for unsolicited NOPIN with no response (Maurizio Lombardi) [2079433 2035915]
- iscsit: increment max_cmd_sn for isert on command release (Maurizio Lombardi) [2079433 2035915]
- net: tcp better handling of reordering then loss cases (Marcelo Ricardo Leitner) [2080972 2074566]
- tcp: tcp_mark_head_lost is only valid for sack-tcp (Marcelo Ricardo Leitner) [2080972 2074566]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-372.14.1.el8_6]" date="1655208000">- scsi: core: sysfs: Fix setting device state to SDEV_RUNNING (Chris Leech) [2091078 2086970]
- scsi: core: sysfs: Fix hang when device state is set via sysfs (Chris Leech) [2091078 2086970]
- net/sched: act_ct: fix ref leak when switching zones (Marcelo Ricardo Leitner) [2066356 2014027]
- net/sched: act_ct: Fix flow table lookup after ct clear or switching zones (Marcelo Ricardo Leitner) [2066356 2014027]
- drm/i915: Stop force enabling pipe bottom color gammma/csc (Foggy Liu) [2083384 2054487]
- gfs2: Fix gfs2_release for non-writers regression (Bob Peterson) [2092074 1955591]
- gfs2: gfs2_create_inode rework (Andreas Gruenbacher) [2092074 1955591]
- gfs2: gfs2_inode_lookup rework (Andreas Gruenbacher) [2092074 1955591]
- gfs2: gfs2_inode_lookup cleanup (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix remote demote of weak glock holders (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix glock_hash_walk bugs (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Cancel remote delete work asynchronously (Bob Peterson) [2092074 1955591]
- gfs2: set glock object after nq (Bob Peterson) [2092074 1955591]
- gfs2: remove RDF_UPTODATE flag (Bob Peterson) [2092074 1955591]
- gfs2: Eliminate GIF_INVALID flag (Bob Peterson) [2092074 1955591]
- gfs2: Fix atomic bug in gfs2_instantiate (Andreas Gruenbacher) [2092074 1955591]
- gfs2: fix GL_SKIP node_scope problems (Bob Peterson) [2092074 1955591]
- gfs2: Add some flags missing from glock output (Bob Peterson) [2092074 1955591]
- gfs2: split glock instantiation off from do_promote (Bob Peterson) [2092074 1955591]
- gfs2: further simplify do_promote (Bob Peterson) [2092074 1955591]
- gfs2: re-factor function do_promote (Bob Peterson) [2092074 1955591]
- gfs2: Remove 'first' trace_gfs2_promote argument (Andreas Gruenbacher) [2092074 1955591]
- gfs2: change go_lock to go_instantiate (Bob Peterson) [2092074 1955591]
- gfs2: Switch some BUG_ON to GLOCK_BUG_ON for debug (Bob Peterson) [2092074 1955591]
- gfs2: move GL_SKIP check from glops to do_promote (Bob Peterson) [2092074 1955591]
- gfs2: Add GL_SKIP holder flag to dump_holder (Bob Peterson) [2092074 1955591]
- gfs2: remove redundant check in gfs2_rgrp_go_lock (Bob Peterson) [2092074 1955591]
- gfs2: Fix mmap + page fault deadlocks for direct I/O (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Introduce ITER_IOVEC_FLAG_NOFAULT flag to disable page faults (Andreas Gruenbacher) [2092074 1955591]
- gup: Introduce FOLL_NOFAULT flag to disable page faults (Andreas Gruenbacher) [2092074 1955591]
- iomap: Add done_before argument to iomap_dio_rw (Andreas Gruenbacher) [2092074 1955591]
- iomap: Support partial direct I/O on user copy failures (Andreas Gruenbacher) [2092074 1955591]
- iomap: Fix iomap_dio_rw return value for user copies (Andreas Gruenbacher) [2092074 1955591]
- iomap: support reading inline data from non-zero pos (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Only dereference i-&gt;iov when iter_is_iovec(i) (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Prevent endless loops in gfs2_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix mmap + page fault deadlocks for buffered I/O (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Eliminate ip-&gt;i_gh (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Move the inode glock locking to gfs2_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix "Introduce flag for glock holder auto-demotion" (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Introduce flag for glock holder auto-demotion (Bob Peterson) [2092074 1955591]
- gfs2: fix scheduling while atomic bug in glocks (Bob Peterson) [2092074 1955591]
- gfs2: Clean up function may_grant (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Add wrapper for iomap_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Introduce fault_in_iov_iter_writeable (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Turn iov_iter_fault_in_readable into fault_in_iov_iter_readable (Andreas Gruenbacher) [2092074 1955591]
- gup: Turn fault_in_pages_{readable,writeable} into fault_in_{readable,writeable} (Andreas Gruenbacher) [2092074 1955591]
- powerpc/signal64: Don't opencode page prefaulting (Andreas Gruenbacher) [2092074 1955591]
- sanitize iov_iter_fault_in_readable() (Andreas Gruenbacher) [2092074 1955591]
- [xarray] iov_iter_fault_in_readable() should do nothing in xarray case (Andreas Gruenbacher) [2092074 1955591]
- powerpc/kvm: Fix kvm_use_magic_page (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix length of holes reported at end-of-file (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Remove redundant check from gfs2_glock_dq (Bob Peterson) [2092074 1955591]
- gfs2: release iopen glock early in evict (Bob Peterson) [2092074 1955591]
- mm: change fault_in_pages_* to have an unsigned size parameter (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Eliminate vestigial HIF_FIRST (Bob Peterson) [2092074 1955591]
- iomap: remove the iomap arguments to -&gt;page_{prepare,done} (Andreas Gruenbacher) [2092074 1955591]
- md: Set MD_BROKEN for RAID1 and RAID10 (Nigel Croxon) [2075075 2048954]
- raid5: introduce MD_BROKEN (Nigel Croxon) [2075075 2048954]
- drm/i915/ehl: Remove require_force_probe protection (Michel Dänzer) [2075567 2048674]
- genirq: Use rcu in kstat_irqs_usr() (Waiman Long) [2083308 2068445]
- dm integrity: fix memory corruption when tag_size is less than digest size (Benjamin Marzinski) [2082184 2081775]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-372.15.1.el8_6]" date="1655812800">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087948 2087949] {CVE-2022-1729}
- vmxnet3: fix minimum vectors alloc issue (Kamal Heib) [2094473 2093242]
- gfs2: Stop using glock holder auto-demotion for now (Andreas Gruenbacher) [2092073 2054855]
- gfs2: buffered write prefaulting (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Align read and write chunks to the page cache (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Pull return value test out of should_fault_in_pages (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Clean up use of fault_in_iov_iter_{read,write}able (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Variable rename (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher) [2092073 2054855]
- iomap: iomap_write_end cleanup (Andreas Gruenbacher) [2092073 2054855]
- iomap: iomap_write_failed fix (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Don't re-check for write past EOF unnecessarily (Andreas Gruenbacher) [2092073 2054855]
- gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher) [2092073 2054855]
- fs/iomap: Fix buffered write page prefaulting (Andreas Gruenbacher) [2092073 2054855]
- generic_perform_write()/iomap_write_actor(): saner logics for short copy (Andreas Gruenbacher) [2092073 2054855]
- iomap: Convert iomap_write_end types (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Make sure not to return short direct writes (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Remove dead code in gfs2_file_read_iter (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Minor retry logic cleanup (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Fix should_fault_in_pages() logic (Andreas Gruenbacher) [2092073 2054855]
- mm: gup: make fault_in_safe_writeable() use fixup_user_fault() (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Initialize gh_error in gfs2_glock_nq (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Switch lock order of inode and iopen glock (Andreas Gruenbacher) [2092073 2054855]
- gfs2: cancel timed-out glock requests (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Expect -EBUSY after canceling dlm locking requests (Andreas Gruenbacher) [2092073 2054855]
- gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher) [2092073 2054855]
- gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) [2092073 2054855]
- net: openvswitch: don't send internal clone attribute to the userspace. (Antoine Tenart) [2097796 2085509]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-372.16.1.el8_6]" date="1656417600">- x86/platform/uv: Log gap hole end size (Frank Ramsay) [2084645 2074098]
- x86/platform/uv: Update TSC sync state for UV5 (Frank Ramsay) [2084645 2074098]
- x86/platform/uv: Update NMI Handler for UV5 (Frank Ramsay) [2084645 2074098]
- x86/platform/uv: Remove unused variable in UV5 NMI handler (Frank Ramsay) [2084645 2074098]
- blk-mq: fix blk_mq_flush_plug_list (Ming Lei) [2096931 2088397]
- sched/pelt: Fix attach_entity_load_avg() corner case (Phil Auld) [2096305 2056383]</changelog>
</package>
<package pkgid="b5fa37ee7635f1dd88c240d80169ebca9a32da72447c6d4318aa08059b3003bd" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="372.19.1.el8_6"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.10.1.el8_6]" date="1652443200">- Fonts: Replace discarded const qualifier (Nico Pache) [2064762]
- Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Nico Pache) [2064762]
- fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Nico Pache) [2064762]
- CI: Drop baseline runs (Veronika Kabatova)
- redhat: drop the -sha512 suffix from default rhpkg invocation (Jarod Wilson)
- redhat: switch release to zstream (Augusto Caringi)
- ceph: fix possible NULL pointer dereference for req-&gt;r_session (Xiubo Li) [2080071]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.11.1.el8_6]" date="1653480000">- Revert "xfs: actually bump warning counts when we send warnings" (Carlos Maiolino) [2071713]
- SUNRPC: use different lock keys for INET6 and LOCAL (Guillaume Nault) [2079856]
- Revert "netfilter: conntrack: tag conntracks picked up in local out hook" (Florian Westphal) [2065266]
- Revert "netfilter: nat: force port remap to prevent shadowing well-known ports" (Florian Westphal) [2065266]
- KVM: PPC: Book3S HV: Add infrastructure to support 2nd DAWR (Laurent Vivier) [2079069]
- KVM: PPC: Book3S HV: Rename current DAWR macros and variables (Laurent Vivier) [2079069]
- esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca) [2062114] {CVE-2022-27666}
- esp: Fix possible buffer overflow in ESP transformation (Sabrina Dubroca) [2062114] {CVE-2022-27666}
- NFS: Don't loop forever in nfs_do_recoalesce() (Scott Mayhew) [2080998]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.12.1.el8_6]" date="1654084800">- sctp: use the correct skb for security_sctp_assoc_request (Xin Long) [2070959]
- net/mlx5e: Fix wrong source vport matching on tunnel rule (Amir Tzin) [2088610]
- net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (Amir Tzin) [2088611]
- net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (Amir Tzin) [2088611]
- net/mlx5: DR, Cache STE shadow memory (Amir Tzin) [2075553]
- net/mlx5: DR, Fix the threshold that defines when pool sync is initiated (Amir Tzin) [2075553]
- drm/i915/display: Remove check for low voltage sku for max dp source rate (Jocelyn Falempe) [2066644]
- net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it (Amir Tzin) [2088638]
- net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion (Amir Tzin) [2081011]
- net/mlx5e: TC, Skip redundant ct clear actions (Amir Tzin) [2079918]
- net/mlx5e: TC, fix decap fallback to uplink when int port not supported (Amir Tzin) [2088639]
- CI: Use zstream builder image (Veronika Kabatova)
- ice: Allow to pass VLAN tagged packets to VF when port VLAN is configured (Petr Oros) [2081794]
- ice: clear stale Tx queue settings before configuring (Petr Oros) [2081794]
- ice: fix crash when writing timestamp on RX rings (Petr Oros) [2081794]
- ice: Fix race during aux device (un)plugging (Petr Oros) [2081794]
- ice: fix PTP stale Tx timestamps cleanup (Petr Oros) [2081794]
- ice: ice_sched: fix an incorrect NULL check on list iterator (Petr Oros) [2081794]
- ice: fix use-after-free when deinitializing mailbox snapshot (Petr Oros) [2081794]
- ice: wait 5 s for EMP reset after firmware flash (Petr Oros) [2081794]
- ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix incorrect locking in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix memory leak in ice_get_orom_civd_data() (Petr Oros) [2081794]
- ice: fix crash in switchdev mode (Petr Oros) [2081794]
- Revert "iavf: Fix deadlock occurrence during resetting VF interface" (Petr Oros) [2081794]
- ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Petr Oros) [2081794]
- ice: clear cmd_type_offset_bsz for TX rings (Petr Oros) [2081794]
- ice: xsk: fix VSI state check in ice_xsk_wakeup() (Petr Oros) [2081794]
- ice: synchronize_rcu() when terminating rings (Petr Oros) [2081794]
- ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Petr Oros) [2081794]
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Petr Oros) [2081794]
- ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2081794]
- ice: Fix MAC address setting (Petr Oros) [2081794]
- openvswitch: Fix setting ipv6 fields causing hw csum failure (Eelco Chaudron) [2086549]
- sched/cputime, proc/stat: Fix incorrect guest nice cpustat value (Waiman Long) [2084138]
- procfs: Use all-in-one vtime aware kcpustat accessor (Waiman Long) [2084138]
- procfs: Use vtime aware kcpustat accessor to fetch CPUTIME_SYSTEM (Waiman Long) [2084138]
- proc: read kernel cpu stat pointer once (Waiman Long) [2084138]
- proc: use "unsigned int" in /proc/stat hook (Waiman Long) [2084138]
- sched/cputime: Support other fields on kcpustat_field() (Waiman Long) [2084138]
- sched/cputime: Add vtime guest task state (Waiman Long) [2084138]
- sched/cputime: Add vtime idle task state (Waiman Long) [2084138]
- sched/cputime: Spare a seqcount lock/unlock cycle on context switch (Waiman Long) [2084138]
- sched/vtime: Move task_struct_rh-&gt;vtime_cpu back to vtime structure (Waiman Long) [2084138]
- net: openvswitch: fix leak of nested actions (Eelco Chaudron) [2086590]
- net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner) [2074221]
- PCI: hv: Propagate coherence from VMbus device to PCI device (Vitaly Kuznetsov) [2074829]
- Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus device (Vitaly Kuznetsov) [2074829]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.13.1.el8_6]" date="1654516800">- openvswitch: always update flow key after nat (Aaron Conole) [2068476 2066885]
- KVM: PPC: Fix TCE handling for VFIO (Daniel Henrique Barboza) [2085572 2062687]
- rfkill: make new event layout opt-in (Jose Ignacio Tornos Martinez) [2087641 2023175]
- ASoC: Intel: soc-acpi: add entries in ADL match table (Jaroslav Kysela) [2090423 2052011]
- isert: support for unsolicited NOPIN with no response (Maurizio Lombardi) [2079433 2035915]
- iscsit: increment max_cmd_sn for isert on command release (Maurizio Lombardi) [2079433 2035915]
- net: tcp better handling of reordering then loss cases (Marcelo Ricardo Leitner) [2080972 2074566]
- tcp: tcp_mark_head_lost is only valid for sack-tcp (Marcelo Ricardo Leitner) [2080972 2074566]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-372.14.1.el8_6]" date="1655208000">- scsi: core: sysfs: Fix setting device state to SDEV_RUNNING (Chris Leech) [2091078 2086970]
- scsi: core: sysfs: Fix hang when device state is set via sysfs (Chris Leech) [2091078 2086970]
- net/sched: act_ct: fix ref leak when switching zones (Marcelo Ricardo Leitner) [2066356 2014027]
- net/sched: act_ct: Fix flow table lookup after ct clear or switching zones (Marcelo Ricardo Leitner) [2066356 2014027]
- drm/i915: Stop force enabling pipe bottom color gammma/csc (Foggy Liu) [2083384 2054487]
- gfs2: Fix gfs2_release for non-writers regression (Bob Peterson) [2092074 1955591]
- gfs2: gfs2_create_inode rework (Andreas Gruenbacher) [2092074 1955591]
- gfs2: gfs2_inode_lookup rework (Andreas Gruenbacher) [2092074 1955591]
- gfs2: gfs2_inode_lookup cleanup (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix remote demote of weak glock holders (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix glock_hash_walk bugs (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Cancel remote delete work asynchronously (Bob Peterson) [2092074 1955591]
- gfs2: set glock object after nq (Bob Peterson) [2092074 1955591]
- gfs2: remove RDF_UPTODATE flag (Bob Peterson) [2092074 1955591]
- gfs2: Eliminate GIF_INVALID flag (Bob Peterson) [2092074 1955591]
- gfs2: Fix atomic bug in gfs2_instantiate (Andreas Gruenbacher) [2092074 1955591]
- gfs2: fix GL_SKIP node_scope problems (Bob Peterson) [2092074 1955591]
- gfs2: Add some flags missing from glock output (Bob Peterson) [2092074 1955591]
- gfs2: split glock instantiation off from do_promote (Bob Peterson) [2092074 1955591]
- gfs2: further simplify do_promote (Bob Peterson) [2092074 1955591]
- gfs2: re-factor function do_promote (Bob Peterson) [2092074 1955591]
- gfs2: Remove 'first' trace_gfs2_promote argument (Andreas Gruenbacher) [2092074 1955591]
- gfs2: change go_lock to go_instantiate (Bob Peterson) [2092074 1955591]
- gfs2: Switch some BUG_ON to GLOCK_BUG_ON for debug (Bob Peterson) [2092074 1955591]
- gfs2: move GL_SKIP check from glops to do_promote (Bob Peterson) [2092074 1955591]
- gfs2: Add GL_SKIP holder flag to dump_holder (Bob Peterson) [2092074 1955591]
- gfs2: remove redundant check in gfs2_rgrp_go_lock (Bob Peterson) [2092074 1955591]
- gfs2: Fix mmap + page fault deadlocks for direct I/O (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Introduce ITER_IOVEC_FLAG_NOFAULT flag to disable page faults (Andreas Gruenbacher) [2092074 1955591]
- gup: Introduce FOLL_NOFAULT flag to disable page faults (Andreas Gruenbacher) [2092074 1955591]
- iomap: Add done_before argument to iomap_dio_rw (Andreas Gruenbacher) [2092074 1955591]
- iomap: Support partial direct I/O on user copy failures (Andreas Gruenbacher) [2092074 1955591]
- iomap: Fix iomap_dio_rw return value for user copies (Andreas Gruenbacher) [2092074 1955591]
- iomap: support reading inline data from non-zero pos (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Only dereference i-&gt;iov when iter_is_iovec(i) (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Prevent endless loops in gfs2_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix mmap + page fault deadlocks for buffered I/O (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Eliminate ip-&gt;i_gh (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Move the inode glock locking to gfs2_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix "Introduce flag for glock holder auto-demotion" (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Introduce flag for glock holder auto-demotion (Bob Peterson) [2092074 1955591]
- gfs2: fix scheduling while atomic bug in glocks (Bob Peterson) [2092074 1955591]
- gfs2: Clean up function may_grant (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Add wrapper for iomap_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Introduce fault_in_iov_iter_writeable (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Turn iov_iter_fault_in_readable into fault_in_iov_iter_readable (Andreas Gruenbacher) [2092074 1955591]
- gup: Turn fault_in_pages_{readable,writeable} into fault_in_{readable,writeable} (Andreas Gruenbacher) [2092074 1955591]
- powerpc/signal64: Don't opencode page prefaulting (Andreas Gruenbacher) [2092074 1955591]
- sanitize iov_iter_fault_in_readable() (Andreas Gruenbacher) [2092074 1955591]
- [xarray] iov_iter_fault_in_readable() should do nothing in xarray case (Andreas Gruenbacher) [2092074 1955591]
- powerpc/kvm: Fix kvm_use_magic_page (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix length of holes reported at end-of-file (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Remove redundant check from gfs2_glock_dq (Bob Peterson) [2092074 1955591]
- gfs2: release iopen glock early in evict (Bob Peterson) [2092074 1955591]
- mm: change fault_in_pages_* to have an unsigned size parameter (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Eliminate vestigial HIF_FIRST (Bob Peterson) [2092074 1955591]
- iomap: remove the iomap arguments to -&gt;page_{prepare,done} (Andreas Gruenbacher) [2092074 1955591]
- md: Set MD_BROKEN for RAID1 and RAID10 (Nigel Croxon) [2075075 2048954]
- raid5: introduce MD_BROKEN (Nigel Croxon) [2075075 2048954]
- drm/i915/ehl: Remove require_force_probe protection (Michel Dänzer) [2075567 2048674]
- genirq: Use rcu in kstat_irqs_usr() (Waiman Long) [2083308 2068445]
- dm integrity: fix memory corruption when tag_size is less than digest size (Benjamin Marzinski) [2082184 2081775]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-372.15.1.el8_6]" date="1655812800">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087948 2087949] {CVE-2022-1729}
- vmxnet3: fix minimum vectors alloc issue (Kamal Heib) [2094473 2093242]
- gfs2: Stop using glock holder auto-demotion for now (Andreas Gruenbacher) [2092073 2054855]
- gfs2: buffered write prefaulting (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Align read and write chunks to the page cache (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Pull return value test out of should_fault_in_pages (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Clean up use of fault_in_iov_iter_{read,write}able (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Variable rename (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher) [2092073 2054855]
- iomap: iomap_write_end cleanup (Andreas Gruenbacher) [2092073 2054855]
- iomap: iomap_write_failed fix (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Don't re-check for write past EOF unnecessarily (Andreas Gruenbacher) [2092073 2054855]
- gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher) [2092073 2054855]
- fs/iomap: Fix buffered write page prefaulting (Andreas Gruenbacher) [2092073 2054855]
- generic_perform_write()/iomap_write_actor(): saner logics for short copy (Andreas Gruenbacher) [2092073 2054855]
- iomap: Convert iomap_write_end types (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Make sure not to return short direct writes (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Remove dead code in gfs2_file_read_iter (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Minor retry logic cleanup (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Fix should_fault_in_pages() logic (Andreas Gruenbacher) [2092073 2054855]
- mm: gup: make fault_in_safe_writeable() use fixup_user_fault() (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Initialize gh_error in gfs2_glock_nq (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Switch lock order of inode and iopen glock (Andreas Gruenbacher) [2092073 2054855]
- gfs2: cancel timed-out glock requests (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Expect -EBUSY after canceling dlm locking requests (Andreas Gruenbacher) [2092073 2054855]
- gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher) [2092073 2054855]
- gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) [2092073 2054855]
- net: openvswitch: don't send internal clone attribute to the userspace. (Antoine Tenart) [2097796 2085509]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-372.16.1.el8_6]" date="1656417600">- x86/platform/uv: Log gap hole end size (Frank Ramsay) [2084645 2074098]
- x86/platform/uv: Update TSC sync state for UV5 (Frank Ramsay) [2084645 2074098]
- x86/platform/uv: Update NMI Handler for UV5 (Frank Ramsay) [2084645 2074098]
- x86/platform/uv: Remove unused variable in UV5 NMI handler (Frank Ramsay) [2084645 2074098]
- blk-mq: fix blk_mq_flush_plug_list (Ming Lei) [2096931 2088397]
- sched/pelt: Fix attach_entity_load_avg() corner case (Phil Auld) [2096305 2056383]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.17.1.el8_6]" date="1657368000">- tcp: drop the hash_32() part from the index calculation (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: increase source port perturb table to 2^16 (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: dynamically allocate the perturb table used by source ports (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: add small random increments to the source port (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: resalt the secret every 10 seconds (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: use different parts of the port_offset for index and offset (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- secure_seq: use the 64 bits of the siphash for port offset calculation (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: add some entropy in __inet_hash_connect() (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: change source port randomizarion at connect() time (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- hrtimer: Unbreak hrtimer_force_reprogram() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Use raw_cpu_ptr() in clock_was_set() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Avoid more SMP function calls in clock_was_set() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Avoid unnecessary SMP function calls in clock_was_set() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Add bases argument to clock_was_set() (Fernando Pacheco) [2090484 2071776]
- time/timekeeping: Avoid invoking clock_was_set() twice (Fernando Pacheco) [2090484 2071776]
- timekeeping: Distangle resume and clock-was-set events (Fernando Pacheco) [2090484 2071776]
- timerfd: Provide timerfd_resume() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Force clock_was_set() handling for the HIGHRES=n, NOHZ=y case (Fernando Pacheco) [2090484 2071776]
- hrtimer: Ensure timerfd notification for HIGHRES=n (Fernando Pacheco) [2090484 2071776]
- hrtimer: Consolidate reprogramming code (Fernando Pacheco) [2090484 2071776]
- hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Update softirq_expires_next correctly after __hrtimer_get_next_event() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Annotate lockless access to timer-&gt;state (Fernando Pacheco) [2090484 2071776]
- mm, compaction: fast_find_migrateblock() should return pfn in the target zone (Rafael Aquini) [2100529 2067130]
- lib/sbitmap: fix sb-&gt;map leak (Ming Lei) [2100254 2093549]
- scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map() (Ewan D. Milne) [2100254 2071831]
- lib/sbitmap: allocate sb-&gt;map via kvzalloc_node (Ewan D. Milne) [2100254 2071831]
- mm: move kvmalloc-related functions to slab.h (Ewan D. Milne) [2100254 2071831]
- scsi: core: Reallocate device's budget map on queue depth change (Ewan D. Milne) [2100254 2071831]
- scsi: core: Fix scsi_device_max_queue_depth() (Ewan D. Milne) [2100254 2071831]
- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2092986 2092987] {CVE-2022-32250}
- audit: improve audit queue handling when "audit=1" on cmdline (Richard Guy Briggs) [2095434 2035123]
- audit: improve robustness of the audit queue handling (Richard Guy Briggs) [2095434 2035123]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.18.1.el8_6]" date="1657713600">- redhat: flesh out rpminspect config file (Jarod Wilson)
- powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" (Steve Best) [2100150 2056080]
- vdpa: mlx5: synchronize driver status with CVQ (Jason Wang) [2093416 2048009]
- vdpa: mlx5: prevent cvq work from hogging CPU (Jason Wang) [2093416 2048009]
- vdpa/mlx5: Avoid processing works if workqueue was destroyed (Cindy Lu) [2093416 2048009]
- cifs: fix potential double free during failed mount (Ronnie Sahlberg) [2102251 2088799]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.19.1.el8_6]" date="1658145600">- net/mlx5: CT: Fix header-rewrite re-use for tupels (Amir Tzin) [2104013 2101162]
- net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (Amir Tzin) [2104012 2100474]
- netfilter: flowtable: fix TCP flow teardown (Florian Westphal) [2104002 2088234]
- netfilter: conntrack: annotate data-races around ct-&gt;timeout (Florian Westphal) [2104002 2088234]
- netfilter: conntrack: initialize ct-&gt;timeout (Florian Westphal) [2104002 2088234]
- net/sched: act_police: more accurate MTU policing (Davide Caratti) [2102333 2100893]
- bpf: Fix request_sock leak in sk lookup helpers (Antoine Tenart) [2104670 2085313]</changelog>
</package>
<package pkgid="d820e67a5d4f684ec507abf0807fedb21967f62d4e6be7a69dfdaabc6da033bb" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="372.26.1.el8_6"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.17.1.el8_6]" date="1657368000">- tcp: drop the hash_32() part from the index calculation (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: increase source port perturb table to 2^16 (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: dynamically allocate the perturb table used by source ports (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: add small random increments to the source port (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: resalt the secret every 10 seconds (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: use different parts of the port_offset for index and offset (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- secure_seq: use the 64 bits of the siphash for port offset calculation (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: add some entropy in __inet_hash_connect() (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- tcp: change source port randomizarion at connect() time (Guillaume Nault) [2087130 2064876] {CVE-2022-1012}
- hrtimer: Unbreak hrtimer_force_reprogram() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Use raw_cpu_ptr() in clock_was_set() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Avoid more SMP function calls in clock_was_set() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Avoid unnecessary SMP function calls in clock_was_set() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Add bases argument to clock_was_set() (Fernando Pacheco) [2090484 2071776]
- time/timekeeping: Avoid invoking clock_was_set() twice (Fernando Pacheco) [2090484 2071776]
- timekeeping: Distangle resume and clock-was-set events (Fernando Pacheco) [2090484 2071776]
- timerfd: Provide timerfd_resume() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Force clock_was_set() handling for the HIGHRES=n, NOHZ=y case (Fernando Pacheco) [2090484 2071776]
- hrtimer: Ensure timerfd notification for HIGHRES=n (Fernando Pacheco) [2090484 2071776]
- hrtimer: Consolidate reprogramming code (Fernando Pacheco) [2090484 2071776]
- hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Update softirq_expires_next correctly after __hrtimer_get_next_event() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Annotate lockless access to timer-&gt;state (Fernando Pacheco) [2090484 2071776]
- mm, compaction: fast_find_migrateblock() should return pfn in the target zone (Rafael Aquini) [2100529 2067130]
- lib/sbitmap: fix sb-&gt;map leak (Ming Lei) [2100254 2093549]
- scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map() (Ewan D. Milne) [2100254 2071831]
- lib/sbitmap: allocate sb-&gt;map via kvzalloc_node (Ewan D. Milne) [2100254 2071831]
- mm: move kvmalloc-related functions to slab.h (Ewan D. Milne) [2100254 2071831]
- scsi: core: Reallocate device's budget map on queue depth change (Ewan D. Milne) [2100254 2071831]
- scsi: core: Fix scsi_device_max_queue_depth() (Ewan D. Milne) [2100254 2071831]
- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2092986 2092987] {CVE-2022-32250}
- audit: improve audit queue handling when "audit=1" on cmdline (Richard Guy Briggs) [2095434 2035123]
- audit: improve robustness of the audit queue handling (Richard Guy Briggs) [2095434 2035123]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.18.1.el8_6]" date="1657713600">- redhat: flesh out rpminspect config file (Jarod Wilson)
- powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" (Steve Best) [2100150 2056080]
- vdpa: mlx5: synchronize driver status with CVQ (Jason Wang) [2093416 2048009]
- vdpa: mlx5: prevent cvq work from hogging CPU (Jason Wang) [2093416 2048009]
- vdpa/mlx5: Avoid processing works if workqueue was destroyed (Cindy Lu) [2093416 2048009]
- cifs: fix potential double free during failed mount (Ronnie Sahlberg) [2102251 2088799]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.19.1.el8_6]" date="1658145600">- net/mlx5: CT: Fix header-rewrite re-use for tupels (Amir Tzin) [2104013 2101162]
- net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (Amir Tzin) [2104012 2100474]
- netfilter: flowtable: fix TCP flow teardown (Florian Westphal) [2104002 2088234]
- netfilter: conntrack: annotate data-races around ct-&gt;timeout (Florian Westphal) [2104002 2088234]
- netfilter: conntrack: initialize ct-&gt;timeout (Florian Westphal) [2104002 2088234]
- net/sched: act_police: more accurate MTU policing (Davide Caratti) [2102333 2100893]
- bpf: Fix request_sock leak in sk lookup helpers (Antoine Tenart) [2104670 2085313]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.20.1.el8_6]" date="1658836800">- powerpc/pseries: Fix use after free in remove_phb_dynamic() (Steve Best) [2081250 2073707]
- mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (Íñigo Huguet) [2101684 2096758]
- mt76: mt7921e: fix possible probe failure after reboot (Íñigo Huguet) [2095654 2078877]
- x86/apic/vector: Fix ordering in vector assignment (Frank Ramsay) [2084646 2076607]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.21.1.el8_6]" date="1659528000">- KVM: x86/mmu: Don't advance iterator after restart due to yielding (Nico Pache) [2081013 2058907]
- RHEL-only: KVM: selftests: Fix AArch64 compilation (Paul Lai) [2107655 2071997]
- x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave) (Paul Lai) [2107652 2092066]
- KVM: x86: Use ERR_PTR_USR() to return -EFAULT as a __user pointer (Paul Lai) [2088288 2074679]
- KVM: x86: add system attribute to retrieve full set of supported xsave states (Paul Lai) [2088288 2074679]
- KVM: x86: Add a helper to retrieve userspace address from kvm_device_attr (Paul Lai) [2088288 2074679]
- tools: arch: x86: pull in pvclock headers (Paul Lai) [2088288 2074679]
- KVM: x86: Expose TSC offset controls to userspace (Paul Lai) [2088288 2074679]
- KVM: x86: Refactor tsc synchronization code (Paul Lai) [2088288 2074679]
- selftests: kvm: move vm_xsave_req_perm call to amx_test (Paul Lai) [2088288 2074679]
- RHEL-only: KVM: selftests: Remove unused modes (Andrew Jones) [2107655 2071997]
- tools headers UAPI: Sync linux/kvm.h with the kernel sources (Paul Lai) [2088287 1918929]
- kvm: selftests: sync uapi/linux/kvm.h with Linux header (Paul Lai) [2088287 1918929]
- kvm: selftests: conditionally build vm_xsave_req_perm() (Paul Lai) [2088287 1918929]
- x86/kvm/fpu: Remove kvm_vcpu_arch.guest_supported_xcr0 (Paul Lai) [2088287 1918929]
- x86/kvm/fpu: Limit guest user_xfeatures to supported bits of XCR0 (Paul Lai) [2088287 1918929]
- KVM: x86/cpuid: Exclude unpermitted xfeatures sizes at KVM_GET_SUPPORTED_CPUID (Paul Lai) [2088287 1918929]
- KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime() (Paul Lai) [2088287 1918929]
- KVM: x86/cpuid: Clear XFD for component i if the base feature is missing (Paul Lai) [2088287 1918929]
- KVM: x86: Do runtime CPUID update before updating vcpu-&gt;arch.cpuid_entries (Paul Lai) [2088287 1918929]
- x86/fpu: Fix inline prefix warnings (Paul Lai) [2088287 1918929]
- selftest: kvm: Add amx selftest (Paul Lai) [2088287 1918929]
- selftest: kvm: Move struct kvm_x86_state to header (Paul Lai) [2088287 1918929]
- selftest: kvm: Reorder vcpu_load_state steps for AMX (Paul Lai) [2088287 1918929]
- kvm: x86: Disable interception for IA32_XFD on demand (Paul Lai) [2088287 1918929]
- x86/fpu: Provide fpu_sync_guest_vmexit_xfd_state() (Paul Lai) [2088287 1918929]
- kvm: selftests: Add support for KVM_CAP_XSAVE2 (Paul Lai) [2088287 1918929]
- kvm: x86: Add support for getting/setting expanded xstate buffer (Paul Lai) [2088287 1918929]
- x86/fpu: Add uabi_size to guest_fpu (Paul Lai) [2088287 1918929]
- kvm: x86: Add CPUID support for Intel AMX (Paul Lai) [2088287 1918929]
- kvm: x86: Add XCR0 support for Intel AMX (Paul Lai) [2088287 1918929]
- kvm: x86: Disable RDMSR interception of IA32_XFD_ERR (Paul Lai) [2088287 1918929]
- kvm: x86: Emulate IA32_XFD_ERR for guest (Paul Lai) [2088287 1918929]
- kvm: x86: Intercept #NM for saving IA32_XFD_ERR (Paul Lai) [2088287 1918929]
- x86/fpu: Prepare xfd_err in struct fpu_guest (Paul Lai) [2088287 1918929]
- kvm: x86: Add emulation for IA32_XFD (Paul Lai) [2088287 1918929]
- x86/fpu: Provide fpu_update_guest_xfd() for IA32_XFD emulation (Paul Lai) [2088287 1918929]
- kvm: x86: Enable dynamic xfeatures at KVM_SET_CPUID2 (Paul Lai) [2088287 1918929]
- x86/fpu: Provide fpu_enable_guest_xfd_features() for KVM (Paul Lai) [2088287 1918929]
- x86/fpu: Add guest support to xfd_enable_feature() (Paul Lai) [2088287 1918929]
- x86/fpu: Make XFD initialization in __fpstate_reset() a function argument (Paul Lai) [2088287 1918929]
- kvm: x86: Exclude unpermitted xfeatures at KVM_GET_SUPPORTED_CPUID (Paul Lai) [2088287 1918929]
- kvm: x86: Fix xstate_required_size() to follow XSTATE alignment rule (Paul Lai) [2088287 1918929]
- x86/fpu: Prepare guest FPU for dynamically enabled FPU features (Paul Lai) [2088287 1918929]
- x86/fpu: Extend fpu_xstate_prctl() with guest permissions (Paul Lai) [2088287 1918929]
- kvm: selftests: move ucall declarations into ucall_common.h (Paul Lai) [2088287 1918929]
- kvm: selftests: move base kvm_util.h declarations to kvm_util_base.h (Paul Lai) [2088287 1918929]
- cpuid: kvm_find_kvm_cpuid_features() should be declared 'static' (Paul Lai) [2088287 1918929]
- KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES (Paul Lai) [2088287 1918929]
- KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows (Paul Lai) [2088287 1918929]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Andrew Jones) [2107655 2071997]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.22.1.el8_6]" date="1659614400">- mm/memcg: Free percpu stats memory of dying memcg's (Waiman Long) [2110039 2004037]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.23.1.el8_6]" date="1660132800">- drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (Phil Auld) [2112030 2089715]
- iavf: Fix issue with MAC address of VF shown as zero (Petr Oros) [2102360 2037938]
- iavf: Remove non-inclusive language (Petr Oros) [2102360 2037938]
- iavf: Fix incorrect use of assigning iavf_status to int (Petr Oros) [2102360 2037938]
- iavf: stop leaking iavf_status as "errno" values (Petr Oros) [2102360 2037938]
- iavf: Add usage of new virtchnl format to set default MAC (Petr Oros) [2102360 2037938]
- iavf: refactor processing of VLAN V2 capability message (Petr Oros) [2102360 2037938]
- iavf: Add support for 50G/100G in AIM algorithm (Petr Oros) [2102360 2037938]
- iavf: remove redundant ret variable (Petr Oros) [2102360 2037938]
- iavf: Remove useless DMA-32 fallback configuration (Petr Oros) [2102360 2037938]
- pidfd: fix a poll race when setting exit_state (Oleg Nesterov) [2107643 2044587]
- fork: fix pidfd_poll()'s return type (Oleg Nesterov) [2107643 2044587]
- pidfd: add polling support (Oleg Nesterov) [2107643 2044587]
- kabi: introduce the kabi_aux_*() helpers (Oleg Nesterov) [2107643 2044587]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.24.1.el8_6]" date="1660737600">- powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2092241 2016335]
- powerpc/prom: fix early DEBUG messages (Desnes A. Nunes do Rosario) [2092241 2016335]
- powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2092241 2016335]
- hv_balloon: rate-limit "Unhandled message" warning (Vitaly Kuznetsov) [2117050 2087270]
- powerpc: Enable execve syscall exit tracepoint (Steve Best) [2106662 2095521]
- ice: Fix VSIs unable to share unicast MAC (Petr Oros) [2111936 2080033]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.25.1.el8_6]" date="1661342400">- redhat: add missing ybz numbers to changelog (Augusto Caringi)
- block: limit request dispatch loop duration (Ming Lei) [2110772 2005082]
- NLM: Defend against file_lock changes after vfs_test_lock() (Benjamin Coddington) [2102099 2094884]
- x86/speculation/mmio: Print SMT warning (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/tsx: Disable TSX development mode at boot (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/tsx: Clear CPUID bits when TSX always force aborts (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/cpu: Move arch_smt_update() to a neutral place (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- ice: Ignore error message when setting same promiscuous mode (Petr Oros) [2118580 2100683]
- ice: Fix clearing of promisc mode with bridge over bond (Petr Oros) [2118580 2100683]
- ice: Ignore EEXIST when setting promisc mode (Petr Oros) [2118580 2100683]
- ice: Fix double VLAN error when entering promisc mode (Petr Oros) [2118580 2100683]
- ice: Fix promiscuous mode not turning off (Petr Oros) [2117026 2088787]
- ice: Introduce enabling promiscuous mode on multiple VF's (Petr Oros) [2117026 2088787]
- ice: do not setup vlan for loopback VSI (Petr Oros) [2118582 2103845]
- ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Petr Oros) [2118582 2103845]
- ice: Fix max VLANs available for VF (Petr Oros) [2118581 2112298]
- ice: change devlink code to read NVM in blocks (Petr Oros) [2118583 2093904]
- ice: Fix memory corruption in VF driver (Petr Oros) [2102359 2037937]
- ice: Fix queue config fail handling (Petr Oros) [2102359 2037937]
- ice: Sync VLAN filtering features for DVM (Petr Oros) [2102359 2037937]
- ice: Fix PTP TX timestamp offset calculation (Petr Oros) [2102359 2037937]
- ice: Fix interrupt moderation settings getting cleared (Petr Oros) [2102359 2037937]
- ice: fix possible under reporting of ethtool Tx and Rx statistics (Petr Oros) [2102359 2037937]
- ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (Petr Oros) [2102359 2037937]
- ice: add trace events for tx timestamps (Petr Oros) [2102359 2037937]
- ice: fix return value check in ice_gnss.c (Petr Oros) [2102359 2037937]
- ice: remove PF pointer from ice_check_vf_init (Petr Oros) [2102359 2037937]
- ice: introduce ice_virtchnl.c and ice_virtchnl.h (Petr Oros) [2102359 2037937]
- ice: cleanup long lines in ice_sriov.c (Petr Oros) [2102359 2037937]
- ice: introduce ICE_VF_RESET_LOCK flag (Petr Oros) [2102359 2037937]
- ice: introduce ICE_VF_RESET_NOTIFY flag (Petr Oros) [2102359 2037937]
- ice: convert ice_reset_vf to take flags (Petr Oros) [2102359 2037937]
- ice: convert ice_reset_vf to standard error codes (Petr Oros) [2102359 2037937]
- ice: make ice_reset_all_vfs void (Petr Oros) [2102359 2037937]
- ice: drop is_vflr parameter from ice_reset_all_vfs (Petr Oros) [2102359 2037937]
- ice: move reset functionality into ice_vf_lib.c (Petr Oros) [2102359 2037937]
- ice: fix a long line warning in ice_reset_vf (Petr Oros) [2102359 2037937]
- ice: introduce VF operations structure for reset flows (Petr Oros) [2102359 2037937]
- ice: fix incorrect dev_dbg print mistaking 'i' for vf-&gt;vf_id (Petr Oros) [2102359 2037937]
- ice: introduce ice_vf_lib.c, ice_vf_lib.h, and ice_vf_lib_private.h (Petr Oros) [2102359 2037937]
- ice: use ice_is_vf_trusted helper function (Petr Oros) [2102359 2037937]
- ice: log an error message when eswitch fails to configure (Petr Oros) [2102359 2037937]
- ice: cleanup error logging for ice_ena_vfs (Petr Oros) [2102359 2037937]
- ice: move ice_set_vf_port_vlan near other .ndo ops (Petr Oros) [2102359 2037937]
- ice: refactor spoofchk control code in ice_sriov.c (Petr Oros) [2102359 2037937]
- ice: rename ICE_MAX_VF_COUNT to avoid confusion (Petr Oros) [2102359 2037937]
- ice: remove unused definitions from ice_sriov.h (Petr Oros) [2102359 2037937]
- ice: convert vf-&gt;vc_ops to a const pointer (Petr Oros) [2102359 2037937]
- ice: remove circular header dependencies on ice.h (Petr Oros) [2102359 2037937]
- ice: rename ice_virtchnl_pf.c to ice_sriov.c (Petr Oros) [2102359 2037937]
- ice: rename ice_sriov.c to ice_vf_mbx.c (Petr Oros) [2102359 2037937]
- ice: Fix FV offset searching (Petr Oros) [2102359 2037937]
- ice: Add support for outer dest MAC for ADQ tunnels (Petr Oros) [2102359 2037937]
- ice: avoid XDP checks in ice_clean_tx_irq() (Petr Oros) [2102359 2037937]
- ice: change "can't set link" message to dbg level (Petr Oros) [2102359 2037937]
- ice: Add slow path offload stats on port representor in switchdev (Petr Oros) [2102359 2037937]
- ice: Add support for inner etype in switchdev (Petr Oros) [2102359 2037937]
- ice: convert VF storage to hash table with krefs and RCU (Petr Oros) [2102359 2037937]
- ice: introduce VF accessor functions (Petr Oros) [2102359 2037937]
- ice: factor VF variables to separate structure (Petr Oros) [2102359 2037937]
- ice: convert ice_for_each_vf to include VF entry iterator (Petr Oros) [2102359 2037937]
- ice: use ice_for_each_vf for iteration during removal (Petr Oros) [2102359 2037937]
- ice: remove checks in ice_vc_send_msg_to_vf (Petr Oros) [2102359 2037937]
- ice: move VFLR acknowledge during ice_free_vfs (Petr Oros) [2102359 2037937]
- ice: move clear_malvf call in ice_free_vfs (Petr Oros) [2102359 2037937]
- ice: pass num_vfs to ice_set_per_vf_res() (Petr Oros) [2102359 2037937]
- ice: store VF pointer instead of VF ID (Petr Oros) [2102359 2037937]
- ice: refactor unwind cleanup in eswitch mode (Petr Oros) [2102359 2037937]
- ice: add TTY for GNSS module for E810T device (Petr Oros) [2102359 2037937]
- ice: Simplify tracking status of RDMA support (Petr Oros) [2102359 2037937]
- ice: Add ability for PF admin to enable VF VLAN pruning (Petr Oros) [2102359 2037937]
- ice: Add support for 802.1ad port VLANs VF (Petr Oros) [2102359 2037937]
- ice: Advertise 802.1ad VLAN filtering and offloads for PF netdev (Petr Oros) [2102359 2037937]
- ice: Support configuring the device to Double VLAN Mode (Petr Oros) [2102359 2037937]
- ice: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Petr Oros) [2102359 2037937]
- ice: Add hot path support for 802.1Q and 802.1ad VLAN offloads (Petr Oros) [2102359 2037937]
- ice: Add outer_vlan_ops and VSI specific VLAN ops implementations (Petr Oros) [2102359 2037937]
- ice: Adjust naming for inner VLAN operations (Petr Oros) [2102359 2037937]
- ice: Use the proto argument for VLAN ops (Petr Oros) [2102359 2037937]
- ice: Refactor vf-&gt;port_vlan_info to use ice_vlan (Petr Oros) [2102359 2037937]
- ice: Introduce ice_vlan struct (Petr Oros) [2102359 2037937]
- ice: Add new VSI VLAN ops (Petr Oros) [2102359 2037937]
- ice: Add helper function for adding VLAN 0 (Petr Oros) [2102359 2037937]
- ice: Refactor spoofcheck configuration functions (Petr Oros) [2102359 2037937]
- Revert "ice: Allow to pass VLAN tagged packets to VF when port VLAN is configured" (Petr Oros) [2102359 2037937]
- Revert "ice: Do not enable VLAN pruning when spoofchk is enabled" (Petr Oros) [2102359 2037937]
- ice: Remove likely for napi_complete_done (Petr Oros) [2102359 2037937]
- ice: add support for DSCP QoS for IDC (Petr Oros) [2102359 2037937]
- ice: respect metadata on XSK Rx to skb (Petr Oros) [2102359 2037937]
- ice: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Petr Oros) [2102359 2037937]
- ice: respect metadata in legacy-rx/ice_construct_skb() (Petr Oros) [2102359 2037937]
- ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2102359 2037937]
- iavf: Fix VLAN_V2 addition/rejection (Petr Oros) [2118707 2115618]
- iavf: Fix deadlock in initialization (Petr Oros) [2118705 2054656]
- scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (Nilesh Javali) [2110768 2044160]
- sched/deadline: Fix BUG_ON condition for deboosted tasks (Phil Auld) [2117410 2111860]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.26.1.el8_6]" date="1661515200">- drm/amd/display: Ignore First MST Sideband Message Return Error (Mika Penttilä) [2109826 2089853]
- ASoC: SOF: topology: read back control data from DSP (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: Drop ctrl_type parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: control: Do not handle control notification with component type (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: sof-audio: Drop the `cmd` member from struct snd_sof_control (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: Drop ctrl_cmd parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: topology: Set control_data-&gt;cmd alongside scontrol-&gt;cmd (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: Drop ipc_cmd parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: ipc: Rename send parameter in snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (Vratislav Bendel) [2120776 2111491]
- platform/x86/intel: Fix 'rmmod pmt_telemetry' panic (Prarit Bhargava) [2091079 2080426]
- KVM: x86/mmu: make apf token non-zero to fix bug (Vitaly Kuznetsov) [2105340 2096201]
- iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (Jerry Snitselaar) [2112983 2095498]</changelog>
</package>
<package pkgid="c62be223e99ebef42b62f783a873420a114fa1c8e1a6494b01cd43d1804331ac" name="kernel" arch="src">
  <version epoch="0" ver="4.18.0" rel="372.32.1.el8_6"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.23.1.el8_6]" date="1660132800">- drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (Phil Auld) [2112030 2089715]
- iavf: Fix issue with MAC address of VF shown as zero (Petr Oros) [2102360 2037938]
- iavf: Remove non-inclusive language (Petr Oros) [2102360 2037938]
- iavf: Fix incorrect use of assigning iavf_status to int (Petr Oros) [2102360 2037938]
- iavf: stop leaking iavf_status as "errno" values (Petr Oros) [2102360 2037938]
- iavf: Add usage of new virtchnl format to set default MAC (Petr Oros) [2102360 2037938]
- iavf: refactor processing of VLAN V2 capability message (Petr Oros) [2102360 2037938]
- iavf: Add support for 50G/100G in AIM algorithm (Petr Oros) [2102360 2037938]
- iavf: remove redundant ret variable (Petr Oros) [2102360 2037938]
- iavf: Remove useless DMA-32 fallback configuration (Petr Oros) [2102360 2037938]
- pidfd: fix a poll race when setting exit_state (Oleg Nesterov) [2107643 2044587]
- fork: fix pidfd_poll()'s return type (Oleg Nesterov) [2107643 2044587]
- pidfd: add polling support (Oleg Nesterov) [2107643 2044587]
- kabi: introduce the kabi_aux_*() helpers (Oleg Nesterov) [2107643 2044587]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.24.1.el8_6]" date="1660737600">- powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2092241 2016335]
- powerpc/prom: fix early DEBUG messages (Desnes A. Nunes do Rosario) [2092241 2016335]
- powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2092241 2016335]
- hv_balloon: rate-limit "Unhandled message" warning (Vitaly Kuznetsov) [2117050 2087270]
- powerpc: Enable execve syscall exit tracepoint (Steve Best) [2106662 2095521]
- ice: Fix VSIs unable to share unicast MAC (Petr Oros) [2111936 2080033]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.25.1.el8_6]" date="1661342400">- redhat: add missing ybz numbers to changelog (Augusto Caringi)
- block: limit request dispatch loop duration (Ming Lei) [2110772 2005082]
- NLM: Defend against file_lock changes after vfs_test_lock() (Benjamin Coddington) [2102099 2094884]
- x86/speculation/mmio: Print SMT warning (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/tsx: Disable TSX development mode at boot (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/tsx: Clear CPUID bits when TSX always force aborts (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/cpu: Move arch_smt_update() to a neutral place (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- ice: Ignore error message when setting same promiscuous mode (Petr Oros) [2118580 2100683]
- ice: Fix clearing of promisc mode with bridge over bond (Petr Oros) [2118580 2100683]
- ice: Ignore EEXIST when setting promisc mode (Petr Oros) [2118580 2100683]
- ice: Fix double VLAN error when entering promisc mode (Petr Oros) [2118580 2100683]
- ice: Fix promiscuous mode not turning off (Petr Oros) [2117026 2088787]
- ice: Introduce enabling promiscuous mode on multiple VF's (Petr Oros) [2117026 2088787]
- ice: do not setup vlan for loopback VSI (Petr Oros) [2118582 2103845]
- ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Petr Oros) [2118582 2103845]
- ice: Fix max VLANs available for VF (Petr Oros) [2118581 2112298]
- ice: change devlink code to read NVM in blocks (Petr Oros) [2118583 2093904]
- ice: Fix memory corruption in VF driver (Petr Oros) [2102359 2037937]
- ice: Fix queue config fail handling (Petr Oros) [2102359 2037937]
- ice: Sync VLAN filtering features for DVM (Petr Oros) [2102359 2037937]
- ice: Fix PTP TX timestamp offset calculation (Petr Oros) [2102359 2037937]
- ice: Fix interrupt moderation settings getting cleared (Petr Oros) [2102359 2037937]
- ice: fix possible under reporting of ethtool Tx and Rx statistics (Petr Oros) [2102359 2037937]
- ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (Petr Oros) [2102359 2037937]
- ice: add trace events for tx timestamps (Petr Oros) [2102359 2037937]
- ice: fix return value check in ice_gnss.c (Petr Oros) [2102359 2037937]
- ice: remove PF pointer from ice_check_vf_init (Petr Oros) [2102359 2037937]
- ice: introduce ice_virtchnl.c and ice_virtchnl.h (Petr Oros) [2102359 2037937]
- ice: cleanup long lines in ice_sriov.c (Petr Oros) [2102359 2037937]
- ice: introduce ICE_VF_RESET_LOCK flag (Petr Oros) [2102359 2037937]
- ice: introduce ICE_VF_RESET_NOTIFY flag (Petr Oros) [2102359 2037937]
- ice: convert ice_reset_vf to take flags (Petr Oros) [2102359 2037937]
- ice: convert ice_reset_vf to standard error codes (Petr Oros) [2102359 2037937]
- ice: make ice_reset_all_vfs void (Petr Oros) [2102359 2037937]
- ice: drop is_vflr parameter from ice_reset_all_vfs (Petr Oros) [2102359 2037937]
- ice: move reset functionality into ice_vf_lib.c (Petr Oros) [2102359 2037937]
- ice: fix a long line warning in ice_reset_vf (Petr Oros) [2102359 2037937]
- ice: introduce VF operations structure for reset flows (Petr Oros) [2102359 2037937]
- ice: fix incorrect dev_dbg print mistaking 'i' for vf-&gt;vf_id (Petr Oros) [2102359 2037937]
- ice: introduce ice_vf_lib.c, ice_vf_lib.h, and ice_vf_lib_private.h (Petr Oros) [2102359 2037937]
- ice: use ice_is_vf_trusted helper function (Petr Oros) [2102359 2037937]
- ice: log an error message when eswitch fails to configure (Petr Oros) [2102359 2037937]
- ice: cleanup error logging for ice_ena_vfs (Petr Oros) [2102359 2037937]
- ice: move ice_set_vf_port_vlan near other .ndo ops (Petr Oros) [2102359 2037937]
- ice: refactor spoofchk control code in ice_sriov.c (Petr Oros) [2102359 2037937]
- ice: rename ICE_MAX_VF_COUNT to avoid confusion (Petr Oros) [2102359 2037937]
- ice: remove unused definitions from ice_sriov.h (Petr Oros) [2102359 2037937]
- ice: convert vf-&gt;vc_ops to a const pointer (Petr Oros) [2102359 2037937]
- ice: remove circular header dependencies on ice.h (Petr Oros) [2102359 2037937]
- ice: rename ice_virtchnl_pf.c to ice_sriov.c (Petr Oros) [2102359 2037937]
- ice: rename ice_sriov.c to ice_vf_mbx.c (Petr Oros) [2102359 2037937]
- ice: Fix FV offset searching (Petr Oros) [2102359 2037937]
- ice: Add support for outer dest MAC for ADQ tunnels (Petr Oros) [2102359 2037937]
- ice: avoid XDP checks in ice_clean_tx_irq() (Petr Oros) [2102359 2037937]
- ice: change "can't set link" message to dbg level (Petr Oros) [2102359 2037937]
- ice: Add slow path offload stats on port representor in switchdev (Petr Oros) [2102359 2037937]
- ice: Add support for inner etype in switchdev (Petr Oros) [2102359 2037937]
- ice: convert VF storage to hash table with krefs and RCU (Petr Oros) [2102359 2037937]
- ice: introduce VF accessor functions (Petr Oros) [2102359 2037937]
- ice: factor VF variables to separate structure (Petr Oros) [2102359 2037937]
- ice: convert ice_for_each_vf to include VF entry iterator (Petr Oros) [2102359 2037937]
- ice: use ice_for_each_vf for iteration during removal (Petr Oros) [2102359 2037937]
- ice: remove checks in ice_vc_send_msg_to_vf (Petr Oros) [2102359 2037937]
- ice: move VFLR acknowledge during ice_free_vfs (Petr Oros) [2102359 2037937]
- ice: move clear_malvf call in ice_free_vfs (Petr Oros) [2102359 2037937]
- ice: pass num_vfs to ice_set_per_vf_res() (Petr Oros) [2102359 2037937]
- ice: store VF pointer instead of VF ID (Petr Oros) [2102359 2037937]
- ice: refactor unwind cleanup in eswitch mode (Petr Oros) [2102359 2037937]
- ice: add TTY for GNSS module for E810T device (Petr Oros) [2102359 2037937]
- ice: Simplify tracking status of RDMA support (Petr Oros) [2102359 2037937]
- ice: Add ability for PF admin to enable VF VLAN pruning (Petr Oros) [2102359 2037937]
- ice: Add support for 802.1ad port VLANs VF (Petr Oros) [2102359 2037937]
- ice: Advertise 802.1ad VLAN filtering and offloads for PF netdev (Petr Oros) [2102359 2037937]
- ice: Support configuring the device to Double VLAN Mode (Petr Oros) [2102359 2037937]
- ice: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Petr Oros) [2102359 2037937]
- ice: Add hot path support for 802.1Q and 802.1ad VLAN offloads (Petr Oros) [2102359 2037937]
- ice: Add outer_vlan_ops and VSI specific VLAN ops implementations (Petr Oros) [2102359 2037937]
- ice: Adjust naming for inner VLAN operations (Petr Oros) [2102359 2037937]
- ice: Use the proto argument for VLAN ops (Petr Oros) [2102359 2037937]
- ice: Refactor vf-&gt;port_vlan_info to use ice_vlan (Petr Oros) [2102359 2037937]
- ice: Introduce ice_vlan struct (Petr Oros) [2102359 2037937]
- ice: Add new VSI VLAN ops (Petr Oros) [2102359 2037937]
- ice: Add helper function for adding VLAN 0 (Petr Oros) [2102359 2037937]
- ice: Refactor spoofcheck configuration functions (Petr Oros) [2102359 2037937]
- Revert "ice: Allow to pass VLAN tagged packets to VF when port VLAN is configured" (Petr Oros) [2102359 2037937]
- Revert "ice: Do not enable VLAN pruning when spoofchk is enabled" (Petr Oros) [2102359 2037937]
- ice: Remove likely for napi_complete_done (Petr Oros) [2102359 2037937]
- ice: add support for DSCP QoS for IDC (Petr Oros) [2102359 2037937]
- ice: respect metadata on XSK Rx to skb (Petr Oros) [2102359 2037937]
- ice: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Petr Oros) [2102359 2037937]
- ice: respect metadata in legacy-rx/ice_construct_skb() (Petr Oros) [2102359 2037937]
- ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2102359 2037937]
- iavf: Fix VLAN_V2 addition/rejection (Petr Oros) [2118707 2115618]
- iavf: Fix deadlock in initialization (Petr Oros) [2118705 2054656]
- scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (Nilesh Javali) [2110768 2044160]
- sched/deadline: Fix BUG_ON condition for deboosted tasks (Phil Auld) [2117410 2111860]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.26.1.el8_6]" date="1661515200">- drm/amd/display: Ignore First MST Sideband Message Return Error (Mika Penttilä) [2109826 2089853]
- ASoC: SOF: topology: read back control data from DSP (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: Drop ctrl_type parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: control: Do not handle control notification with component type (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: sof-audio: Drop the `cmd` member from struct snd_sof_control (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: Drop ctrl_cmd parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: topology: Set control_data-&gt;cmd alongside scontrol-&gt;cmd (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: Drop ipc_cmd parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: ipc: Rename send parameter in snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (Vratislav Bendel) [2120776 2111491]
- platform/x86/intel: Fix 'rmmod pmt_telemetry' panic (Prarit Bhargava) [2091079 2080426]
- KVM: x86/mmu: make apf token non-zero to fix bug (Vitaly Kuznetsov) [2105340 2096201]
- iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (Jerry Snitselaar) [2112983 2095498]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.27.1.el8_6]" date="1662638400">- [s390] s390/pci: add s390_iommu_aperture kernel parameter (Claudio Imbrenda) [2081324 2039181]
- ipv6: take care of disable_policy when restoring routes (Andrea Claudi) [2109971 2103894]
- net: openvswitch: fix parsing of nw_proto for IPv6 fragments (Eelco Chaudron) [2106703 2101537]
- scsi: ch: Make it possible to open a ch device multiple times again (Ewan D. Milne) [2115965 2108649]
- scsi: smartpqi: Fix DMA direction for RAID requests (Don Brace) [2112354 2101548]
- iommu/vt-d: Calculate mask for non-aligned flushes (Jerry Snitselaar) [2111692 2072179]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.28.1.el8_6]" date="1662638401">- powerpc/smp: Update cpu_core_map on all PowerPc systems (Diego Domingos) [2112820 2064104]
- iavf: Fix reset error handling (Petr Oros) [2120225 2119759]
- iavf: Fix NULL pointer dereference in iavf_get_link_ksettings (Petr Oros) [2120225 2119759]
- iavf: Fix adminq error handling (Petr Oros) [2120225 2119759]
- iavf: Fix missing state logs (Petr Oros) [2120225 2119759]
- scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown (Tomas Henzl) [2111140 2106413]
- s390/qeth: cache link_info for ethtool (Michal Schmidt) [2120197 2117098]
- nvme: fix RCU hole that allowed for endless looping in multipath round robin (Gopal Tiwari) [2106017 2078806]
- nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (Gopal Tiwari) [2106017 2078806]
- nvme: fix use after free when disconnecting a reconnecting ctrl (Gopal Tiwari) [2106017 2078806]
- nvme: only call synchronize_srcu when clearing current path (Gopal Tiwari) [2106017 2078806]
- nvme-multipath: revalidate paths during rescan (Gopal Tiwari) [2106017 2078806]
- scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() (Dick Kennedy) [2112103 2034425]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.29.1.el8_6]" date="1663243200">- block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Ewan D. Milne) [2107627 2049198] {CVE-2022-0494}
- cpufreq: Specify default governor on command line (Prarit Bhargava) [2109996 2083766]
- cpufreq: Fix locking issues with governors (Prarit Bhargava) [2109996 2083766]
- cpufreq: Register governors at core_initcall (Prarit Bhargava) [2109996 2083766]
- net_sched: cls_route: remove from list when handle is 0 (Felix Maurer) [2121817 2116328] {CVE-2022-2588}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.30.1.el8_6]" date="1664193600">- af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Xin Long) [2107611 2075181] {CVE-2022-1353}
- SUNRPC: avoid race between mod_timer() and del_timer_sync() (Benjamin Coddington) [2126184 2104507]
- powerpc/fadump: print start of preserved area (Diego Domingos) [2107488 2075092]
- powerpc/fadump: align destination address to pagesize (Diego Domingos) [2107488 2075092]
- powerpc/fadump: fix PT_LOAD segment for boot memory area (Diego Domingos) [2107488 2075092]
- drm/amdgpu: vi: disable ASPM on Intel Alder Lake based systems (Michel Dänzer) [2091065 2066918]
- drm/amd: Use amdgpu_device_should_use_aspm on navi umd pstate switching (Michel Dänzer) [2091065 2066918]
- drm/amd: Refactor `amdgpu_aspm` to be evaluated per device (Michel Dänzer) [2091065 2066918]
- drm/amd: Check if ASPM is enabled from PCIe subsystem (Michel Dänzer) [2091065 2066918]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.31.1.el8_6]" date="1664452800">- ice: Allow operation with reduced device MSI-X (Petr Oros) [2126482 2102844]
- redhat: kernel depends on new linux-firmware (John Meneghini) [2120613 2044843]
- scsi: qedi: Use QEDI_MODE_NORMAL for error handling (John Meneghini) [2119847 2101760]
- qede: Reduce verbosity of ptp tx timestamp (John Meneghini) [2125477 2080655]
- qede: confirm skb is allocated before using (John Meneghini) [2120611 2040267]
- qed: fix ethtool register dump (John Meneghini) [2120611 2040267]
- scsi: qedf: Stop using the SCSI pointer (John Meneghini) [2120613 2044843]
- scsi: qedf: Change context reset messages to ratelimited (John Meneghini) [2120613 2044843]
- scsi: qedf: Fix refcount issue when LOGO is received during TMF (John Meneghini) [2120613 2044843]
- scsi: qedf: Add stag_work to all the vports (John Meneghini) [2120613 2044843]
- scsi: qedf: Fix potential dereference of NULL pointer (John Meneghini) [2120613 2044843]
- scsi: qedi: Remove redundant flush_workqueue() calls (John Meneghini) [2120612 2044837]
- scsi: qedi: Fix SYSFS_FLAG_FW_SEL_BOOT formatting (John Meneghini) [2120612 2044837]
- qed: remove unnecessary memset in qed_init_fw_funcs (John Meneghini) [2120611 2040267]
- qed: return status of qed_iov_get_link (John Meneghini) [2120611 2040267]
- net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() (John Meneghini) [2120611 2040267]
- qed: validate and restrict untrusted VFs vlan promisc mode (John Meneghini) [2120611 2040267]
- qed: display VF trust config (John Meneghini) [2120611 2040267]
- qed: prevent a fw assert during device shutdown (John Meneghini) [2120611 2040267]
- qed: use msleep() in qed_mcp_cmd() and add qed_mcp_cmd_nosleep() for udelay. (John Meneghini) [2120611 2040267]
- qed: Use dma_set_mask_and_coherent() and simplify code (John Meneghini) [2120611 2040267]
- qed*: esl priv flag support through ethtool (John Meneghini) [2120611 2040267]
- qed*: enhance tx timeout debug info (John Meneghini) [2120611 2040267]
- qede: validate non LSO skb length (John Meneghini) [2120611 2040267]
- qed: Enhance rammod debug prints to provide pretty details (John Meneghini) [2120611 2040267]
- net: qed: fix the array may be out of bound (John Meneghini) [2120611 2040267]
- qed: Use the bitmap API to simplify some functions (John Meneghini) [2120611 2040267]
- RDMA/qed: Use helper function to set GUIDs (John Meneghini) [2120611 2040267]
- net: qed_dev: fix check of true !rc expression (John Meneghini) [2120611 2040267]
- net: qed_ptp: fix check of true !rc expression (John Meneghini) [2120611 2040267]
- RDMA/qedr: Remove unsupported qedr_resize_cq callback (John Meneghini) [2120611 2040267]
- qed: Change the TCP common variable - "iscsi_ooo" (John Meneghini) [2120611 2040267]
- qed: Optimize the ll2 ooo flow (John Meneghini) [2120611 2040267]
- net: qed_debug: fix check of false (grc_param &lt; 0) expression (John Meneghini) [2120611 2040267]
- qed: Fix missing error code in qed_slowpath_start() (John Meneghini) [2120611 2040267]
- qed: Fix compilation for CONFIG_QED_SRIOV undefined scenario (John Meneghini) [2120611 2040267]
- qed: Initialize debug string array (John Meneghini) [2120611 2040267]
- qed: Fix spelling mistake "ctx_bsaed" -&gt; "ctx_based" (John Meneghini) [2120611 2040267]
- qed: fix ll2 establishment during load of RDMA driver (John Meneghini) [2120611 2040267]
- qed: Update the TCP active termination 2 MSL timer ("TIME_WAIT") (John Meneghini) [2120611 2040267]
- qed: Update TCP silly-window-syndrome timeout for iwarp, scsi (John Meneghini) [2120611 2040267]
- qed: Update debug related changes (John Meneghini) [2120611 2040267]
- qed: Add '_GTT' suffix to the IRO RAM macros (John Meneghini) [2120611 2040267]
- qed: Update FW init functions to support FW 8.59.1.0 (John Meneghini) [2120611 2040267]
- qed: Use enum as per FW 8.59.1.0 in qed_iro_hsi.h (John Meneghini) [2120611 2040267]
- qed: Update qed_hsi.h for fw 8.59.1.0 (John Meneghini) [2120611 2040267]
- qed: Update qed_mfw_hsi.h for FW ver 8.59.1.0 (John Meneghini) [2120611 2040267]
- qed: Update common_hsi for FW ver 8.59.1.0 (John Meneghini) [2120611 2040267]
- qed: Split huge qed_hsi.h header file (John Meneghini) [2120611 2040267]
- qed: Remove e4_ and _e4 from FW HSI (John Meneghini) [2120611 2040267]
- qed: Fix kernel-doc warnings (John Meneghini) [2120611 2040267]
- qed: Don't ignore devlink allocation failures (John Meneghini) [2120611 2040267]
- qed: Improve the stack space of filter_config() (John Meneghini) [2120611 2040267]
- RDMA/qedr: Move variables reset to qedr_set_common_qp_params() (John Meneghini) [2120611 2040267]
- RDMA/qedr: Fix reporting max_{send/recv}_wr attrs (John Meneghini) [2119122 2051524]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.32.1.el8_6]" date="1665144000">- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131936 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131936 2130839]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2129923 2123508]
- drm/nouveau: recognise GA103 (Karol Herbst) [2127122 1923125]
- net: fix a memleak when uncloning an skb dst and its metadata (Hangbin Liu) [2131255 2068355]
- net: do not keep the dst cache when uncloning an skb dst and its metadata (Hangbin Liu) [2131255 2068355]
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/spec_ctrl: Enable RHEL only ibrs_always &amp; retpoline,ibrs_user spectre_v2 options (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- efi/x86: use naked RET on mixed mode call wrapper (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Remove apostrophe typo (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/entry: Remove UNTRAIN_RET from native_irq_return_ldt (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Mark retbleed_strings static (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Disable RRSBA behavior (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kexec: Disable RET on kexec (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- redhat/configs: Add new mitigation configs for RetBleed CVEs (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/retbleed: Add fine grained Kconfig knobs (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/cpu/amd: Enumerate BTC_NO (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/common: Stamp out the stepping madness (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: VMX: Prevent RSB underflow before vmenter (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Fill RSB on vmexit for IBRS (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: VMX: Fix IBRS handling after vmexit (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: VMX: Convert launched argument to flags (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: VMX: Flatten __vmx_vcpu_run() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Remove x86_spec_ctrl_mask (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Fix SPEC_CTRL write on SMT state change (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Fix firmware entry SPEC_CTRL handling (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/cpu/amd: Add Spectral Chicken (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Do IBPB fallback check only once (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Add retbleed=ibpb (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Update Retpoline validation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- intel_idle: Disable IBRS during long idle (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Report Intel retbleed vulnerability (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Optimize SPEC_CTRL MSR writes (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/entry: Add kernel IBRS implementation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Enable STIBP for JMP2RET (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Add AMD retbleed= boot parameter (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Report AMD retbleed vulnerability (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Add magic AMD return-thunk (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Use return-thunk in asm code (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/sev: Avoid using __x86_return_thunk (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kvm: Fix SETcc emulation for return thunks (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bpf: Use alternative RET encoding (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Use alternative RET encoding (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86,objtool: Create .return_sites (Josh Poimboeuf) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Undo return-thunk damage (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/retpoline: Use -mfunction-return (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/retpoline: Swizzle retpoline thunk (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/retpoline: Cleanup some #ifdefery (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kvm/vmx: Make noinstr clean (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- arch/x86/boot/compressed: Add -D__DISABLE_EXPORTS to kbuild flags (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: (Ab)use __DISABLE_EXPORTS to disable RETHUNK in real mode (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/entry: Remove skip_r11rcx (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation/srbds: Do not try to turn mitigation off when not supported (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/module: Fix the paravirt vs alternative order (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Add straight-line-speculation mitigation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Prepare inline-asm for straight-line-speculation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Prepare asm files for straight-line-speculation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Move RETPOLINE*_CFLAGS to arch Makefile (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- Makefile: remove stale cc-option checks (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- tools headers: Remove broken definition of __LITTLE_ENDIAN (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Add insn_decode_kernel() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- tools/insn: Restore the relative include paths for cross building (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternative: Use insn_decode() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/insn: Add an insn_decode() API (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/insn: Rename insn_decode() to insn_decode_from_regs() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/paravirt: Add new features for paravirt patching (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternative: Support not-feature (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternative: Merge include files (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Fix error handling for STD/CLD warnings (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternatives: Teach text_poke_bp() to emulate RET (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Have ftrace trampolines turn read-only at the end of system boot up (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Change FILL_RETURN_BUFFER to work with objtool (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Add support for intra-function calls (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Rework allocating stack_ops on decode (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Better handle IRET (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Support multiple stack_op per instruction (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Make BP scratch register warning more robust (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kexec: Make relocate_kernel_64.S objtool clean (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Introduce validate_return() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- Makefile: disallow data races on gcc-10 as well (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Improve call destination function detection (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternatives: Implement a better poke_int3_handler() completion scheme (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- lib/: fix Kconfig indentation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternatives: Use INT3_INSN_SIZE (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kprobes: Fix ordering while text-patching (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kprobes: Convert to text-patching.h (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternative: Shrink text_poke_loc (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternative: Remove text_poke_loc::len (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Use text_gen_insn() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternative: Add text_opcode_size() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Use text_poke() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Use vmalloc special flag (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Explicitly include vmalloc.h for set_vm_flush_reset_perms() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternatives: Add and use text_gen_insn() helper (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternatives, jump_label: Provide better text_poke() batching interface (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/asm: Annotate relocate_kernel_{32,64}.c (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: kprobes: Prohibit probing on instruction which has emulate prefix (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Correct misc typos (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation/mds: Apply more accurate check on hypervisor platform (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Convert insn type to enum (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Track original function across branches (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Rename elf_open() to prevent conflict with libelf from elftoolchain (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Make enable parameter bool where applicable (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Fix function fallthrough detection (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/paravirt: Detect over-sized patching bugs in paravirt_patch_call() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/cpu/amd: Exclude 32bit only assembler from 64bit build (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/asm: Mark all top level asm statements as .text (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/cpu/bugs: Use __initconst for 'const' init data (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Add Direction Flag validation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Rewrite add_ignores() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/nospec, objtool: Introduce ANNOTATE_IGNORE_ALTERNATIVE (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Fix warning and considate ftrace_jmp_replace() and ftrace_call_replace() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- kbuild: Disable extra debugging info in .s output (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/CPU/AMD: Set the CPB bit unconditionally on F17h (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternatives: Print containing function (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Do not call function graph from dynamic trampolines (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- ftrace: Create new ftrace_internal.h header (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- kprobes/x86: Fix instruction patching corruption when copying more than one RIP-relative instruction (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- tracing/Makefile: Fix handling redefinition of CC_FLAGS_FTRACE (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/paravirt: Remove unused paravirt bits (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/paravirt: Remove clobbers parameter from paravirt patch functions (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/paravirt: Make paravirt_patch_call() and paravirt_patch_jmp() static (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- ftrace: Remove unused pointer ftrace_swapper_pid (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/spec_ctrl: Temporarily remove RHEL specific IBRS code (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- intel_idle: enable interrupts before C1 on Xeons (Steve Best) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (Vitaly Kuznetsov) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- atlantic: Fix issue in the pm resume flow. (Igor Russkikh) [2127845 2002395]
- atlantic: Fix driver resume flow. (Igor Russkikh) [2127845 2002395]
- net: atlantic: always deep reset on pm op, fixing up my null deref regression (Foggy Liu) [2124966 2039680]
- net: atlantic: invert deep par in pm functions, preventing null derefs (Foggy Liu) [2124966 2039680]</changelog>
</package>
<package pkgid="2ede2484d18616cb6d6d37ed0d8befcf64a99bf49ee08df341ef3ceac1de9b52" name="kernel-rt" arch="src">
  <version epoch="0" ver="4.18.0" rel="372.13.1.rt7.170.el8_6"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.4.1.rt7.161.el8]" date="1648036800">- [rt] build kernel-rt-4.18.0-372.4.1.rt7.161.el8 [2006441]
- igb: refactor XDP registration (Corinna Vinschen) [2040171]
- igc: avoid kernel warning when changing RX ring parameters (Corinna Vinschen) [2040171]
- scsi: qedi: Fix cmd_cleanup_cmpl counter mismatch issue (Nilesh Javali) [2054565]
- EDAC/amd64: Save max number of controllers for F19 M70 (Aristeu Rozanski) [2064285]
- CI: Use 8.6-rt branch for rhel8 realtime_check (Chris White)
- blk-mq: avoid extending delays of active hctx from blk_mq_delay_run_hw_queues (Ming Lei) [2046525]
- tipc: fix incorrect order of state message data sanity check (Xin Long) [2048971]
- tipc: improve size validations for received domain records (Xin Long) [2048977] {CVE-2022-0435}
- efi/x86: Call efi_parse_options() from efi_main() (Lenny Szubowicz) [2049233]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.5.1.rt7.162.el8]" date="1648555200">- [rt] build kernel-rt-4.18.0-372.5.1.rt7.162.el8 [2006441]
- scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Tomas Henzl) [2052278]
- scsi: mpi3mr: Fix memory leaks (Tomas Henzl) [2054814]
- scsi: mpi3mr: Fix reporting of actual data transfer size (Tomas Henzl) [2054814]
- scsi: mpi3mr: Fix cmnd getting marked as in use forever (Tomas Henzl) [2054814]
- scsi: mpi3mr: Fix hibernation issue (Tomas Henzl) [2054814]
- scsi: mpi3mr: Fix printing of pending I/O count (Tomas Henzl) [2054814]
- scsi: mpi3mr: Fix deadlock while canceling the fw event (Tomas Henzl) [2054814]
- scsi: mpi3mr: Fixes around reply request queues (Tomas Henzl) [2054814]
- scsi: mpi3mr: Enhanced Task Management Support Reply handling (Tomas Henzl) [2054814]
- scsi: mpi3mr: Use TM response codes from MPI3 headers (Tomas Henzl) [2054814]
- scsi: mpi3mr: Increase internal cmnds timeout to 60s (Tomas Henzl) [2054814]
- scsi: mpi3mr: Do access status validation before adding devices (Tomas Henzl) [2054814]
- scsi: mpi3mr: Update MPI3 headers - part2 (Tomas Henzl) [2054814]
- scsi: mpi3mr: Update MPI3 headers - part1 (Tomas Henzl) [2054814]
- scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Tomas Henzl) [2054814]
- scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Tomas Henzl) [2054814]
- scsi: mpi3mr: Add debug APIs based on logging_level bits (Tomas Henzl) [2054814]
- scsi: mpt3sas: Remove scsi_dma_map() error messages (Tomas Henzl) [2057021]
- net/mlx5: Fix wrong limitation of metadata match on ecpf (Amir Tzin) [2049094]
- nfsd: fix use-after-free due to delegation race (Thiago Becker) [2053262]
- dma-buf: cma_heap: Fix mutex locking section (Michel Dänzer) [2044440]
- drm/amdkfd: Check for null pointer after calling kmemdup (Michel Dänzer) [2044440]
- drm/atomic: Check new_crtc_state-&gt;active to determine if CRTC needs disable in self refresh mode (Michel Dänzer) [2044440]
- drm/amd: avoid suspend on dGPUs w/ s2idle support when runtime PM enabled (Michel Dänzer) [2044440]
- drm/i915/overlay: Prevent divide by zero bugs in scaling (Michel Dänzer) [2044440]
- dma-buf: heaps: Fix potential spectre v1 gadget (Michel Dänzer) [2044440]
- drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15" Apple Retina panels (Michel Dänzer) [2044440]
- drm/amd/display: watermark latencies is not enough on DCN31 (Michel Dänzer) [2044440]
- drm/amd/pm: correct the MGpuFanBoost support for Beige Goby (Michel Dänzer) [2044440]
- drm/i915/adlp: Fix TypeC PHY-ready status readout (Michel Dänzer) [2044440]
- drm/nouveau: fix off by one in BIOS boundary checking (Michel Dänzer) [2044440]
- drm/i915: Disable DSB usage for now (Michel Dänzer) [2044440]
- Revert "drm/ast: Support 1600x900 with 108MHz PCLK" (Michel Dänzer) [2044440]
- drm/amd/display: Fix FP start/end for dcn30_internal_validate_bw. (Michel Dänzer) [2044440]
- drm/atomic: Add the crtc to affected crtc only if uapi.enable = true (Michel Dänzer) [2044440]
- drm/amdgpu: Use correct VIEWPORT_DIMENSION for DCN2 (Michel Dänzer) [2044440]
- drm/amd/display: reset dcn31 SMU mailbox on failures (Michel Dänzer) [2044440]
- drm/vmwgfx: Remove explicit transparent hugepages support (Michel Dänzer) [2044440]
- drm/radeon: fix error handling in radeon_driver_open_kms (Michel Dänzer) [2044440]
- drm/i915/display/ehl: Update voltage swing table (Michel Dänzer) [2044440]
- drm/nouveau/kms/nv04: use vzalloc for nv04_display (Michel Dänzer) [2044440]
- drm/amd/display: Fix the uninitialized variable in enable_stream_features() (Michel Dänzer) [2044440]
- amdgpu/pm: Make sysfs pm attributes as read-only for VFs (Michel Dänzer) [2044440]
- drm/amdgpu: fixup bad vram size on gmc v8 (Michel Dänzer) [2044440]
- drm/amd/amdgpu: fix gmc bo pin count leak in SRIOV (Michel Dänzer) [2044440]
- drm/amd/amdgpu: fix psp tmr bo pin count leak in SRIOV (Michel Dänzer) [2044440]
- drm/amdkfd: Fix error handling in svm_range_add (Michel Dänzer) [2044440]
- drm/vmwgfx: Introduce a new placement for MOB page tables (Michel Dänzer) [2044440]
- drm/vmwgfx: Release ttm memory if probe fails (Michel Dänzer) [2044440]
- drm/amd/display: add else to avoid double destroy clk_mgr (Michel Dänzer) [2044440]
- drm/amdgpu/display: set vblank_disable_immediate for DC (Michel Dänzer) [2044440]
- drm/amd/display: check top_pipe_to_program pointer (Michel Dänzer) [2044440]
- drm: panel-orientation-quirks: Add quirk for the Lenovo Yoga Book X91F/L (Michel Dänzer) [2044440]
- drm/amd/display: Fix out of bounds access on DNC31 stream encoder regs (Michel Dänzer) [2044440]
- drm/amd/display: Fix bug in debugfs crc_win_update entry (Michel Dänzer) [2044440]
- drm/radeon/radeon_kms: Fix a NULL pointer dereference in radeon_driver_open_kms() (Michel Dänzer) [2044440]
- drm/amdgpu: Fix a NULL pointer dereference in amdgpu_connector_lcd_native_mode() (Michel Dänzer) [2044440]
- drm/vmwgfx: Fail to initialize on broken configs (Michel Dänzer) [2044440]
- drm/vmwgfx: Remove the deprecated lower mem limit (Michel Dänzer) [2044440]
- drm/vboxvideo: fix a NULL vs IS_ERR() check (Michel Dänzer) [2044440]
- drm: fix null-ptr-deref in drm_dev_init_release() (Michel Dänzer) [2044440]
- drm/ttm: Put BO in its memory manager's lru list (Michel Dänzer) [2044440]
- dma_fence_array: Fix PENDING_ERROR leak in dma_fence_array_signaled() (Michel Dänzer) [2044440]
- drm/amd/display: explicitly set is_dsc_supported to false before use (Michel Dänzer) [2044440]
- drm/i915: Avoid bitwise vs logical OR warning in snb_wm_latency_quirk() (Michel Dänzer) [2044440]
- drm/amd/pm: keep the BACO feature enabled for suspend (Michel Dänzer) [2044440]
- Revert "drm/amdgpu: stop scheduler when calling hw_fini (v2)" (Michel Dänzer) [2044440]
- drm/amd/display: Added power down for DCN10 (Michel Dänzer) [2044440]
- drm/amd/display: fix B0 TMDS deepcolor no dislay issue (Michel Dänzer) [2044440]
- drm/amdgpu: put SMU into proper state on runpm suspending for BOCO capable platform (Michel Dänzer) [2044440]
- drm/amd/pm: skip setting gfx cgpg in the s0ix suspend-resume (Michel Dänzer) [2044440]
- drm/amd/pm: Fix xgmi link control on aldebaran (Michel Dänzer) [2044440]
- drm/amdgpu: fix dropped backing store handling in amdgpu_dma_buf_move_notify (Michel Dänzer) [2044440]
- drm/amd/display: Changed pipe split policy to allow for multi-display pipe split (Michel Dänzer) [2044440]
- drm/amdgpu: add support for IP discovery gc_info table v2 (Michel Dänzer) [2044440]
- drm/amdgpu: When the VCN(1.0) block is suspended, powergating is explicitly enabled (Michel Dänzer) [2044440]
- drm/nouveau: wait for the exclusive fence after the shared ones v2 (Michel Dänzer) [2044440]
- drm/nouveau: always wait for the exclusive fence (Michel Dänzer) [2044440]
- drm/amd/display: Set optimize_pwr_state for DCN31 (Michel Dänzer) [2044440]
- drm/amd/display: Send s0i2_rdy in stream_count == 0 optimization (Michel Dänzer) [2044440]
- drm/amd/pm: fix reading SMU FW version from amdgpu_firmware_info on YC (Michel Dänzer) [2044440]
- drm/amdgpu: don't override default ECO_BITs setting (Michel Dänzer) [2044440]
- drm/amdgpu: correct register access for RLC_JUMP_TABLE_RESTORE (Michel Dänzer) [2044440]
- drm/amd/pm: fix a potential gpu_metrics_table memory leak (Michel Dänzer) [2044440]
- drm/amd/display: Set exit_optimized_pwr_state for DCN31 (Michel Dänzer) [2044440]
- drm/i915/display: Fix an unsigned subtraction which can never be negative. (Michel Dänzer) [2044440]
- drm/ast: potential dereference of null pointer (Michel Dänzer) [2044440]
- drm: simpledrm: fix wrong unit with pixel clock (Michel Dänzer) [2044440]
- Revert "drm/fb-helper: improve DRM fbdev emulation device names" (Michel Dänzer) [2044440]
- drm/i915/hdmi: Turn DP++ TMDS output buffers back on in encoder-&gt;shutdown() (Michel Dänzer) [2044440]
- drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915 (Michel Dänzer) [2044440]
- drm/amdkfd: process_info lock not needed for svm (Michel Dänzer) [2044440]
- drm/amd/display: add connector type check for CRC source set (Michel Dänzer) [2044440]
- drm/amdkfd: fix double free mem structure (Michel Dänzer) [2044440]
- drm/amd/display: Fix for the no Audio bug with Tiled Displays (Michel Dänzer) [2044440]
- drm/amdgpu: check atomic flag to differeniate with legacy path (Michel Dänzer) [2044440]
- drm/amd/display: Fix DPIA outbox timeout after S3/S4/reset (Michel Dänzer) [2044440]
- drm/syncobj: Deal with signalled fences in drm_syncobj_find_fence. (Michel Dänzer) [2044440]
- drm/i915/dp: Perform 30ms delay after source OUI write (Michel Dänzer) [2044440]
- drm/amd/display: Allow DSC on supported MST branch devices (Michel Dänzer) [2044440]
- dma-buf: system_heap: Use 'for_each_sgtable_sg' in pages free flow (Michel Dänzer) [2044440]
- drm/amd/amdgpu: fix potential memleak (Michel Dänzer) [2044440]
- drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again (Michel Dänzer) [2044440]
- drm/amd/pm: Remove artificial freq level on Navi1x (Michel Dänzer) [2044440]
- drm/amdgpu/gfx9: switch to golden tsc registers for renoir+ (Michel Dänzer) [2044440]
- drm/amd/display: Set plane update flags for all planes in reset (Michel Dänzer) [2044440]
- drm/amd/display: Fix DPIA outbox timeout after GPU reset (Michel Dänzer) [2044440]
- drm/aspeed: Fix vga_pw sysfs output (Michel Dänzer) [2044440]
- drm/nouveau/acr: fix a couple NULL vs IS_ERR() checks (Michel Dänzer) [2044440]
- drm/amd/display: Fix OLED brightness control on eDP (Michel Dänzer) [2044440]
- drm/amdgpu: IH process reset count when restart (Michel Dänzer) [2044440]
- drm/amd/pm: avoid duplicate powergate/ungate setting (Michel Dänzer) [2044440]
- drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors (Michel Dänzer) [2044440]
- drm/i915: Fix type1 DVI DP dual mode adapter heuristic for modern platforms (Michel Dänzer) [2044440]
- drm/i915/dp: Ensure max link params are always valid (Michel Dänzer) [2044440]
- drm/i915/dp: Ensure sink rate values are always valid (Michel Dänzer) [2044440]
- drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap (Michel Dänzer) [2044440]
- drm/udl: fix control-message timeout (Michel Dänzer) [2044440]
- drm/amd/display: Limit max DSC target bpp for specific monitors (Michel Dänzer) [2044440]
- drm/amd/display: Update swizzle mode enums (Michel Dänzer) [2044440]
- drm/cma-helper: Release non-coherent memory with dma_free_noncoherent() (Michel Dänzer) [2044440]
- Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping" (Michel Dänzer) [2044440]
- drm/nouveau: hdmigv100.c: fix corrupted HDMI Vendor InfoFrame (Michel Dänzer) [2044440]
- x86/speculation: Check CPU capability before applying IBRS spectre v2 mitigation (Waiman Long) [2062156 2062166] {CVE-2022-0001 CVE-2022-0002 CVE-2021-26401}
- x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT (Waiman Long) [2062156 2062166] {CVE-2022-0001 CVE-2022-0002 CVE-2021-26401}
- x86/speculation: Warn about Spectre v2 LFENCE mitigation (Waiman Long) [2062156 2062166] {CVE-2022-0001 CVE-2022-0002 CVE-2021-26401}
- x86/speculation: Update link to AMD speculation whitepaper (Waiman Long) [2062790] {CVE-2021-26401}
- x86/speculation: Use generic retpoline by default on AMD (Waiman Long) [2062790] {CVE-2021-26401}
- x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Waiman Long) [2062156] {CVE-2022-0001 CVE-2022-0002}
- Documentation/hw-vuln: Update spectre doc (Waiman Long) [2062156] {CVE-2022-0001 CVE-2022-0002}
- x86/speculation: Add eIBRS + Retpoline options (Waiman Long) [2062156] {CVE-2022-0001 CVE-2022-0002}
- x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Waiman Long) [2062156] {CVE-2022-0001 CVE-2022-0002}
- x86,bugs: Unconditionally allow spectre_v2=retpoline,amd (Waiman Long) [2062156] {CVE-2022-0001 CVE-2022-0002}
- x86: deduplicate the spectre_v2_user documentation (Waiman Long) [2062156] {CVE-2022-0001 CVE-2022-0002}
- fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi) [2064864] {CVE-2022-1011}
- ice: Do not enable VLAN pruning when spoofchk is enabled (Ivan Vecera) [2062343]
- ice: don't allow to run ice_send_event_to_aux() in atomic ctx (Ivan Vecera) [2062343]
- ice: fix 'scheduling while atomic' on aux critical err interrupt (Ivan Vecera) [2062343]
- ice: Fix MAC address setting (Ivan Vecera) [2062343]
- ice: Clear default forwarding VSI during release (Ivan Vecera) [2062343]
- ice: Fix broken IFF_ALLMULTI handling (Ivan Vecera) [2062343]
- iavf: Fix hang during reboot/shutdown (Ivan Vecera) [2062343]
- iavf: Fix double free in iavf_reset_task (Ivan Vecera) [2062343]
- ice: destroy flow director filter mutex after releasing VSIs (Ivan Vecera) [2062343]
- ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() (Ivan Vecera) [2062343]
- iavf: Fix adopting new combined setting (Ivan Vecera) [2062343]
- iavf: Fix handling of vlan strip virtual channel messages (Ivan Vecera) [2062343]
- iavf: Fix __IAVF_RESETTING state usage (Ivan Vecera) [2062343]
- iavf: Fix missing check for running netdev (Ivan Vecera) [2062343]
- iavf: Fix deadlock in iavf_reset_task (Ivan Vecera) [2062343]
- iavf: Fix race in init state (Ivan Vecera) [2062343]
- iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS (Ivan Vecera) [2062343]
- iavf: Fix init state closure on remove (Ivan Vecera) [2062343]
- iavf: Add waiting so the port is initialized in remove (Ivan Vecera) [2062343]
- iavf: Rework mutexes for better synchronisation (Ivan Vecera) [2062343]
- iavf: remove an unneeded variable (Ivan Vecera) [2062343]
- iavf: Fix limit of total number of queues to active queues of VF (Ivan Vecera) [2062343]
- iavf: Restrict maximum VLAN filters for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Ivan Vecera) [2062343]
- iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 offload enable/disable (Ivan Vecera) [2062343]
- iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 hotpath (Ivan Vecera) [2062343]
- iavf: Add support VIRTCHNL_VF_OFFLOAD_VLAN_V2 during netdev config (Ivan Vecera) [2062343]
- iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 negotiation (Ivan Vecera) [2062343]
- virtchnl: Add support for new VLAN capabilities (Ivan Vecera) [2062343]
- virtchnl: Use the BIT() macro for capability/offload flags (Ivan Vecera) [2062343]
- virtchnl: Remove unused VIRTCHNL_VF_OFFLOAD_RSVD define (Ivan Vecera) [2062343]
- virtchnl: Add missing padding to virtchnl_proto_hdrs (Ivan Vecera) [2062343]
- ice: Fix race condition during interface enslave (Ivan Vecera) [2062343]
- ice: Fix curr_link_speed advertised speed (Ivan Vecera) [2062343]
- ice: Don't use GFP_KERNEL in atomic context (Ivan Vecera) [2062343]
- ice: Fix error with handling of bonding MTU (Ivan Vecera) [2062343]
- ice: stop disabling VFs due to PF error responses (Ivan Vecera) [2062343]
- ice: initialize local variable 'tlv' (Ivan Vecera) [2062343]
- ice: check the return of ice_ptp_gettimex64 (Ivan Vecera) [2062343]
- ice: fix concurrent reset and removal of VFs (Ivan Vecera) [2062343]
- ice: fix setting l4 port flag when adding filter (Ivan Vecera) [2062343]
- ice: Match on all profiles in slow-path (Ivan Vecera) [2062343]
- ice: enable parsing IPSEC SPI headers for RSS (Ivan Vecera) [2062343]
- ice: Avoid RTNL lock when re-creating auxiliary device (Ivan Vecera) [2062343]
- ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler (Ivan Vecera) [2062343]
- ice: fix IPIP and SIT TSO offload (Ivan Vecera) [2062343]
- ice: fix an error code in ice_cfg_phy_fec() (Ivan Vecera) [2062343]
- ice: Use bitmap_free() to free bitmap (Ivan Vecera) [2062343]
- ice: Optimize a few bitmap operations (Ivan Vecera) [2062343]
- ice: Slightly simply ice_find_free_recp_res_idx (Ivan Vecera) [2062343]
- ice: improve switchdev's slow-path (Ivan Vecera) [2062343]
- ice: replay advanced rules after reset (Ivan Vecera) [2062343]
- ice: Add flow director support for channel mode (Ivan Vecera) [2062343]
- ice: trivial: fix odd indenting (Ivan Vecera) [2062343]
- ice: support crosstimestamping on E822 devices if supported (Ivan Vecera) [2062343]
- ice: exit bypass mode once hardware finishes timestamp calibration (Ivan Vecera) [2062343]
- ice: ensure the hardware Clock Generation Unit is configured (Ivan Vecera) [2062343]
- ice: implement basic E822 PTP support (Ivan Vecera) [2062343]
- ice: convert clk_freq capability into time_ref (Ivan Vecera) [2062343]
- ice: introduce ice_ptp_init_phc function (Ivan Vecera) [2062343]
- ice: use 'int err' instead of 'int status' in ice_ptp_hw.c (Ivan Vecera) [2062343]
- ice: PTP: move setting of tstamp_config (Ivan Vecera) [2062343]
- ice: introduce ice_base_incval function (Ivan Vecera) [2062343]
- ice: xsk: fix cleaned_count setting (Ivan Vecera) [2062343]
- ice: xsk: allow empty Rx descriptors on XSK ZC data path (Ivan Vecera) [2062343]
- ice: xsk: allocate separate memory for XDP SW ring (Ivan Vecera) [2062343]
- ice: xsk: return xsk buffers back to pool when cleaning the ring (Ivan Vecera) [2062343]
- ice: use modern kernel API for kick (Ivan Vecera) [2062343]
- ice: tighter control over VSI_DOWN state (Ivan Vecera) [2062343]
- ice: use prefetch methods (Ivan Vecera) [2062343]
- ice: update to newer kernel API (Ivan Vecera) [2062343]
- ice: support immediate firmware activation via devlink reload (Ivan Vecera) [2062343]
- ice: reduce time to read Option ROM CIVD data (Ivan Vecera) [2062343]
- ice: move ice_devlink_flash_update and merge with ice_flash_pldm_image (Ivan Vecera) [2062343]
- ice: move and rename ice_check_for_pending_update (Ivan Vecera) [2062343]
- ice: devlink: add shadow-ram region to snapshot Shadow RAM (Ivan Vecera) [2062343]
- ice: Remove unused ICE_FLOW_SEG_HDRS_L2_MASK (Ivan Vecera) [2062343]
- ice: Remove unnecessary casts (Ivan Vecera) [2062343]
- ice: Propagate error codes (Ivan Vecera) [2062343]
- ice: Remove excess error variables (Ivan Vecera) [2062343]
- ice: Cleanup after ice_status removal (Ivan Vecera) [2062343]
- ice: Remove enum ice_status (Ivan Vecera) [2062343]
- ice: Use int for ice_status (Ivan Vecera) [2062343]
- ice: Remove string printing for ice_status (Ivan Vecera) [2062343]
- ice: Refactor status flow for DDP load (Ivan Vecera) [2062343]
- ice: Refactor promiscuous functions (Ivan Vecera) [2062343]
- ice: refactor PTYPE validating (Ivan Vecera) [2062343]
- ice: Add package PTYPE enable information (Ivan Vecera) [2062343]
- ice: safer stats processing (Ivan Vecera) [2062343]
- ice: fix adding different tunnels (Ivan Vecera) [2062343]
- ice: fix choosing UDP header type (Ivan Vecera) [2062343]
- ice: ignore dropped packets during init (Ivan Vecera) [2062343]
- ice: rearm other interrupt cause register after enabling VFs (Ivan Vecera) [2062343]
- net/ice: Remove unused enum (Ivan Vecera) [2062343]
- net/ice: Fix boolean assignment (Ivan Vecera) [2062343]
- net/ice: Add support for enable_iwarp and enable_roce devlink param (Ivan Vecera) [2062343]
- ice: avoid bpf_prog refcount underflow (Ivan Vecera) [2062343]
- ice: fix vsi-&gt;txq_map sizing (Ivan Vecera) [2062343]
- ice: Hide bus-info in ethtool for PRs in switchdev mode (Ivan Vecera) [2062343]
- ice: Clear synchronized addrs when adding VFs in switchdev mode (Ivan Vecera) [2062343]
- ice: fix error return code in ice_get_recp_frm_fw() (Ivan Vecera) [2062343]
- ice: Fix clang -Wimplicit-fallthrough in ice_pull_qvec_from_rc() (Ivan Vecera) [2062343]
- ice: Add support to print error on PHY FW load failure (Ivan Vecera) [2062343]
- ice: Add support for changing MTU on PR in switchdev mode (Ivan Vecera) [2062343]
- ice: send correct vc status in switchdev (Ivan Vecera) [2062343]
- ice: support for GRE in eswitch (Ivan Vecera) [2062343]
- ice: low level support for tunnels (Ivan Vecera) [2062343]
- ice: VXLAN and Geneve TC support (Ivan Vecera) [2062343]
- ice: support for indirect notification (Ivan Vecera) [2062343]
- ice: Add tc-flower filter support for channel (Ivan Vecera) [2062343]
- ice: enable ndo_setup_tc support for mqprio_qdisc (Ivan Vecera) [2062343]
- ice: Add infrastructure for mqprio support via ndo_setup_tc (Ivan Vecera) [2062343]
- ice: fix an error code in ice_ena_vfs() (Ivan Vecera) [2062343]
- ice: use devm_kcalloc() instead of devm_kzalloc() (Ivan Vecera) [2062343]
- ice: Make use of the helper function devm_add_action_or_reset() (Ivan Vecera) [2062343]
- ice: Refactor PR ethtool ops (Ivan Vecera) [2062343]
- ice: Forbid trusted VFs in switchdev mode (Ivan Vecera) [2062343]
- ice: Manage act flags for switchdev offloads (Ivan Vecera) [2062343]
- ice: introduce XDP_TX fallback path (Ivan Vecera) [2062343]
- ice: optimize XDP_TX workloads (Ivan Vecera) [2062343]
- ice: propagate xdp_ring onto rx_ring (Ivan Vecera) [2062343]
- ice: do not create xdp_frame on XDP_TX (Ivan Vecera) [2062343]
- ice: unify xdp_rings accesses (Ivan Vecera) [2062343]
- ice: ndo_setup_tc implementation for PR (Ivan Vecera) [2062343]
- ice: ndo_setup_tc implementation for PF (Ivan Vecera) [2062343]
- ice: Allow changing lan_en and lb_en on all kinds of filters (Ivan Vecera) [2062343]
- ice: cleanup rules info (Ivan Vecera) [2062343]
- ice: allow deleting advanced rules (Ivan Vecera) [2062343]
- ice: allow adding advanced rules (Ivan Vecera) [2062343]
- ice: create advanced switch recipe (Ivan Vecera) [2062343]
- ice: manage profiles and field vectors (Ivan Vecera) [2062343]
- ice: implement low level recipes functions (Ivan Vecera) [2062343]
- ice: add port representor ethtool ops and stats (Ivan Vecera) [2062343]
- ice: switchdev slow path (Ivan Vecera) [2062343]
- ice: rebuild switchdev when resetting all VFs (Ivan Vecera) [2062343]
- ice: enable/disable switchdev when managing VFs (Ivan Vecera) [2062343]
- ice: introduce new type of VSI for switchdev (Ivan Vecera) [2062343]
- ice: set and release switchdev environment (Ivan Vecera) [2062343]
- net: export metadata_dst_free() (Ivan Vecera) [2062343]
- ice: allow changing lan_en and lb_en on dflt rules (Ivan Vecera) [2062343]
- ice: manage VSI antispoof and destination override (Ivan Vecera) [2062343]
- ice: allow process VF opcodes in different ways (Ivan Vecera) [2062343]
- ice: introduce VF port representor (Ivan Vecera) [2062343]
- ice: Move devlink port to PF/VF struct (Ivan Vecera) [2062343]
- ice: support basic E-Switch mode control (Ivan Vecera) [2062343]
- ethernet: use eth_hw_addr_set() for dev-&gt;addr_len cases (Ivan Vecera) [2062343]
- ethernet: use eth_hw_addr_set() instead of ether_addr_copy() (Ivan Vecera) [2062343]
- ice: Use xdp_buf instead of rx_buf for xsk zero-copy (Ivan Vecera) [2062343]
- ice: fix FDIR init missing when reset VF (Ivan Vecera) [2062343]
- intel: Remove rcu_read_lock() around XDP program invocation (Ivan Vecera) [2062343]
- intel: Update drivers to use ethtool_sprintf (Ivan Vecera) [2062343]
- ice: fix conversion to new udp_tunnel infrastructure (Ivan Vecera) [2062343]
- intel-ethernet: clean up W=1 warnings in kdoc (Ivan Vecera) [2062343]
- PCI: Use 'pci_channel_state_t' instead of 'enum pci_channel_state' (Ivan Vecera) [2062343]
- treewide: Use sizeof_field() macro (Ivan Vecera) [2062343]
- devlink: Add 'enable_iwarp' generic device param (Ivan Vecera) [2062343]
- devlink: Add new "enable_vnet" generic device param (Ivan Vecera) [2062343]
- devlink: Add new "enable_rdma" generic device param (Ivan Vecera) [2062343]
- devlink: Add new "enable_eth" generic device param (Ivan Vecera) [2062343]
- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2061665]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.6.1.rt7.163.el8]" date="1649073600">- [rt] build kernel-rt-4.18.0-372.6.1.rt7.163.el8 [2006441]
- configs: enable CONFIG_RMI4_F3A (Benjamin Tissoires) [2067219]
- Input: synaptics-rmi4 - add support for F3A (Benjamin Tissoires) [2067219]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032074] {CVE-2021-4028}
- drm/i915/adl_s: Remove require_force_probe protection (Michel Dänzer) [2025896]
- drm/i915/adl_s: Update ADL-S PCI IDs (Michel Dänzer) [2025896]
- drm/i915: Limit Wa_22010178259 to affected platforms (Michel Dänzer) [2025896]
- drm/i915/adl_s: Fix dma_mask_size to 39 bit (Michel Dänzer) [2025896]
- drm/i915/dmc: Update DMC to v2.14 on ADL-P (Michel Dänzer) [2060051]
- drm/i915: Update memory bandwidth formulae (Michel Dänzer) [2060051]
- drm/i915/fb: Fold modifier CCS type/tiling attribute to plane caps (Michel Dänzer) [2060051]
- drm/i915/fb: Don't store bitmasks in the intel_plane_caps enum (Michel Dänzer) [2060051]
- drm/i915/adl_p: Add ddc pin mapping (Michel Dänzer) [2060051]
- iommu/amd: Fix I/O page table memory leak (Jerry Snitselaar) [2053210]
- iommu/amd: Recover from event log overflow (Jerry Snitselaar) [2053210]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.7.1.rt7.164.el8]" date="1649332800">- [rt] build kernel-rt-4.18.0-372.7.1.rt7.164.el8 [2006441]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056728]
- KVM: SVM: Allow AVIC support on system w/ physical APIC ID &gt; 255 (Bandan Das) [2033068]
- PCI/ACPI: Fix acpi_pci_osc_control_set() kernel-doc comment (Mark Langsdorf) [2049209]
- PCI/ACPI: Check for _OSC support in acpi_pci_osc_control_set() (Mark Langsdorf) [2049209]
- PCI/ACPI: Move _OSC query checks to separate function (Mark Langsdorf) [2049209]
- PCI/ACPI: Move supported and control calculations to separate functions (Mark Langsdorf) [2049209]
- PCI/ACPI: Remove OSC_PCI_SUPPORT_MASKS and OSC_PCI_CONTROL_MASKS (Mark Langsdorf) [2049209]
- kabi: Adding symbol blkdev_get_by_dev (fs/block_dev.c) (Čestmír Kalina) [2010296]
- kabi: Adding symbol thaw_bdev (fs/block_dev.c) (Čestmír Kalina) [2010296]
- kabi: Adding symbol freeze_bdev (fs/block_dev.c) (Čestmír Kalina) [2010296]
- s390/cio: make ccw_device_dma_* more robust (Thomas Huth) [2066709]
- perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Michael Petlan) [2069237]
- redhat: switch secureboot kernel image signing to release keys (Augusto Caringi)
- ice: xsk: Stop Rx processing when ntc catches ntu (Ivan Vecera) [2069082]
- ice: xsk: Fix indexing in ice_tx_xsk_pool() (Ivan Vecera) [2069082]
- ice: Fix kernel crash in XDP scenario (Ivan Vecera) [2069082]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.8.1.rt7.165.el8]" date="1649678400">- [rt] build kernel-rt-4.18.0-372.8.1.rt7.165.el8 [2006441]
- esp6: fix check on ipv6_skip_exthdr's return value (Sabrina Dubroca) [2054075]
- scsi: iscsi: Fix nop handling during conn recovery (Chris Leech) [2069969]
- scsi: iscsi: Merge suspend fields (Chris Leech) [2069969]
- scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2069969]
- scsi: iscsi: Move iscsi_ep_disconnect (Chris Leech) [2069969]
- CI: Remove deprecated option (Veronika Kabatova)</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.9.1.rt7.166.el8]" date="1650283200">- [rt] build kernel-rt-4.18.0-372.9.1.rt7.166.el8 [2006441]
- scsi: qedi: Fix failed disconnect handling (Chris Leech) [2071519]
- scsi: iscsi: Fix unbound endpoint error handling (Chris Leech) [2071519]
- scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Chris Leech) [2071519]
- scsi: iscsi: Fix endpoint reuse regression (Chris Leech) [2071519]
- scsi: iscsi: Release endpoint ID when its freed (Chris Leech) [2071519]
- scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2071519]
- Revert "scsi: iscsi: Fix offload conn cleanup when iscsid restarts" (Chris Leech) [2071519]
- scsi: iscsi: Speed up session unblocking and removal (Chris Leech) [2071519]
- scsi: iscsi: Fix recovery and unblocking race (Chris Leech) [2071519]
- scsi: iscsi: Unblock session then wake up error handler (Chris Leech) [2071519]
- bnxt_en: make hw-tc-offload default to off (Ken Cox) [2005101]
- bnxt_en: reject indirect blk offload when hw-tc-offload is off (Ken Cox) [2005101]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.10.1.rt7.167.el8_6]" date="1652443200">- [rt] build kernel-rt-4.18.0-372.10.1.rt7.167.el8_6 [2081704]
- [rt] Update BZ number to batch0 BZ (Chris White)
- Fonts: Replace discarded const qualifier (Nico Pache) [2064762 1904374] {CVE-2020-28915}
- Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Nico Pache) [2064762 1904374] {CVE-2020-28915}
- fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Nico Pache) [2064762 1904374] {CVE-2020-28915}
- CI: Drop baseline runs (Veronika Kabatova)
- redhat: drop the -sha512 suffix from default rhpkg invocation (Jarod Wilson)
- redhat: switch release to zstream (Augusto Caringi)
- ceph: fix possible NULL pointer dereference for req-&gt;r_session (Xiubo Li) [2080071 2076165]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.11.1.rt7.168.el8_6]" date="1654257600">- [rt] build kernel-rt-4.18.0-372.11.1.rt7.168.el8_6 [2081704]
- Revert "xfs: actually bump warning counts when we send warnings" (Carlos Maiolino) [2071713]
- SUNRPC: use different lock keys for INET6 and LOCAL (Guillaume Nault) [2079856]
- Revert "netfilter: conntrack: tag conntracks picked up in local out hook" (Florian Westphal) [2065266]
- Revert "netfilter: nat: force port remap to prevent shadowing well-known ports" (Florian Westphal) [2065266]
- KVM: PPC: Book3S HV: Add infrastructure to support 2nd DAWR (Laurent Vivier) [2079069]
- KVM: PPC: Book3S HV: Rename current DAWR macros and variables (Laurent Vivier) [2079069]
- esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca) [2062121] {CVE-2022-27666}
- esp: Fix possible buffer overflow in ESP transformation (Sabrina Dubroca) [2062121] {CVE-2022-27666}
- NFS: Don't loop forever in nfs_do_recoalesce() (Scott Mayhew) [2080998]
- redhat: Fix rpminspect spec filename test for RT (John B. Wyatt IV)</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.12.1.rt7.169.el8_6]" date="1654516800">- [rt] build kernel-rt-4.18.0-372.12.1.rt7.169.el8_6 [2081704]
- sctp: use the correct skb for security_sctp_assoc_request (Xin Long) [2070959]
- net/mlx5e: Fix wrong source vport matching on tunnel rule (Amir Tzin) [2088610]
- net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (Amir Tzin) [2088611]
- net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (Amir Tzin) [2088611]
- net/mlx5: DR, Cache STE shadow memory (Amir Tzin) [2075553]
- net/mlx5: DR, Fix the threshold that defines when pool sync is initiated (Amir Tzin) [2075553]
- drm/i915/display: Remove check for low voltage sku for max dp source rate (Jocelyn Falempe) [2066644]
- net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it (Amir Tzin) [2088638]
- net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion (Amir Tzin) [2081011]
- net/mlx5e: TC, Skip redundant ct clear actions (Amir Tzin) [2079918]
- net/mlx5e: TC, fix decap fallback to uplink when int port not supported (Amir Tzin) [2088639]
- CI: Use zstream builder image (Veronika Kabatova)
- ice: Allow to pass VLAN tagged packets to VF when port VLAN is configured (Petr Oros) [2081794]
- ice: clear stale Tx queue settings before configuring (Petr Oros) [2081794]
- ice: fix crash when writing timestamp on RX rings (Petr Oros) [2081794]
- ice: Fix race during aux device (un)plugging (Petr Oros) [2081794]
- ice: fix PTP stale Tx timestamps cleanup (Petr Oros) [2081794]
- ice: ice_sched: fix an incorrect NULL check on list iterator (Petr Oros) [2081794]
- ice: fix use-after-free when deinitializing mailbox snapshot (Petr Oros) [2081794]
- ice: wait 5 s for EMP reset after firmware flash (Petr Oros) [2081794]
- ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix incorrect locking in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix memory leak in ice_get_orom_civd_data() (Petr Oros) [2081794]
- ice: fix crash in switchdev mode (Petr Oros) [2081794]
- Revert "iavf: Fix deadlock occurrence during resetting VF interface" (Petr Oros) [2081794]
- ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Petr Oros) [2081794]
- ice: clear cmd_type_offset_bsz for TX rings (Petr Oros) [2081794]
- ice: xsk: fix VSI state check in ice_xsk_wakeup() (Petr Oros) [2081794]
- ice: synchronize_rcu() when terminating rings (Petr Oros) [2081794]
- ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Petr Oros) [2081794]
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Petr Oros) [2081794]
- ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2081794]
- ice: Fix MAC address setting (Petr Oros) [2081794]
- openvswitch: Fix setting ipv6 fields causing hw csum failure (Eelco Chaudron) [2086549]
- sched/cputime, proc/stat: Fix incorrect guest nice cpustat value (Waiman Long) [2084138]
- procfs: Use all-in-one vtime aware kcpustat accessor (Waiman Long) [2084138]
- procfs: Use vtime aware kcpustat accessor to fetch CPUTIME_SYSTEM (Waiman Long) [2084138]
- proc: read kernel cpu stat pointer once (Waiman Long) [2084138]
- proc: use "unsigned int" in /proc/stat hook (Waiman Long) [2084138]
- sched/cputime: Support other fields on kcpustat_field() (Waiman Long) [2084138]
- sched/cputime: Add vtime guest task state (Waiman Long) [2084138]
- sched/cputime: Add vtime idle task state (Waiman Long) [2084138]
- sched/cputime: Spare a seqcount lock/unlock cycle on context switch (Waiman Long) [2084138]
- sched/vtime: Move task_struct_rh-&gt;vtime_cpu back to vtime structure (Waiman Long) [2084138]
- net: openvswitch: fix leak of nested actions (Eelco Chaudron) [2086590]
- net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner) [2074221]
- PCI: hv: Propagate coherence from VMbus device to PCI device (Vitaly Kuznetsov) [2074829]
- Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus device (Vitaly Kuznetsov) [2074829]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.13.1.rt7.170.el8_6]" date="1654776000">- [rt] build kernel-rt-4.18.0-372.13.1.rt7.170.el8_6 [2081704]
- openvswitch: always update flow key after nat (Aaron Conole) [2068476 2066885]
- KVM: PPC: Fix TCE handling for VFIO (Daniel Henrique Barboza) [2085572 2062687]
- rfkill: make new event layout opt-in (Jose Ignacio Tornos Martinez) [2087641 2023175]
- ASoC: Intel: soc-acpi: add entries in ADL match table (Jaroslav Kysela) [2090423 2052011]
- isert: support for unsolicited NOPIN with no response (Maurizio Lombardi) [2079433 2035915]
- iscsit: increment max_cmd_sn for isert on command release (Maurizio Lombardi) [2079433 2035915]
- net: tcp better handling of reordering then loss cases (Marcelo Ricardo Leitner) [2080972 2074566]
- tcp: tcp_mark_head_lost is only valid for sack-tcp (Marcelo Ricardo Leitner) [2080972 2074566]</changelog>
</package>
<package pkgid="4968e190d82ece0bb52b070635abc060b917b1f93367331b7ae3f971c1cc0cf7" name="kernel-rt" arch="src">
  <version epoch="0" ver="4.18.0" rel="372.16.1.rt7.173.el8_6"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.7.1.rt7.164.el8]" date="1649332800">- [rt] build kernel-rt-4.18.0-372.7.1.rt7.164.el8 [2006441]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056728]
- KVM: SVM: Allow AVIC support on system w/ physical APIC ID &gt; 255 (Bandan Das) [2033068]
- PCI/ACPI: Fix acpi_pci_osc_control_set() kernel-doc comment (Mark Langsdorf) [2049209]
- PCI/ACPI: Check for _OSC support in acpi_pci_osc_control_set() (Mark Langsdorf) [2049209]
- PCI/ACPI: Move _OSC query checks to separate function (Mark Langsdorf) [2049209]
- PCI/ACPI: Move supported and control calculations to separate functions (Mark Langsdorf) [2049209]
- PCI/ACPI: Remove OSC_PCI_SUPPORT_MASKS and OSC_PCI_CONTROL_MASKS (Mark Langsdorf) [2049209]
- kabi: Adding symbol blkdev_get_by_dev (fs/block_dev.c) (Čestmír Kalina) [2010296]
- kabi: Adding symbol thaw_bdev (fs/block_dev.c) (Čestmír Kalina) [2010296]
- kabi: Adding symbol freeze_bdev (fs/block_dev.c) (Čestmír Kalina) [2010296]
- s390/cio: make ccw_device_dma_* more robust (Thomas Huth) [2066709]
- perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Michael Petlan) [2069237]
- redhat: switch secureboot kernel image signing to release keys (Augusto Caringi)
- ice: xsk: Stop Rx processing when ntc catches ntu (Ivan Vecera) [2069082]
- ice: xsk: Fix indexing in ice_tx_xsk_pool() (Ivan Vecera) [2069082]
- ice: Fix kernel crash in XDP scenario (Ivan Vecera) [2069082]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.8.1.rt7.165.el8]" date="1649678400">- [rt] build kernel-rt-4.18.0-372.8.1.rt7.165.el8 [2006441]
- esp6: fix check on ipv6_skip_exthdr's return value (Sabrina Dubroca) [2054075]
- scsi: iscsi: Fix nop handling during conn recovery (Chris Leech) [2069969]
- scsi: iscsi: Merge suspend fields (Chris Leech) [2069969]
- scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2069969]
- scsi: iscsi: Move iscsi_ep_disconnect (Chris Leech) [2069969]
- CI: Remove deprecated option (Veronika Kabatova)</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.9.1.rt7.166.el8]" date="1650283200">- [rt] build kernel-rt-4.18.0-372.9.1.rt7.166.el8 [2006441]
- scsi: qedi: Fix failed disconnect handling (Chris Leech) [2071519]
- scsi: iscsi: Fix unbound endpoint error handling (Chris Leech) [2071519]
- scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Chris Leech) [2071519]
- scsi: iscsi: Fix endpoint reuse regression (Chris Leech) [2071519]
- scsi: iscsi: Release endpoint ID when its freed (Chris Leech) [2071519]
- scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2071519]
- Revert "scsi: iscsi: Fix offload conn cleanup when iscsid restarts" (Chris Leech) [2071519]
- scsi: iscsi: Speed up session unblocking and removal (Chris Leech) [2071519]
- scsi: iscsi: Fix recovery and unblocking race (Chris Leech) [2071519]
- scsi: iscsi: Unblock session then wake up error handler (Chris Leech) [2071519]
- bnxt_en: make hw-tc-offload default to off (Ken Cox) [2005101]
- bnxt_en: reject indirect blk offload when hw-tc-offload is off (Ken Cox) [2005101]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.10.1.rt7.167.el8_6]" date="1652443200">- [rt] build kernel-rt-4.18.0-372.10.1.rt7.167.el8_6 [2081704]
- [rt] Update BZ number to batch0 BZ (Chris White)
- Fonts: Replace discarded const qualifier (Nico Pache) [2064762 1904374] {CVE-2020-28915}
- Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Nico Pache) [2064762 1904374] {CVE-2020-28915}
- fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Nico Pache) [2064762 1904374] {CVE-2020-28915}
- CI: Drop baseline runs (Veronika Kabatova)
- redhat: drop the -sha512 suffix from default rhpkg invocation (Jarod Wilson)
- redhat: switch release to zstream (Augusto Caringi)
- ceph: fix possible NULL pointer dereference for req-&gt;r_session (Xiubo Li) [2080071 2076165]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.11.1.rt7.168.el8_6]" date="1654257600">- [rt] build kernel-rt-4.18.0-372.11.1.rt7.168.el8_6 [2081704]
- Revert "xfs: actually bump warning counts when we send warnings" (Carlos Maiolino) [2071713]
- SUNRPC: use different lock keys for INET6 and LOCAL (Guillaume Nault) [2079856]
- Revert "netfilter: conntrack: tag conntracks picked up in local out hook" (Florian Westphal) [2065266]
- Revert "netfilter: nat: force port remap to prevent shadowing well-known ports" (Florian Westphal) [2065266]
- KVM: PPC: Book3S HV: Add infrastructure to support 2nd DAWR (Laurent Vivier) [2079069]
- KVM: PPC: Book3S HV: Rename current DAWR macros and variables (Laurent Vivier) [2079069]
- esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca) [2062121] {CVE-2022-27666}
- esp: Fix possible buffer overflow in ESP transformation (Sabrina Dubroca) [2062121] {CVE-2022-27666}
- NFS: Don't loop forever in nfs_do_recoalesce() (Scott Mayhew) [2080998]
- redhat: Fix rpminspect spec filename test for RT (John B. Wyatt IV)</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.12.1.rt7.169.el8_6]" date="1654516800">- [rt] build kernel-rt-4.18.0-372.12.1.rt7.169.el8_6 [2081704]
- sctp: use the correct skb for security_sctp_assoc_request (Xin Long) [2070959]
- net/mlx5e: Fix wrong source vport matching on tunnel rule (Amir Tzin) [2088610]
- net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (Amir Tzin) [2088611]
- net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (Amir Tzin) [2088611]
- net/mlx5: DR, Cache STE shadow memory (Amir Tzin) [2075553]
- net/mlx5: DR, Fix the threshold that defines when pool sync is initiated (Amir Tzin) [2075553]
- drm/i915/display: Remove check for low voltage sku for max dp source rate (Jocelyn Falempe) [2066644]
- net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it (Amir Tzin) [2088638]
- net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion (Amir Tzin) [2081011]
- net/mlx5e: TC, Skip redundant ct clear actions (Amir Tzin) [2079918]
- net/mlx5e: TC, fix decap fallback to uplink when int port not supported (Amir Tzin) [2088639]
- CI: Use zstream builder image (Veronika Kabatova)
- ice: Allow to pass VLAN tagged packets to VF when port VLAN is configured (Petr Oros) [2081794]
- ice: clear stale Tx queue settings before configuring (Petr Oros) [2081794]
- ice: fix crash when writing timestamp on RX rings (Petr Oros) [2081794]
- ice: Fix race during aux device (un)plugging (Petr Oros) [2081794]
- ice: fix PTP stale Tx timestamps cleanup (Petr Oros) [2081794]
- ice: ice_sched: fix an incorrect NULL check on list iterator (Petr Oros) [2081794]
- ice: fix use-after-free when deinitializing mailbox snapshot (Petr Oros) [2081794]
- ice: wait 5 s for EMP reset after firmware flash (Petr Oros) [2081794]
- ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix incorrect locking in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix memory leak in ice_get_orom_civd_data() (Petr Oros) [2081794]
- ice: fix crash in switchdev mode (Petr Oros) [2081794]
- Revert "iavf: Fix deadlock occurrence during resetting VF interface" (Petr Oros) [2081794]
- ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Petr Oros) [2081794]
- ice: clear cmd_type_offset_bsz for TX rings (Petr Oros) [2081794]
- ice: xsk: fix VSI state check in ice_xsk_wakeup() (Petr Oros) [2081794]
- ice: synchronize_rcu() when terminating rings (Petr Oros) [2081794]
- ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Petr Oros) [2081794]
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Petr Oros) [2081794]
- ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2081794]
- ice: Fix MAC address setting (Petr Oros) [2081794]
- openvswitch: Fix setting ipv6 fields causing hw csum failure (Eelco Chaudron) [2086549]
- sched/cputime, proc/stat: Fix incorrect guest nice cpustat value (Waiman Long) [2084138]
- procfs: Use all-in-one vtime aware kcpustat accessor (Waiman Long) [2084138]
- procfs: Use vtime aware kcpustat accessor to fetch CPUTIME_SYSTEM (Waiman Long) [2084138]
- proc: read kernel cpu stat pointer once (Waiman Long) [2084138]
- proc: use "unsigned int" in /proc/stat hook (Waiman Long) [2084138]
- sched/cputime: Support other fields on kcpustat_field() (Waiman Long) [2084138]
- sched/cputime: Add vtime guest task state (Waiman Long) [2084138]
- sched/cputime: Add vtime idle task state (Waiman Long) [2084138]
- sched/cputime: Spare a seqcount lock/unlock cycle on context switch (Waiman Long) [2084138]
- sched/vtime: Move task_struct_rh-&gt;vtime_cpu back to vtime structure (Waiman Long) [2084138]
- net: openvswitch: fix leak of nested actions (Eelco Chaudron) [2086590]
- net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner) [2074221]
- PCI: hv: Propagate coherence from VMbus device to PCI device (Vitaly Kuznetsov) [2074829]
- Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus device (Vitaly Kuznetsov) [2074829]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.13.1.rt7.170.el8_6]" date="1654776000">- [rt] build kernel-rt-4.18.0-372.13.1.rt7.170.el8_6 [2081704]
- openvswitch: always update flow key after nat (Aaron Conole) [2068476 2066885]
- KVM: PPC: Fix TCE handling for VFIO (Daniel Henrique Barboza) [2085572 2062687]
- rfkill: make new event layout opt-in (Jose Ignacio Tornos Martinez) [2087641 2023175]
- ASoC: Intel: soc-acpi: add entries in ADL match table (Jaroslav Kysela) [2090423 2052011]
- isert: support for unsolicited NOPIN with no response (Maurizio Lombardi) [2079433 2035915]
- iscsit: increment max_cmd_sn for isert on command release (Maurizio Lombardi) [2079433 2035915]
- net: tcp better handling of reordering then loss cases (Marcelo Ricardo Leitner) [2080972 2074566]
- tcp: tcp_mark_head_lost is only valid for sack-tcp (Marcelo Ricardo Leitner) [2080972 2074566]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-372.14.1.rt7.171.el8_6]" date="1655208000">- [rt] build kernel-rt-4.18.0-372.14.1.rt7.171.el8_6 [2081704]
- redhat: explicitly request for python3 on scripts (Bruno Meneguele)
- scsi: core: sysfs: Fix setting device state to SDEV_RUNNING (Chris Leech) [2091078 2086970]
- scsi: core: sysfs: Fix hang when device state is set via sysfs (Chris Leech) [2091078 2086970]
- net/sched: act_ct: fix ref leak when switching zones (Marcelo Ricardo Leitner) [2066356 2014027]
- net/sched: act_ct: Fix flow table lookup after ct clear or switching zones (Marcelo Ricardo Leitner) [2066356 2014027]
- drm/i915: Stop force enabling pipe bottom color gammma/csc (Foggy Liu) [2083384 2054487]
- gfs2: Fix gfs2_release for non-writers regression (Bob Peterson) [2092074 1955591]
- gfs2: gfs2_create_inode rework (Andreas Gruenbacher) [2092074 1955591]
- gfs2: gfs2_inode_lookup rework (Andreas Gruenbacher) [2092074 1955591]
- gfs2: gfs2_inode_lookup cleanup (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix remote demote of weak glock holders (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix glock_hash_walk bugs (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Cancel remote delete work asynchronously (Bob Peterson) [2092074 1955591]
- gfs2: set glock object after nq (Bob Peterson) [2092074 1955591]
- gfs2: remove RDF_UPTODATE flag (Bob Peterson) [2092074 1955591]
- gfs2: Eliminate GIF_INVALID flag (Bob Peterson) [2092074 1955591]
- gfs2: Fix atomic bug in gfs2_instantiate (Andreas Gruenbacher) [2092074 1955591]
- gfs2: fix GL_SKIP node_scope problems (Bob Peterson) [2092074 1955591]
- gfs2: Add some flags missing from glock output (Bob Peterson) [2092074 1955591]
- gfs2: split glock instantiation off from do_promote (Bob Peterson) [2092074 1955591]
- gfs2: further simplify do_promote (Bob Peterson) [2092074 1955591]
- gfs2: re-factor function do_promote (Bob Peterson) [2092074 1955591]
- gfs2: Remove 'first' trace_gfs2_promote argument (Andreas Gruenbacher) [2092074 1955591]
- gfs2: change go_lock to go_instantiate (Bob Peterson) [2092074 1955591]
- gfs2: Switch some BUG_ON to GLOCK_BUG_ON for debug (Bob Peterson) [2092074 1955591]
- gfs2: move GL_SKIP check from glops to do_promote (Bob Peterson) [2092074 1955591]
- gfs2: Add GL_SKIP holder flag to dump_holder (Bob Peterson) [2092074 1955591]
- gfs2: remove redundant check in gfs2_rgrp_go_lock (Bob Peterson) [2092074 1955591]
- gfs2: Fix mmap + page fault deadlocks for direct I/O (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Introduce ITER_IOVEC_FLAG_NOFAULT flag to disable page faults (Andreas Gruenbacher) [2092074 1955591]
- gup: Introduce FOLL_NOFAULT flag to disable page faults (Andreas Gruenbacher) [2092074 1955591]
- iomap: Add done_before argument to iomap_dio_rw (Andreas Gruenbacher) [2092074 1955591]
- iomap: Support partial direct I/O on user copy failures (Andreas Gruenbacher) [2092074 1955591]
- iomap: Fix iomap_dio_rw return value for user copies (Andreas Gruenbacher) [2092074 1955591]
- iomap: support reading inline data from non-zero pos (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Only dereference i-&gt;iov when iter_is_iovec(i) (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Prevent endless loops in gfs2_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix mmap + page fault deadlocks for buffered I/O (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Eliminate ip-&gt;i_gh (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Move the inode glock locking to gfs2_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix "Introduce flag for glock holder auto-demotion" (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Introduce flag for glock holder auto-demotion (Bob Peterson) [2092074 1955591]
- gfs2: fix scheduling while atomic bug in glocks (Bob Peterson) [2092074 1955591]
- gfs2: Clean up function may_grant (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Add wrapper for iomap_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Introduce fault_in_iov_iter_writeable (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Turn iov_iter_fault_in_readable into fault_in_iov_iter_readable (Andreas Gruenbacher) [2092074 1955591]
- gup: Turn fault_in_pages_{readable,writeable} into fault_in_{readable,writeable} (Andreas Gruenbacher) [2092074 1955591]
- powerpc/signal64: Don't opencode page prefaulting (Andreas Gruenbacher) [2092074 1955591]
- sanitize iov_iter_fault_in_readable() (Andreas Gruenbacher) [2092074 1955591]
- [xarray] iov_iter_fault_in_readable() should do nothing in xarray case (Andreas Gruenbacher) [2092074 1955591]
- powerpc/kvm: Fix kvm_use_magic_page (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix length of holes reported at end-of-file (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Remove redundant check from gfs2_glock_dq (Bob Peterson) [2092074 1955591]
- gfs2: release iopen glock early in evict (Bob Peterson) [2092074 1955591]
- mm: change fault_in_pages_* to have an unsigned size parameter (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Eliminate vestigial HIF_FIRST (Bob Peterson) [2092074 1955591]
- iomap: remove the iomap arguments to -&gt;page_{prepare,done} (Andreas Gruenbacher) [2092074 1955591]
- md: Set MD_BROKEN for RAID1 and RAID10 (Nigel Croxon) [2075075 2048954]
- raid5: introduce MD_BROKEN (Nigel Croxon) [2075075 2048954]
- drm/i915/ehl: Remove require_force_probe protection (Michel Dänzer) [2075567 2048674]
- genirq: Use rcu in kstat_irqs_usr() (Waiman Long) [2083308 2068445]
- dm integrity: fix memory corruption when tag_size is less than digest size (Benjamin Marzinski) [2082184 2081775]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-372.15.1.rt7.172.el8_6]" date="1655812800">- [rt] build kernel-rt-4.18.0-372.15.1.rt7.172.el8_6 [2081704]
- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087961 2087962] {CVE-2022-1729}
- vmxnet3: fix minimum vectors alloc issue (Kamal Heib) [2094473 2093242]
- gfs2: Stop using glock holder auto-demotion for now (Andreas Gruenbacher) [2092073 2054855]
- gfs2: buffered write prefaulting (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Align read and write chunks to the page cache (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Pull return value test out of should_fault_in_pages (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Clean up use of fault_in_iov_iter_{read,write}able (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Variable rename (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher) [2092073 2054855]
- iomap: iomap_write_end cleanup (Andreas Gruenbacher) [2092073 2054855]
- iomap: iomap_write_failed fix (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Don't re-check for write past EOF unnecessarily (Andreas Gruenbacher) [2092073 2054855]
- gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher) [2092073 2054855]
- fs/iomap: Fix buffered write page prefaulting (Andreas Gruenbacher) [2092073 2054855]
- generic_perform_write()/iomap_write_actor(): saner logics for short copy (Andreas Gruenbacher) [2092073 2054855]
- iomap: Convert iomap_write_end types (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Make sure not to return short direct writes (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Remove dead code in gfs2_file_read_iter (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Minor retry logic cleanup (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Fix should_fault_in_pages() logic (Andreas Gruenbacher) [2092073 2054855]
- mm: gup: make fault_in_safe_writeable() use fixup_user_fault() (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Initialize gh_error in gfs2_glock_nq (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Switch lock order of inode and iopen glock (Andreas Gruenbacher) [2092073 2054855]
- gfs2: cancel timed-out glock requests (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Expect -EBUSY after canceling dlm locking requests (Andreas Gruenbacher) [2092073 2054855]
- gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher) [2092073 2054855]
- gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) [2092073 2054855]
- net: openvswitch: don't send internal clone attribute to the userspace. (Antoine Tenart) [2097796 2085509]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-372.16.1.rt7.173.el8_6]" date="1656417600">- [rt] build kernel-rt-4.18.0-372.16.1.rt7.173.el8_6 [2098244]
- x86/platform/uv: Log gap hole end size (Frank Ramsay) [2084645 2074098]
- x86/platform/uv: Update TSC sync state for UV5 (Frank Ramsay) [2084645 2074098]
- x86/platform/uv: Update NMI Handler for UV5 (Frank Ramsay) [2084645 2074098]
- x86/platform/uv: Remove unused variable in UV5 NMI handler (Frank Ramsay) [2084645 2074098]
- blk-mq: fix blk_mq_flush_plug_list (Ming Lei) [2096931 2088397]
- sched/pelt: Fix attach_entity_load_avg() corner case (Phil Auld) [2096305 2056383]
- [rt] Update RTBZ to 8.6.z1 (Chris White)</changelog>
</package>
<package pkgid="0ccad014ccdc7f74ade7e016d2f4a7eeb14bca5945a75368c528a86693025abb" name="kernel-rt" arch="src">
  <version epoch="0" ver="4.18.0" rel="372.19.1.rt7.176.el8_6"/>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.10.1.rt7.167.el8_6]" date="1652443200">- [rt] build kernel-rt-4.18.0-372.10.1.rt7.167.el8_6 [2081704]
- [rt] Update BZ number to batch0 BZ (Chris White)
- Fonts: Replace discarded const qualifier (Nico Pache) [2064762 1904374] {CVE-2020-28915}
- Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Nico Pache) [2064762 1904374] {CVE-2020-28915}
- fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Nico Pache) [2064762 1904374] {CVE-2020-28915}
- CI: Drop baseline runs (Veronika Kabatova)
- redhat: drop the -sha512 suffix from default rhpkg invocation (Jarod Wilson)
- redhat: switch release to zstream (Augusto Caringi)
- ceph: fix possible NULL pointer dereference for req-&gt;r_session (Xiubo Li) [2080071 2076165]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.11.1.rt7.168.el8_6]" date="1654257600">- [rt] build kernel-rt-4.18.0-372.11.1.rt7.168.el8_6 [2081704]
- Revert "xfs: actually bump warning counts when we send warnings" (Carlos Maiolino) [2071713]
- SUNRPC: use different lock keys for INET6 and LOCAL (Guillaume Nault) [2079856]
- Revert "netfilter: conntrack: tag conntracks picked up in local out hook" (Florian Westphal) [2065266]
- Revert "netfilter: nat: force port remap to prevent shadowing well-known ports" (Florian Westphal) [2065266]
- KVM: PPC: Book3S HV: Add infrastructure to support 2nd DAWR (Laurent Vivier) [2079069]
- KVM: PPC: Book3S HV: Rename current DAWR macros and variables (Laurent Vivier) [2079069]
- esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca) [2062121] {CVE-2022-27666}
- esp: Fix possible buffer overflow in ESP transformation (Sabrina Dubroca) [2062121] {CVE-2022-27666}
- NFS: Don't loop forever in nfs_do_recoalesce() (Scott Mayhew) [2080998]
- redhat: Fix rpminspect spec filename test for RT (John B. Wyatt IV)</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.12.1.rt7.169.el8_6]" date="1654516800">- [rt] build kernel-rt-4.18.0-372.12.1.rt7.169.el8_6 [2081704]
- sctp: use the correct skb for security_sctp_assoc_request (Xin Long) [2070959]
- net/mlx5e: Fix wrong source vport matching on tunnel rule (Amir Tzin) [2088610]
- net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (Amir Tzin) [2088611]
- net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (Amir Tzin) [2088611]
- net/mlx5: DR, Cache STE shadow memory (Amir Tzin) [2075553]
- net/mlx5: DR, Fix the threshold that defines when pool sync is initiated (Amir Tzin) [2075553]
- drm/i915/display: Remove check for low voltage sku for max dp source rate (Jocelyn Falempe) [2066644]
- net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it (Amir Tzin) [2088638]
- net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion (Amir Tzin) [2081011]
- net/mlx5e: TC, Skip redundant ct clear actions (Amir Tzin) [2079918]
- net/mlx5e: TC, fix decap fallback to uplink when int port not supported (Amir Tzin) [2088639]
- CI: Use zstream builder image (Veronika Kabatova)
- ice: Allow to pass VLAN tagged packets to VF when port VLAN is configured (Petr Oros) [2081794]
- ice: clear stale Tx queue settings before configuring (Petr Oros) [2081794]
- ice: fix crash when writing timestamp on RX rings (Petr Oros) [2081794]
- ice: Fix race during aux device (un)plugging (Petr Oros) [2081794]
- ice: fix PTP stale Tx timestamps cleanup (Petr Oros) [2081794]
- ice: ice_sched: fix an incorrect NULL check on list iterator (Petr Oros) [2081794]
- ice: fix use-after-free when deinitializing mailbox snapshot (Petr Oros) [2081794]
- ice: wait 5 s for EMP reset after firmware flash (Petr Oros) [2081794]
- ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix incorrect locking in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix memory leak in ice_get_orom_civd_data() (Petr Oros) [2081794]
- ice: fix crash in switchdev mode (Petr Oros) [2081794]
- Revert "iavf: Fix deadlock occurrence during resetting VF interface" (Petr Oros) [2081794]
- ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Petr Oros) [2081794]
- ice: clear cmd_type_offset_bsz for TX rings (Petr Oros) [2081794]
- ice: xsk: fix VSI state check in ice_xsk_wakeup() (Petr Oros) [2081794]
- ice: synchronize_rcu() when terminating rings (Petr Oros) [2081794]
- ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Petr Oros) [2081794]
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Petr Oros) [2081794]
- ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2081794]
- ice: Fix MAC address setting (Petr Oros) [2081794]
- openvswitch: Fix setting ipv6 fields causing hw csum failure (Eelco Chaudron) [2086549]
- sched/cputime, proc/stat: Fix incorrect guest nice cpustat value (Waiman Long) [2084138]
- procfs: Use all-in-one vtime aware kcpustat accessor (Waiman Long) [2084138]
- procfs: Use vtime aware kcpustat accessor to fetch CPUTIME_SYSTEM (Waiman Long) [2084138]
- proc: read kernel cpu stat pointer once (Waiman Long) [2084138]
- proc: use "unsigned int" in /proc/stat hook (Waiman Long) [2084138]
- sched/cputime: Support other fields on kcpustat_field() (Waiman Long) [2084138]
- sched/cputime: Add vtime guest task state (Waiman Long) [2084138]
- sched/cputime: Add vtime idle task state (Waiman Long) [2084138]
- sched/cputime: Spare a seqcount lock/unlock cycle on context switch (Waiman Long) [2084138]
- sched/vtime: Move task_struct_rh-&gt;vtime_cpu back to vtime structure (Waiman Long) [2084138]
- net: openvswitch: fix leak of nested actions (Eelco Chaudron) [2086590]
- net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner) [2074221]
- PCI: hv: Propagate coherence from VMbus device to PCI device (Vitaly Kuznetsov) [2074829]
- Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus device (Vitaly Kuznetsov) [2074829]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.13.1.rt7.170.el8_6]" date="1654776000">- [rt] build kernel-rt-4.18.0-372.13.1.rt7.170.el8_6 [2081704]
- openvswitch: always update flow key after nat (Aaron Conole) [2068476 2066885]
- KVM: PPC: Fix TCE handling for VFIO (Daniel Henrique Barboza) [2085572 2062687]
- rfkill: make new event layout opt-in (Jose Ignacio Tornos Martinez) [2087641 2023175]
- ASoC: Intel: soc-acpi: add entries in ADL match table (Jaroslav Kysela) [2090423 2052011]
- isert: support for unsolicited NOPIN with no response (Maurizio Lombardi) [2079433 2035915]
- iscsit: increment max_cmd_sn for isert on command release (Maurizio Lombardi) [2079433 2035915]
- net: tcp better handling of reordering then loss cases (Marcelo Ricardo Leitner) [2080972 2074566]
- tcp: tcp_mark_head_lost is only valid for sack-tcp (Marcelo Ricardo Leitner) [2080972 2074566]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-372.14.1.rt7.171.el8_6]" date="1655208000">- [rt] build kernel-rt-4.18.0-372.14.1.rt7.171.el8_6 [2081704]
- redhat: explicitly request for python3 on scripts (Bruno Meneguele)
- scsi: core: sysfs: Fix setting device state to SDEV_RUNNING (Chris Leech) [2091078 2086970]
- scsi: core: sysfs: Fix hang when device state is set via sysfs (Chris Leech) [2091078 2086970]
- net/sched: act_ct: fix ref leak when switching zones (Marcelo Ricardo Leitner) [2066356 2014027]
- net/sched: act_ct: Fix flow table lookup after ct clear or switching zones (Marcelo Ricardo Leitner) [2066356 2014027]
- drm/i915: Stop force enabling pipe bottom color gammma/csc (Foggy Liu) [2083384 2054487]
- gfs2: Fix gfs2_release for non-writers regression (Bob Peterson) [2092074 1955591]
- gfs2: gfs2_create_inode rework (Andreas Gruenbacher) [2092074 1955591]
- gfs2: gfs2_inode_lookup rework (Andreas Gruenbacher) [2092074 1955591]
- gfs2: gfs2_inode_lookup cleanup (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix remote demote of weak glock holders (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix glock_hash_walk bugs (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Cancel remote delete work asynchronously (Bob Peterson) [2092074 1955591]
- gfs2: set glock object after nq (Bob Peterson) [2092074 1955591]
- gfs2: remove RDF_UPTODATE flag (Bob Peterson) [2092074 1955591]
- gfs2: Eliminate GIF_INVALID flag (Bob Peterson) [2092074 1955591]
- gfs2: Fix atomic bug in gfs2_instantiate (Andreas Gruenbacher) [2092074 1955591]
- gfs2: fix GL_SKIP node_scope problems (Bob Peterson) [2092074 1955591]
- gfs2: Add some flags missing from glock output (Bob Peterson) [2092074 1955591]
- gfs2: split glock instantiation off from do_promote (Bob Peterson) [2092074 1955591]
- gfs2: further simplify do_promote (Bob Peterson) [2092074 1955591]
- gfs2: re-factor function do_promote (Bob Peterson) [2092074 1955591]
- gfs2: Remove 'first' trace_gfs2_promote argument (Andreas Gruenbacher) [2092074 1955591]
- gfs2: change go_lock to go_instantiate (Bob Peterson) [2092074 1955591]
- gfs2: Switch some BUG_ON to GLOCK_BUG_ON for debug (Bob Peterson) [2092074 1955591]
- gfs2: move GL_SKIP check from glops to do_promote (Bob Peterson) [2092074 1955591]
- gfs2: Add GL_SKIP holder flag to dump_holder (Bob Peterson) [2092074 1955591]
- gfs2: remove redundant check in gfs2_rgrp_go_lock (Bob Peterson) [2092074 1955591]
- gfs2: Fix mmap + page fault deadlocks for direct I/O (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Introduce ITER_IOVEC_FLAG_NOFAULT flag to disable page faults (Andreas Gruenbacher) [2092074 1955591]
- gup: Introduce FOLL_NOFAULT flag to disable page faults (Andreas Gruenbacher) [2092074 1955591]
- iomap: Add done_before argument to iomap_dio_rw (Andreas Gruenbacher) [2092074 1955591]
- iomap: Support partial direct I/O on user copy failures (Andreas Gruenbacher) [2092074 1955591]
- iomap: Fix iomap_dio_rw return value for user copies (Andreas Gruenbacher) [2092074 1955591]
- iomap: support reading inline data from non-zero pos (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Only dereference i-&gt;iov when iter_is_iovec(i) (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Prevent endless loops in gfs2_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix mmap + page fault deadlocks for buffered I/O (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Eliminate ip-&gt;i_gh (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Move the inode glock locking to gfs2_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix "Introduce flag for glock holder auto-demotion" (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Introduce flag for glock holder auto-demotion (Bob Peterson) [2092074 1955591]
- gfs2: fix scheduling while atomic bug in glocks (Bob Peterson) [2092074 1955591]
- gfs2: Clean up function may_grant (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Add wrapper for iomap_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Introduce fault_in_iov_iter_writeable (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Turn iov_iter_fault_in_readable into fault_in_iov_iter_readable (Andreas Gruenbacher) [2092074 1955591]
- gup: Turn fault_in_pages_{readable,writeable} into fault_in_{readable,writeable} (Andreas Gruenbacher) [2092074 1955591]
- powerpc/signal64: Don't opencode page prefaulting (Andreas Gruenbacher) [2092074 1955591]
- sanitize iov_iter_fault_in_readable() (Andreas Gruenbacher) [2092074 1955591]
- [xarray] iov_iter_fault_in_readable() should do nothing in xarray case (Andreas Gruenbacher) [2092074 1955591]
- powerpc/kvm: Fix kvm_use_magic_page (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix length of holes reported at end-of-file (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Remove redundant check from gfs2_glock_dq (Bob Peterson) [2092074 1955591]
- gfs2: release iopen glock early in evict (Bob Peterson) [2092074 1955591]
- mm: change fault_in_pages_* to have an unsigned size parameter (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Eliminate vestigial HIF_FIRST (Bob Peterson) [2092074 1955591]
- iomap: remove the iomap arguments to -&gt;page_{prepare,done} (Andreas Gruenbacher) [2092074 1955591]
- md: Set MD_BROKEN for RAID1 and RAID10 (Nigel Croxon) [2075075 2048954]
- raid5: introduce MD_BROKEN (Nigel Croxon) [2075075 2048954]
- drm/i915/ehl: Remove require_force_probe protection (Michel Dänzer) [2075567 2048674]
- genirq: Use rcu in kstat_irqs_usr() (Waiman Long) [2083308 2068445]
- dm integrity: fix memory corruption when tag_size is less than digest size (Benjamin Marzinski) [2082184 2081775]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-372.15.1.rt7.172.el8_6]" date="1655812800">- [rt] build kernel-rt-4.18.0-372.15.1.rt7.172.el8_6 [2081704]
- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087961 2087962] {CVE-2022-1729}
- vmxnet3: fix minimum vectors alloc issue (Kamal Heib) [2094473 2093242]
- gfs2: Stop using glock holder auto-demotion for now (Andreas Gruenbacher) [2092073 2054855]
- gfs2: buffered write prefaulting (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Align read and write chunks to the page cache (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Pull return value test out of should_fault_in_pages (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Clean up use of fault_in_iov_iter_{read,write}able (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Variable rename (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher) [2092073 2054855]
- iomap: iomap_write_end cleanup (Andreas Gruenbacher) [2092073 2054855]
- iomap: iomap_write_failed fix (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Don't re-check for write past EOF unnecessarily (Andreas Gruenbacher) [2092073 2054855]
- gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher) [2092073 2054855]
- fs/iomap: Fix buffered write page prefaulting (Andreas Gruenbacher) [2092073 2054855]
- generic_perform_write()/iomap_write_actor(): saner logics for short copy (Andreas Gruenbacher) [2092073 2054855]
- iomap: Convert iomap_write_end types (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Make sure not to return short direct writes (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Remove dead code in gfs2_file_read_iter (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Minor retry logic cleanup (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Fix should_fault_in_pages() logic (Andreas Gruenbacher) [2092073 2054855]
- mm: gup: make fault_in_safe_writeable() use fixup_user_fault() (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Initialize gh_error in gfs2_glock_nq (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Switch lock order of inode and iopen glock (Andreas Gruenbacher) [2092073 2054855]
- gfs2: cancel timed-out glock requests (Andreas Gruenbacher) [2092073 2054855]
- gfs2: Expect -EBUSY after canceling dlm locking requests (Andreas Gruenbacher) [2092073 2054855]
- gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher) [2092073 2054855]
- gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) [2092073 2054855]
- net: openvswitch: don't send internal clone attribute to the userspace. (Antoine Tenart) [2097796 2085509]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; [4.18.0-372.16.1.rt7.173.el8_6]" date="1656417600">- [rt] build kernel-rt-4.18.0-372.16.1.rt7.173.el8_6 [2098244]
- x86/platform/uv: Log gap hole end size (Frank Ramsay) [2084645 2074098]
- x86/platform/uv: Update TSC sync state for UV5 (Frank Ramsay) [2084645 2074098]
- x86/platform/uv: Update NMI Handler for UV5 (Frank Ramsay) [2084645 2074098]
- x86/platform/uv: Remove unused variable in UV5 NMI handler (Frank Ramsay) [2084645 2074098]
- blk-mq: fix blk_mq_flush_plug_list (Ming Lei) [2096931 2088397]
- sched/pelt: Fix attach_entity_load_avg() corner case (Phil Auld) [2096305 2056383]
- [rt] Update RTBZ to 8.6.z1 (Chris White)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.17.1.rt7.174.el8_6]" date="1657627200">- [rt] build kernel-rt-4.18.0-372.17.1.rt7.174.el8_6 [2098244]
- tcp: drop the hash_32() part from the index calculation (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: increase source port perturb table to 2^16 (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: dynamically allocate the perturb table used by source ports (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: add small random increments to the source port (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: resalt the secret every 10 seconds (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: use different parts of the port_offset for index and offset (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- secure_seq: use the 64 bits of the siphash for port offset calculation (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: add some entropy in __inet_hash_connect() (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: change source port randomizarion at connect() time (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- hrtimer: Unbreak hrtimer_force_reprogram() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Use raw_cpu_ptr() in clock_was_set() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Avoid more SMP function calls in clock_was_set() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Avoid unnecessary SMP function calls in clock_was_set() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Add bases argument to clock_was_set() (Fernando Pacheco) [2090484 2071776]
- time/timekeeping: Avoid invoking clock_was_set() twice (Fernando Pacheco) [2090484 2071776]
- timekeeping: Distangle resume and clock-was-set events (Fernando Pacheco) [2090484 2071776]
- timerfd: Provide timerfd_resume() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Force clock_was_set() handling for the HIGHRES=n, NOHZ=y case (Fernando Pacheco) [2090484 2071776]
- hrtimer: Ensure timerfd notification for HIGHRES=n (Fernando Pacheco) [2090484 2071776]
- hrtimer: Consolidate reprogramming code (Fernando Pacheco) [2090484 2071776]
- hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Update softirq_expires_next correctly after __hrtimer_get_next_event() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Annotate lockless access to timer-&gt;state (Fernando Pacheco) [2090484 2071776]
- mm, compaction: fast_find_migrateblock() should return pfn in the target zone (Rafael Aquini) [2100529 2067130]
- lib/sbitmap: fix sb-&gt;map leak (Ming Lei) [2100254 2093549]
- scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map() (Ewan D. Milne) [2100254 2071831]
- lib/sbitmap: allocate sb-&gt;map via kvzalloc_node (Ewan D. Milne) [2100254 2071831]
- mm: move kvmalloc-related functions to slab.h (Ewan D. Milne) [2100254 2071831]
- scsi: core: Reallocate device's budget map on queue depth change (Ewan D. Milne) [2100254 2071831]
- scsi: core: Fix scsi_device_max_queue_depth() (Ewan D. Milne) [2100254 2071831]
- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2092990 2092991] {CVE-2022-32250}
- audit: improve audit queue handling when "audit=1" on cmdline (Richard Guy Briggs) [2095434 2035123]
- audit: improve robustness of the audit queue handling (Richard Guy Briggs) [2095434 2035123]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.18.1.rt7.175.el8_6]" date="1657800000">- [rt] build kernel-rt-4.18.0-372.18.1.rt7.175.el8_6 [2107215]
- redhat: flesh out rpminspect config file (Jarod Wilson)
- powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" (Steve Best) [2100150]
- vdpa: mlx5: synchronize driver status with CVQ (Jason Wang) [2093416]
- vdpa: mlx5: prevent cvq work from hogging CPU (Jason Wang) [2093416]
- vdpa/mlx5: Avoid processing works if workqueue was destroyed (Cindy Lu) [2093416]
- cifs: fix potential double free during failed mount (Ronnie Sahlberg) [2102251]
- [rt] Update RTBZ to 8.6.z1 (Chris White)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.19.1.rt7.176.el8_6]" date="1658145600">- [rt] build kernel-rt-4.18.0-372.19.1.rt7.176.el8_6 [2107215]
- net/mlx5: CT: Fix header-rewrite re-use for tupels (Amir Tzin) [2104013 2101162]
- net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (Amir Tzin) [2104012 2100474]
- netfilter: flowtable: fix TCP flow teardown (Florian Westphal) [2104002 2088234]
- netfilter: conntrack: annotate data-races around ct-&gt;timeout (Florian Westphal) [2104002 2088234]
- netfilter: conntrack: initialize ct-&gt;timeout (Florian Westphal) [2104002 2088234]
- net/sched: act_police: more accurate MTU policing (Davide Caratti) [2102333 2100893]
- bpf: Fix request_sock leak in sk lookup helpers (Antoine Tenart) [2104670 2085313]
- rt: update the authentication scheme for the bugzilla script (Luis Claudio R. Goncalves)</changelog>
</package>
<package pkgid="52234a670cc42be6181737908bdd6e9d2c8b7438f1d78c6630c292ad19fe2483" name="kernel-rt" arch="src">
  <version epoch="0" ver="4.18.0" rel="372.26.1.rt7.183.el8_6"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.17.1.rt7.174.el8_6]" date="1657627200">- [rt] build kernel-rt-4.18.0-372.17.1.rt7.174.el8_6 [2098244]
- tcp: drop the hash_32() part from the index calculation (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: increase source port perturb table to 2^16 (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: dynamically allocate the perturb table used by source ports (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: add small random increments to the source port (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: resalt the secret every 10 seconds (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: use different parts of the port_offset for index and offset (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- secure_seq: use the 64 bits of the siphash for port offset calculation (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: add some entropy in __inet_hash_connect() (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- tcp: change source port randomizarion at connect() time (Guillaume Nault) [2087131 2064883] {CVE-2022-1012}
- hrtimer: Unbreak hrtimer_force_reprogram() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Use raw_cpu_ptr() in clock_was_set() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Avoid more SMP function calls in clock_was_set() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Avoid unnecessary SMP function calls in clock_was_set() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Add bases argument to clock_was_set() (Fernando Pacheco) [2090484 2071776]
- time/timekeeping: Avoid invoking clock_was_set() twice (Fernando Pacheco) [2090484 2071776]
- timekeeping: Distangle resume and clock-was-set events (Fernando Pacheco) [2090484 2071776]
- timerfd: Provide timerfd_resume() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Force clock_was_set() handling for the HIGHRES=n, NOHZ=y case (Fernando Pacheco) [2090484 2071776]
- hrtimer: Ensure timerfd notification for HIGHRES=n (Fernando Pacheco) [2090484 2071776]
- hrtimer: Consolidate reprogramming code (Fernando Pacheco) [2090484 2071776]
- hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Update softirq_expires_next correctly after __hrtimer_get_next_event() (Fernando Pacheco) [2090484 2071776]
- hrtimer: Annotate lockless access to timer-&gt;state (Fernando Pacheco) [2090484 2071776]
- mm, compaction: fast_find_migrateblock() should return pfn in the target zone (Rafael Aquini) [2100529 2067130]
- lib/sbitmap: fix sb-&gt;map leak (Ming Lei) [2100254 2093549]
- scsi: core: Fix sbitmap depth in scsi_realloc_sdev_budget_map() (Ewan D. Milne) [2100254 2071831]
- lib/sbitmap: allocate sb-&gt;map via kvzalloc_node (Ewan D. Milne) [2100254 2071831]
- mm: move kvmalloc-related functions to slab.h (Ewan D. Milne) [2100254 2071831]
- scsi: core: Reallocate device's budget map on queue depth change (Ewan D. Milne) [2100254 2071831]
- scsi: core: Fix scsi_device_max_queue_depth() (Ewan D. Milne) [2100254 2071831]
- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2092990 2092991] {CVE-2022-32250}
- audit: improve audit queue handling when "audit=1" on cmdline (Richard Guy Briggs) [2095434 2035123]
- audit: improve robustness of the audit queue handling (Richard Guy Briggs) [2095434 2035123]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.18.1.rt7.175.el8_6]" date="1657800000">- [rt] build kernel-rt-4.18.0-372.18.1.rt7.175.el8_6 [2107215]
- redhat: flesh out rpminspect config file (Jarod Wilson)
- powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" (Steve Best) [2100150]
- vdpa: mlx5: synchronize driver status with CVQ (Jason Wang) [2093416]
- vdpa: mlx5: prevent cvq work from hogging CPU (Jason Wang) [2093416]
- vdpa/mlx5: Avoid processing works if workqueue was destroyed (Cindy Lu) [2093416]
- cifs: fix potential double free during failed mount (Ronnie Sahlberg) [2102251]
- [rt] Update RTBZ to 8.6.z1 (Chris White)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.19.1.rt7.176.el8_6]" date="1658145600">- [rt] build kernel-rt-4.18.0-372.19.1.rt7.176.el8_6 [2107215]
- net/mlx5: CT: Fix header-rewrite re-use for tupels (Amir Tzin) [2104013 2101162]
- net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (Amir Tzin) [2104012 2100474]
- netfilter: flowtable: fix TCP flow teardown (Florian Westphal) [2104002 2088234]
- netfilter: conntrack: annotate data-races around ct-&gt;timeout (Florian Westphal) [2104002 2088234]
- netfilter: conntrack: initialize ct-&gt;timeout (Florian Westphal) [2104002 2088234]
- net/sched: act_police: more accurate MTU policing (Davide Caratti) [2102333 2100893]
- bpf: Fix request_sock leak in sk lookup helpers (Antoine Tenart) [2104670 2085313]
- rt: update the authentication scheme for the bugzilla script (Luis Claudio R. Goncalves)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.20.1.rt7.177.el8_6]" date="1658923200">- [rt] build kernel-rt-4.18.0-372.20.1.rt7.177.el8_6 [2111112]
- powerpc/pseries: Fix use after free in remove_phb_dynamic() (Steve Best) [2081250 2073707]
- mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (Íñigo Huguet) [2101684 2096758]
- mt76: mt7921e: fix possible probe failure after reboot (Íñigo Huguet) [2095654 2078877]
- x86/apic/vector: Fix ordering in vector assignment (Frank Ramsay) [2084646 2076607]
- [rt] Update RTBZ to 8.6.z3 (Chris White)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.21.1.rt7.178.el8_6]" date="1659528000">- [rt] build kernel-rt-4.18.0-372.21.1.rt7.178.el8_6 [2111112]
- KVM: x86/mmu: Don't advance iterator after restart due to yielding (Nico Pache) [2081013 2058907]
- RHEL-only: KVM: selftests: Fix AArch64 compilation (Paul Lai) [2107655 2071997]
- x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave) (Paul Lai) [2107652 2092066]
- KVM: x86: Use ERR_PTR_USR() to return -EFAULT as a __user pointer (Paul Lai) [2088288 2074679]
- KVM: x86: add system attribute to retrieve full set of supported xsave states (Paul Lai) [2088288 2074679]
- KVM: x86: Add a helper to retrieve userspace address from kvm_device_attr (Paul Lai) [2088288 2074679]
- tools: arch: x86: pull in pvclock headers (Paul Lai) [2088288 2074679]
- KVM: x86: Expose TSC offset controls to userspace (Paul Lai) [2088288 2074679]
- KVM: x86: Refactor tsc synchronization code (Paul Lai) [2088288 2074679]
- selftests: kvm: move vm_xsave_req_perm call to amx_test (Paul Lai) [2088288 2074679]
- RHEL-only: KVM: selftests: Remove unused modes (Andrew Jones) [2107655 2071997]
- tools headers UAPI: Sync linux/kvm.h with the kernel sources (Paul Lai) [2088287 1918929]
- kvm: selftests: sync uapi/linux/kvm.h with Linux header (Paul Lai) [2088287 1918929]
- kvm: selftests: conditionally build vm_xsave_req_perm() (Paul Lai) [2088287 1918929]
- x86/kvm/fpu: Remove kvm_vcpu_arch.guest_supported_xcr0 (Paul Lai) [2088287 1918929]
- x86/kvm/fpu: Limit guest user_xfeatures to supported bits of XCR0 (Paul Lai) [2088287 1918929]
- KVM: x86/cpuid: Exclude unpermitted xfeatures sizes at KVM_GET_SUPPORTED_CPUID (Paul Lai) [2088287 1918929]
- KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime() (Paul Lai) [2088287 1918929]
- KVM: x86/cpuid: Clear XFD for component i if the base feature is missing (Paul Lai) [2088287 1918929]
- KVM: x86: Do runtime CPUID update before updating vcpu-&gt;arch.cpuid_entries (Paul Lai) [2088287 1918929]
- x86/fpu: Fix inline prefix warnings (Paul Lai) [2088287 1918929]
- selftest: kvm: Add amx selftest (Paul Lai) [2088287 1918929]
- selftest: kvm: Move struct kvm_x86_state to header (Paul Lai) [2088287 1918929]
- selftest: kvm: Reorder vcpu_load_state steps for AMX (Paul Lai) [2088287 1918929]
- kvm: x86: Disable interception for IA32_XFD on demand (Paul Lai) [2088287 1918929]
- x86/fpu: Provide fpu_sync_guest_vmexit_xfd_state() (Paul Lai) [2088287 1918929]
- kvm: selftests: Add support for KVM_CAP_XSAVE2 (Paul Lai) [2088287 1918929]
- kvm: x86: Add support for getting/setting expanded xstate buffer (Paul Lai) [2088287 1918929]
- x86/fpu: Add uabi_size to guest_fpu (Paul Lai) [2088287 1918929]
- kvm: x86: Add CPUID support for Intel AMX (Paul Lai) [2088287 1918929]
- kvm: x86: Add XCR0 support for Intel AMX (Paul Lai) [2088287 1918929]
- kvm: x86: Disable RDMSR interception of IA32_XFD_ERR (Paul Lai) [2088287 1918929]
- kvm: x86: Emulate IA32_XFD_ERR for guest (Paul Lai) [2088287 1918929]
- kvm: x86: Intercept #NM for saving IA32_XFD_ERR (Paul Lai) [2088287 1918929]
- x86/fpu: Prepare xfd_err in struct fpu_guest (Paul Lai) [2088287 1918929]
- kvm: x86: Add emulation for IA32_XFD (Paul Lai) [2088287 1918929]
- x86/fpu: Provide fpu_update_guest_xfd() for IA32_XFD emulation (Paul Lai) [2088287 1918929]
- kvm: x86: Enable dynamic xfeatures at KVM_SET_CPUID2 (Paul Lai) [2088287 1918929]
- x86/fpu: Provide fpu_enable_guest_xfd_features() for KVM (Paul Lai) [2088287 1918929]
- x86/fpu: Add guest support to xfd_enable_feature() (Paul Lai) [2088287 1918929]
- x86/fpu: Make XFD initialization in __fpstate_reset() a function argument (Paul Lai) [2088287 1918929]
- kvm: x86: Exclude unpermitted xfeatures at KVM_GET_SUPPORTED_CPUID (Paul Lai) [2088287 1918929]
- kvm: x86: Fix xstate_required_size() to follow XSTATE alignment rule (Paul Lai) [2088287 1918929]
- x86/fpu: Prepare guest FPU for dynamically enabled FPU features (Paul Lai) [2088287 1918929]
- x86/fpu: Extend fpu_xstate_prctl() with guest permissions (Paul Lai) [2088287 1918929]
- kvm: selftests: move ucall declarations into ucall_common.h (Paul Lai) [2088287 1918929]
- kvm: selftests: move base kvm_util.h declarations to kvm_util_base.h (Paul Lai) [2088287 1918929]
- cpuid: kvm_find_kvm_cpuid_features() should be declared 'static' (Paul Lai) [2088287 1918929]
- KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES (Paul Lai) [2088287 1918929]
- KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows (Paul Lai) [2088287 1918929]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Andrew Jones) [2107655 2071997]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.22.1.rt7.179.el8_6]" date="1659700800">- [rt] build kernel-rt-4.18.0-372.22.1.rt7.179.el8_6 [2111112]
- mm/memcg: Free percpu stats memory of dying memcg's (Waiman Long) [2110039 2004037]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.23.1.rt7.180.el8_6]" date="1660132800">- [rt] build kernel-rt-4.18.0-372.23.1.rt7.180.el8_6 [2111112]
- drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (Phil Auld) [2112030 2089715]
- iavf: Fix issue with MAC address of VF shown as zero (Petr Oros) [2102360 2037938]
- iavf: Remove non-inclusive language (Petr Oros) [2102360 2037938]
- iavf: Fix incorrect use of assigning iavf_status to int (Petr Oros) [2102360 2037938]
- iavf: stop leaking iavf_status as "errno" values (Petr Oros) [2102360 2037938]
- iavf: Add usage of new virtchnl format to set default MAC (Petr Oros) [2102360 2037938]
- iavf: refactor processing of VLAN V2 capability message (Petr Oros) [2102360 2037938]
- iavf: Add support for 50G/100G in AIM algorithm (Petr Oros) [2102360 2037938]
- iavf: remove redundant ret variable (Petr Oros) [2102360 2037938]
- iavf: Remove useless DMA-32 fallback configuration (Petr Oros) [2102360 2037938]
- pidfd: fix a poll race when setting exit_state (Oleg Nesterov) [2107643 2044587]
- fork: fix pidfd_poll()'s return type (Oleg Nesterov) [2107643 2044587]
- pidfd: add polling support (Oleg Nesterov) [2107643 2044587]
- kabi: introduce the kabi_aux_*() helpers (Oleg Nesterov) [2107643 2044587]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.24.1.rt7.181.el8_6]" date="1660824000">- [rt] build kernel-rt-4.18.0-372.24.1.rt7.181.el8_6 [2111112]
- powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2092241 2016335]
- powerpc/prom: fix early DEBUG messages (Desnes A. Nunes do Rosario) [2092241 2016335]
- powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2092241 2016335]
- hv_balloon: rate-limit "Unhandled message" warning (Vitaly Kuznetsov) [2117050 2087270]
- powerpc: Enable execve syscall exit tracepoint (Steve Best) [2106662 2095521]
- ice: Fix VSIs unable to share unicast MAC (Petr Oros) [2111936 2080033]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.25.1.rt7.182.el8_6]" date="1661515200">- [rt] build kernel-rt-4.18.0-372.25.1.rt7.182.el8_6 [2111112]
- redhat: add missing ybz numbers to changelog (Augusto Caringi)
- block: limit request dispatch loop duration (Ming Lei) [2110772 2005082]
- NLM: Defend against file_lock changes after vfs_test_lock() (Benjamin Coddington) [2102099 2094884]
- x86/speculation/mmio: Print SMT warning (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/tsx: Disable TSX development mode at boot (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/tsx: Clear CPUID bits when TSX always force aborts (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/cpu: Move arch_smt_update() to a neutral place (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- ice: Ignore error message when setting same promiscuous mode (Petr Oros) [2118580 2100683]
- ice: Fix clearing of promisc mode with bridge over bond (Petr Oros) [2118580 2100683]
- ice: Ignore EEXIST when setting promisc mode (Petr Oros) [2118580 2100683]
- ice: Fix double VLAN error when entering promisc mode (Petr Oros) [2118580 2100683]
- ice: Fix promiscuous mode not turning off (Petr Oros) [2117026 2088787]
- ice: Introduce enabling promiscuous mode on multiple VF's (Petr Oros) [2117026 2088787]
- ice: do not setup vlan for loopback VSI (Petr Oros) [2118582 2103845]
- ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Petr Oros) [2118582 2103845]
- ice: Fix max VLANs available for VF (Petr Oros) [2118581 2112298]
- ice: change devlink code to read NVM in blocks (Petr Oros) [2118583 2093904]
- ice: Fix memory corruption in VF driver (Petr Oros) [2102359 2037937]
- ice: Fix queue config fail handling (Petr Oros) [2102359 2037937]
- ice: Sync VLAN filtering features for DVM (Petr Oros) [2102359 2037937]
- ice: Fix PTP TX timestamp offset calculation (Petr Oros) [2102359 2037937]
- ice: Fix interrupt moderation settings getting cleared (Petr Oros) [2102359 2037937]
- ice: fix possible under reporting of ethtool Tx and Rx statistics (Petr Oros) [2102359 2037937]
- ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (Petr Oros) [2102359 2037937]
- ice: add trace events for tx timestamps (Petr Oros) [2102359 2037937]
- ice: fix return value check in ice_gnss.c (Petr Oros) [2102359 2037937]
- ice: remove PF pointer from ice_check_vf_init (Petr Oros) [2102359 2037937]
- ice: introduce ice_virtchnl.c and ice_virtchnl.h (Petr Oros) [2102359 2037937]
- ice: cleanup long lines in ice_sriov.c (Petr Oros) [2102359 2037937]
- ice: introduce ICE_VF_RESET_LOCK flag (Petr Oros) [2102359 2037937]
- ice: introduce ICE_VF_RESET_NOTIFY flag (Petr Oros) [2102359 2037937]
- ice: convert ice_reset_vf to take flags (Petr Oros) [2102359 2037937]
- ice: convert ice_reset_vf to standard error codes (Petr Oros) [2102359 2037937]
- ice: make ice_reset_all_vfs void (Petr Oros) [2102359 2037937]
- ice: drop is_vflr parameter from ice_reset_all_vfs (Petr Oros) [2102359 2037937]
- ice: move reset functionality into ice_vf_lib.c (Petr Oros) [2102359 2037937]
- ice: fix a long line warning in ice_reset_vf (Petr Oros) [2102359 2037937]
- ice: introduce VF operations structure for reset flows (Petr Oros) [2102359 2037937]
- ice: fix incorrect dev_dbg print mistaking 'i' for vf-&gt;vf_id (Petr Oros) [2102359 2037937]
- ice: introduce ice_vf_lib.c, ice_vf_lib.h, and ice_vf_lib_private.h (Petr Oros) [2102359 2037937]
- ice: use ice_is_vf_trusted helper function (Petr Oros) [2102359 2037937]
- ice: log an error message when eswitch fails to configure (Petr Oros) [2102359 2037937]
- ice: cleanup error logging for ice_ena_vfs (Petr Oros) [2102359 2037937]
- ice: move ice_set_vf_port_vlan near other .ndo ops (Petr Oros) [2102359 2037937]
- ice: refactor spoofchk control code in ice_sriov.c (Petr Oros) [2102359 2037937]
- ice: rename ICE_MAX_VF_COUNT to avoid confusion (Petr Oros) [2102359 2037937]
- ice: remove unused definitions from ice_sriov.h (Petr Oros) [2102359 2037937]
- ice: convert vf-&gt;vc_ops to a const pointer (Petr Oros) [2102359 2037937]
- ice: remove circular header dependencies on ice.h (Petr Oros) [2102359 2037937]
- ice: rename ice_virtchnl_pf.c to ice_sriov.c (Petr Oros) [2102359 2037937]
- ice: rename ice_sriov.c to ice_vf_mbx.c (Petr Oros) [2102359 2037937]
- ice: Fix FV offset searching (Petr Oros) [2102359 2037937]
- ice: Add support for outer dest MAC for ADQ tunnels (Petr Oros) [2102359 2037937]
- ice: avoid XDP checks in ice_clean_tx_irq() (Petr Oros) [2102359 2037937]
- ice: change "can't set link" message to dbg level (Petr Oros) [2102359 2037937]
- ice: Add slow path offload stats on port representor in switchdev (Petr Oros) [2102359 2037937]
- ice: Add support for inner etype in switchdev (Petr Oros) [2102359 2037937]
- ice: convert VF storage to hash table with krefs and RCU (Petr Oros) [2102359 2037937]
- ice: introduce VF accessor functions (Petr Oros) [2102359 2037937]
- ice: factor VF variables to separate structure (Petr Oros) [2102359 2037937]
- ice: convert ice_for_each_vf to include VF entry iterator (Petr Oros) [2102359 2037937]
- ice: use ice_for_each_vf for iteration during removal (Petr Oros) [2102359 2037937]
- ice: remove checks in ice_vc_send_msg_to_vf (Petr Oros) [2102359 2037937]
- ice: move VFLR acknowledge during ice_free_vfs (Petr Oros) [2102359 2037937]
- ice: move clear_malvf call in ice_free_vfs (Petr Oros) [2102359 2037937]
- ice: pass num_vfs to ice_set_per_vf_res() (Petr Oros) [2102359 2037937]
- ice: store VF pointer instead of VF ID (Petr Oros) [2102359 2037937]
- ice: refactor unwind cleanup in eswitch mode (Petr Oros) [2102359 2037937]
- ice: add TTY for GNSS module for E810T device (Petr Oros) [2102359 2037937]
- ice: Simplify tracking status of RDMA support (Petr Oros) [2102359 2037937]
- ice: Add ability for PF admin to enable VF VLAN pruning (Petr Oros) [2102359 2037937]
- ice: Add support for 802.1ad port VLANs VF (Petr Oros) [2102359 2037937]
- ice: Advertise 802.1ad VLAN filtering and offloads for PF netdev (Petr Oros) [2102359 2037937]
- ice: Support configuring the device to Double VLAN Mode (Petr Oros) [2102359 2037937]
- ice: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Petr Oros) [2102359 2037937]
- ice: Add hot path support for 802.1Q and 802.1ad VLAN offloads (Petr Oros) [2102359 2037937]
- ice: Add outer_vlan_ops and VSI specific VLAN ops implementations (Petr Oros) [2102359 2037937]
- ice: Adjust naming for inner VLAN operations (Petr Oros) [2102359 2037937]
- ice: Use the proto argument for VLAN ops (Petr Oros) [2102359 2037937]
- ice: Refactor vf-&gt;port_vlan_info to use ice_vlan (Petr Oros) [2102359 2037937]
- ice: Introduce ice_vlan struct (Petr Oros) [2102359 2037937]
- ice: Add new VSI VLAN ops (Petr Oros) [2102359 2037937]
- ice: Add helper function for adding VLAN 0 (Petr Oros) [2102359 2037937]
- ice: Refactor spoofcheck configuration functions (Petr Oros) [2102359 2037937]
- Revert "ice: Allow to pass VLAN tagged packets to VF when port VLAN is configured" (Petr Oros) [2102359 2037937]
- Revert "ice: Do not enable VLAN pruning when spoofchk is enabled" (Petr Oros) [2102359 2037937]
- ice: Remove likely for napi_complete_done (Petr Oros) [2102359 2037937]
- ice: add support for DSCP QoS for IDC (Petr Oros) [2102359 2037937]
- ice: respect metadata on XSK Rx to skb (Petr Oros) [2102359 2037937]
- ice: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Petr Oros) [2102359 2037937]
- ice: respect metadata in legacy-rx/ice_construct_skb() (Petr Oros) [2102359 2037937]
- ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2102359 2037937]
- iavf: Fix VLAN_V2 addition/rejection (Petr Oros) [2118707 2115618]
- iavf: Fix deadlock in initialization (Petr Oros) [2118705 2054656]
- scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (Nilesh Javali) [2110768 2044160]
- sched/deadline: Fix BUG_ON condition for deboosted tasks (Phil Auld) [2117410 2111860]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.26.1.rt7.183.el8_6]" date="1661688000">- [rt] build kernel-rt-4.18.0-372.26.1.rt7.183.el8_6 [2111112]
- drm/amd/display: Ignore First MST Sideband Message Return Error (Mika Penttilä) [2109826 2089853]
- ASoC: SOF: topology: read back control data from DSP (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: Drop ctrl_type parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: control: Do not handle control notification with component type (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: sof-audio: Drop the `cmd` member from struct snd_sof_control (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: Drop ctrl_cmd parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: topology: Set control_data-&gt;cmd alongside scontrol-&gt;cmd (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: Drop ipc_cmd parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: ipc: Rename send parameter in snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (Vratislav Bendel) [2120776 2111491]
- platform/x86/intel: Fix 'rmmod pmt_telemetry' panic (Prarit Bhargava) [2091079 2080426]
- KVM: x86/mmu: make apf token non-zero to fix bug (Vitaly Kuznetsov) [2105340 2096201]
- iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (Jerry Snitselaar) [2112983 2095498]</changelog>
</package>
<package pkgid="aa4afd8600e67f706df6638eba178bd31f2d13a2318cb93943244b31c07a78a5" name="kernel-rt" arch="src">
  <version epoch="0" ver="4.18.0" rel="372.32.1.rt7.189.el8_6"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.23.1.rt7.180.el8_6]" date="1660132800">- [rt] build kernel-rt-4.18.0-372.23.1.rt7.180.el8_6 [2111112]
- drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (Phil Auld) [2112030 2089715]
- iavf: Fix issue with MAC address of VF shown as zero (Petr Oros) [2102360 2037938]
- iavf: Remove non-inclusive language (Petr Oros) [2102360 2037938]
- iavf: Fix incorrect use of assigning iavf_status to int (Petr Oros) [2102360 2037938]
- iavf: stop leaking iavf_status as "errno" values (Petr Oros) [2102360 2037938]
- iavf: Add usage of new virtchnl format to set default MAC (Petr Oros) [2102360 2037938]
- iavf: refactor processing of VLAN V2 capability message (Petr Oros) [2102360 2037938]
- iavf: Add support for 50G/100G in AIM algorithm (Petr Oros) [2102360 2037938]
- iavf: remove redundant ret variable (Petr Oros) [2102360 2037938]
- iavf: Remove useless DMA-32 fallback configuration (Petr Oros) [2102360 2037938]
- pidfd: fix a poll race when setting exit_state (Oleg Nesterov) [2107643 2044587]
- fork: fix pidfd_poll()'s return type (Oleg Nesterov) [2107643 2044587]
- pidfd: add polling support (Oleg Nesterov) [2107643 2044587]
- kabi: introduce the kabi_aux_*() helpers (Oleg Nesterov) [2107643 2044587]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.24.1.rt7.181.el8_6]" date="1660824000">- [rt] build kernel-rt-4.18.0-372.24.1.rt7.181.el8_6 [2111112]
- powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2092241 2016335]
- powerpc/prom: fix early DEBUG messages (Desnes A. Nunes do Rosario) [2092241 2016335]
- powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2092241 2016335]
- hv_balloon: rate-limit "Unhandled message" warning (Vitaly Kuznetsov) [2117050 2087270]
- powerpc: Enable execve syscall exit tracepoint (Steve Best) [2106662 2095521]
- ice: Fix VSIs unable to share unicast MAC (Petr Oros) [2111936 2080033]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.25.1.rt7.182.el8_6]" date="1661515200">- [rt] build kernel-rt-4.18.0-372.25.1.rt7.182.el8_6 [2111112]
- redhat: add missing ybz numbers to changelog (Augusto Caringi)
- block: limit request dispatch loop duration (Ming Lei) [2110772 2005082]
- NLM: Defend against file_lock changes after vfs_test_lock() (Benjamin Coddington) [2102099 2094884]
- x86/speculation/mmio: Print SMT warning (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/tsx: Disable TSX development mode at boot (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/tsx: Clear CPUID bits when TSX always force aborts (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/cpu: Move arch_smt_update() to a neutral place (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- ice: Ignore error message when setting same promiscuous mode (Petr Oros) [2118580 2100683]
- ice: Fix clearing of promisc mode with bridge over bond (Petr Oros) [2118580 2100683]
- ice: Ignore EEXIST when setting promisc mode (Petr Oros) [2118580 2100683]
- ice: Fix double VLAN error when entering promisc mode (Petr Oros) [2118580 2100683]
- ice: Fix promiscuous mode not turning off (Petr Oros) [2117026 2088787]
- ice: Introduce enabling promiscuous mode on multiple VF's (Petr Oros) [2117026 2088787]
- ice: do not setup vlan for loopback VSI (Petr Oros) [2118582 2103845]
- ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Petr Oros) [2118582 2103845]
- ice: Fix max VLANs available for VF (Petr Oros) [2118581 2112298]
- ice: change devlink code to read NVM in blocks (Petr Oros) [2118583 2093904]
- ice: Fix memory corruption in VF driver (Petr Oros) [2102359 2037937]
- ice: Fix queue config fail handling (Petr Oros) [2102359 2037937]
- ice: Sync VLAN filtering features for DVM (Petr Oros) [2102359 2037937]
- ice: Fix PTP TX timestamp offset calculation (Petr Oros) [2102359 2037937]
- ice: Fix interrupt moderation settings getting cleared (Petr Oros) [2102359 2037937]
- ice: fix possible under reporting of ethtool Tx and Rx statistics (Petr Oros) [2102359 2037937]
- ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (Petr Oros) [2102359 2037937]
- ice: add trace events for tx timestamps (Petr Oros) [2102359 2037937]
- ice: fix return value check in ice_gnss.c (Petr Oros) [2102359 2037937]
- ice: remove PF pointer from ice_check_vf_init (Petr Oros) [2102359 2037937]
- ice: introduce ice_virtchnl.c and ice_virtchnl.h (Petr Oros) [2102359 2037937]
- ice: cleanup long lines in ice_sriov.c (Petr Oros) [2102359 2037937]
- ice: introduce ICE_VF_RESET_LOCK flag (Petr Oros) [2102359 2037937]
- ice: introduce ICE_VF_RESET_NOTIFY flag (Petr Oros) [2102359 2037937]
- ice: convert ice_reset_vf to take flags (Petr Oros) [2102359 2037937]
- ice: convert ice_reset_vf to standard error codes (Petr Oros) [2102359 2037937]
- ice: make ice_reset_all_vfs void (Petr Oros) [2102359 2037937]
- ice: drop is_vflr parameter from ice_reset_all_vfs (Petr Oros) [2102359 2037937]
- ice: move reset functionality into ice_vf_lib.c (Petr Oros) [2102359 2037937]
- ice: fix a long line warning in ice_reset_vf (Petr Oros) [2102359 2037937]
- ice: introduce VF operations structure for reset flows (Petr Oros) [2102359 2037937]
- ice: fix incorrect dev_dbg print mistaking 'i' for vf-&gt;vf_id (Petr Oros) [2102359 2037937]
- ice: introduce ice_vf_lib.c, ice_vf_lib.h, and ice_vf_lib_private.h (Petr Oros) [2102359 2037937]
- ice: use ice_is_vf_trusted helper function (Petr Oros) [2102359 2037937]
- ice: log an error message when eswitch fails to configure (Petr Oros) [2102359 2037937]
- ice: cleanup error logging for ice_ena_vfs (Petr Oros) [2102359 2037937]
- ice: move ice_set_vf_port_vlan near other .ndo ops (Petr Oros) [2102359 2037937]
- ice: refactor spoofchk control code in ice_sriov.c (Petr Oros) [2102359 2037937]
- ice: rename ICE_MAX_VF_COUNT to avoid confusion (Petr Oros) [2102359 2037937]
- ice: remove unused definitions from ice_sriov.h (Petr Oros) [2102359 2037937]
- ice: convert vf-&gt;vc_ops to a const pointer (Petr Oros) [2102359 2037937]
- ice: remove circular header dependencies on ice.h (Petr Oros) [2102359 2037937]
- ice: rename ice_virtchnl_pf.c to ice_sriov.c (Petr Oros) [2102359 2037937]
- ice: rename ice_sriov.c to ice_vf_mbx.c (Petr Oros) [2102359 2037937]
- ice: Fix FV offset searching (Petr Oros) [2102359 2037937]
- ice: Add support for outer dest MAC for ADQ tunnels (Petr Oros) [2102359 2037937]
- ice: avoid XDP checks in ice_clean_tx_irq() (Petr Oros) [2102359 2037937]
- ice: change "can't set link" message to dbg level (Petr Oros) [2102359 2037937]
- ice: Add slow path offload stats on port representor in switchdev (Petr Oros) [2102359 2037937]
- ice: Add support for inner etype in switchdev (Petr Oros) [2102359 2037937]
- ice: convert VF storage to hash table with krefs and RCU (Petr Oros) [2102359 2037937]
- ice: introduce VF accessor functions (Petr Oros) [2102359 2037937]
- ice: factor VF variables to separate structure (Petr Oros) [2102359 2037937]
- ice: convert ice_for_each_vf to include VF entry iterator (Petr Oros) [2102359 2037937]
- ice: use ice_for_each_vf for iteration during removal (Petr Oros) [2102359 2037937]
- ice: remove checks in ice_vc_send_msg_to_vf (Petr Oros) [2102359 2037937]
- ice: move VFLR acknowledge during ice_free_vfs (Petr Oros) [2102359 2037937]
- ice: move clear_malvf call in ice_free_vfs (Petr Oros) [2102359 2037937]
- ice: pass num_vfs to ice_set_per_vf_res() (Petr Oros) [2102359 2037937]
- ice: store VF pointer instead of VF ID (Petr Oros) [2102359 2037937]
- ice: refactor unwind cleanup in eswitch mode (Petr Oros) [2102359 2037937]
- ice: add TTY for GNSS module for E810T device (Petr Oros) [2102359 2037937]
- ice: Simplify tracking status of RDMA support (Petr Oros) [2102359 2037937]
- ice: Add ability for PF admin to enable VF VLAN pruning (Petr Oros) [2102359 2037937]
- ice: Add support for 802.1ad port VLANs VF (Petr Oros) [2102359 2037937]
- ice: Advertise 802.1ad VLAN filtering and offloads for PF netdev (Petr Oros) [2102359 2037937]
- ice: Support configuring the device to Double VLAN Mode (Petr Oros) [2102359 2037937]
- ice: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Petr Oros) [2102359 2037937]
- ice: Add hot path support for 802.1Q and 802.1ad VLAN offloads (Petr Oros) [2102359 2037937]
- ice: Add outer_vlan_ops and VSI specific VLAN ops implementations (Petr Oros) [2102359 2037937]
- ice: Adjust naming for inner VLAN operations (Petr Oros) [2102359 2037937]
- ice: Use the proto argument for VLAN ops (Petr Oros) [2102359 2037937]
- ice: Refactor vf-&gt;port_vlan_info to use ice_vlan (Petr Oros) [2102359 2037937]
- ice: Introduce ice_vlan struct (Petr Oros) [2102359 2037937]
- ice: Add new VSI VLAN ops (Petr Oros) [2102359 2037937]
- ice: Add helper function for adding VLAN 0 (Petr Oros) [2102359 2037937]
- ice: Refactor spoofcheck configuration functions (Petr Oros) [2102359 2037937]
- Revert "ice: Allow to pass VLAN tagged packets to VF when port VLAN is configured" (Petr Oros) [2102359 2037937]
- Revert "ice: Do not enable VLAN pruning when spoofchk is enabled" (Petr Oros) [2102359 2037937]
- ice: Remove likely for napi_complete_done (Petr Oros) [2102359 2037937]
- ice: add support for DSCP QoS for IDC (Petr Oros) [2102359 2037937]
- ice: respect metadata on XSK Rx to skb (Petr Oros) [2102359 2037937]
- ice: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Petr Oros) [2102359 2037937]
- ice: respect metadata in legacy-rx/ice_construct_skb() (Petr Oros) [2102359 2037937]
- ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2102359 2037937]
- iavf: Fix VLAN_V2 addition/rejection (Petr Oros) [2118707 2115618]
- iavf: Fix deadlock in initialization (Petr Oros) [2118705 2054656]
- scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (Nilesh Javali) [2110768 2044160]
- sched/deadline: Fix BUG_ON condition for deboosted tasks (Phil Auld) [2117410 2111860]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.26.1.rt7.183.el8_6]" date="1661688000">- [rt] build kernel-rt-4.18.0-372.26.1.rt7.183.el8_6 [2111112]
- drm/amd/display: Ignore First MST Sideband Message Return Error (Mika Penttilä) [2109826 2089853]
- ASoC: SOF: topology: read back control data from DSP (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: Drop ctrl_type parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: control: Do not handle control notification with component type (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: sof-audio: Drop the `cmd` member from struct snd_sof_control (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: Drop ctrl_cmd parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: topology: Set control_data-&gt;cmd alongside scontrol-&gt;cmd (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: Drop ipc_cmd parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- ASoC: SOF: ipc: Rename send parameter in snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (Vratislav Bendel) [2120776 2111491]
- platform/x86/intel: Fix 'rmmod pmt_telemetry' panic (Prarit Bhargava) [2091079 2080426]
- KVM: x86/mmu: make apf token non-zero to fix bug (Vitaly Kuznetsov) [2105340 2096201]
- iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (Jerry Snitselaar) [2112983 2095498]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.27.1.rt7.184.el8_6]" date="1662638400">- [rt] build kernel-rt-4.18.0-372.27.1.rt7.184.el8_6 [2111112]
- [s390] s390/pci: add s390_iommu_aperture kernel parameter (Claudio Imbrenda) [2081324 2039181]
- ipv6: take care of disable_policy when restoring routes (Andrea Claudi) [2109971 2103894]
- net: openvswitch: fix parsing of nw_proto for IPv6 fragments (Eelco Chaudron) [2106703 2101537]
- scsi: ch: Make it possible to open a ch device multiple times again (Ewan D. Milne) [2115965 2108649]
- scsi: smartpqi: Fix DMA direction for RAID requests (Don Brace) [2112354 2101548]
- iommu/vt-d: Calculate mask for non-aligned flushes (Jerry Snitselaar) [2111692 2072179]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.28.1.rt7.185.el8_6]" date="1662638401">- [rt] build kernel-rt-4.18.0-372.28.1.rt7.185.el8_6 [2125396]
- powerpc/smp: Update cpu_core_map on all PowerPc systems (Diego Domingos) [2112820 2064104]
- iavf: Fix reset error handling (Petr Oros) [2120225 2119759]
- iavf: Fix NULL pointer dereference in iavf_get_link_ksettings (Petr Oros) [2120225 2119759]
- iavf: Fix adminq error handling (Petr Oros) [2120225 2119759]
- iavf: Fix missing state logs (Petr Oros) [2120225 2119759]
- scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown (Tomas Henzl) [2111140 2106413]
- s390/qeth: cache link_info for ethtool (Michal Schmidt) [2120197 2117098]
- nvme: fix RCU hole that allowed for endless looping in multipath round robin (Gopal Tiwari) [2106017 2078806]
- nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (Gopal Tiwari) [2106017 2078806]
- nvme: fix use after free when disconnecting a reconnecting ctrl (Gopal Tiwari) [2106017 2078806]
- nvme: only call synchronize_srcu when clearing current path (Gopal Tiwari) [2106017 2078806]
- nvme-multipath: revalidate paths during rescan (Gopal Tiwari) [2106017 2078806]
- scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() (Dick Kennedy) [2112103 2034425]</changelog>
  <changelog author="Luis Claudio R. Goncalves &lt;lgoncalv@redhat.com&gt; [4.18.0-372.29.1.rt7.186.el8_6]" date="1663761600">- [rt] build kernel-rt-4.18.0-372.29.1.rt7.186.el8_6 [2125396]
- mm/memcg: Fix using __this_cpu_add() in preemptible context (Prasad Pandit) [2122600]
- block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Ewan D. Milne) [2107624 2049196] {CVE-2022-0494}
- cpufreq: Specify default governor on command line (Prarit Bhargava) [2109996 2083766]
- cpufreq: Fix locking issues with governors (Prarit Bhargava) [2109996 2083766]
- cpufreq: Register governors at core_initcall (Prarit Bhargava) [2109996 2083766]
- net_sched: cls_route: remove from list when handle is 0 (Felix Maurer) [2121812 2116326] {CVE-2022-2588}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.30.1.rt7.187.el8_6]" date="1664366400">- [rt] build kernel-rt-4.18.0-372.30.1.rt7.187.el8_6 [2125396]
- af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Xin Long) [2107615 2075182] {CVE-2022-1353}
- SUNRPC: avoid race between mod_timer() and del_timer_sync() (Benjamin Coddington) [2126184 2104507]
- powerpc/fadump: print start of preserved area (Diego Domingos) [2107488 2075092]
- powerpc/fadump: align destination address to pagesize (Diego Domingos) [2107488 2075092]
- powerpc/fadump: fix PT_LOAD segment for boot memory area (Diego Domingos) [2107488 2075092]
- drm/amdgpu: vi: disable ASPM on Intel Alder Lake based systems (Michel Dänzer) [2091065 2066918]
- drm/amd: Use amdgpu_device_should_use_aspm on navi umd pstate switching (Michel Dänzer) [2091065 2066918]
- drm/amd: Refactor `amdgpu_aspm` to be evaluated per device (Michel Dänzer) [2091065 2066918]
- drm/amd: Check if ASPM is enabled from PCIe subsystem (Michel Dänzer) [2091065 2066918]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [4.18.0-372.31.1.rt7.188.el8_6]" date="1664539200">- [rt] build kernel-rt-4.18.0-372.31.1.rt7.188.el8_6 [2125396]
- ice: Allow operation with reduced device MSI-X (Petr Oros) [2126482 2102844]
- redhat: kernel depends on new linux-firmware (John Meneghini) [2120613 2044843]
- scsi: qedi: Use QEDI_MODE_NORMAL for error handling (John Meneghini) [2119847 2101760]
- qede: Reduce verbosity of ptp tx timestamp (John Meneghini) [2125477 2080655]
- qede: confirm skb is allocated before using (John Meneghini) [2120611 2040267]
- qed: fix ethtool register dump (John Meneghini) [2120611 2040267]
- scsi: qedf: Stop using the SCSI pointer (John Meneghini) [2120613 2044843]
- scsi: qedf: Change context reset messages to ratelimited (John Meneghini) [2120613 2044843]
- scsi: qedf: Fix refcount issue when LOGO is received during TMF (John Meneghini) [2120613 2044843]
- scsi: qedf: Add stag_work to all the vports (John Meneghini) [2120613 2044843]
- scsi: qedf: Fix potential dereference of NULL pointer (John Meneghini) [2120613 2044843]
- scsi: qedi: Remove redundant flush_workqueue() calls (John Meneghini) [2120612 2044837]
- scsi: qedi: Fix SYSFS_FLAG_FW_SEL_BOOT formatting (John Meneghini) [2120612 2044837]
- qed: remove unnecessary memset in qed_init_fw_funcs (John Meneghini) [2120611 2040267]
- qed: return status of qed_iov_get_link (John Meneghini) [2120611 2040267]
- net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() (John Meneghini) [2120611 2040267]
- qed: validate and restrict untrusted VFs vlan promisc mode (John Meneghini) [2120611 2040267]
- qed: display VF trust config (John Meneghini) [2120611 2040267]
- qed: prevent a fw assert during device shutdown (John Meneghini) [2120611 2040267]
- qed: use msleep() in qed_mcp_cmd() and add qed_mcp_cmd_nosleep() for udelay. (John Meneghini) [2120611 2040267]
- qed: Use dma_set_mask_and_coherent() and simplify code (John Meneghini) [2120611 2040267]
- qed*: esl priv flag support through ethtool (John Meneghini) [2120611 2040267]
- qed*: enhance tx timeout debug info (John Meneghini) [2120611 2040267]
- qede: validate non LSO skb length (John Meneghini) [2120611 2040267]
- qed: Enhance rammod debug prints to provide pretty details (John Meneghini) [2120611 2040267]
- net: qed: fix the array may be out of bound (John Meneghini) [2120611 2040267]
- qed: Use the bitmap API to simplify some functions (John Meneghini) [2120611 2040267]
- RDMA/qed: Use helper function to set GUIDs (John Meneghini) [2120611 2040267]
- net: qed_dev: fix check of true !rc expression (John Meneghini) [2120611 2040267]
- net: qed_ptp: fix check of true !rc expression (John Meneghini) [2120611 2040267]
- RDMA/qedr: Remove unsupported qedr_resize_cq callback (John Meneghini) [2120611 2040267]
- qed: Change the TCP common variable - "iscsi_ooo" (John Meneghini) [2120611 2040267]
- qed: Optimize the ll2 ooo flow (John Meneghini) [2120611 2040267]
- net: qed_debug: fix check of false (grc_param &lt; 0) expression (John Meneghini) [2120611 2040267]
- qed: Fix missing error code in qed_slowpath_start() (John Meneghini) [2120611 2040267]
- qed: Fix compilation for CONFIG_QED_SRIOV undefined scenario (John Meneghini) [2120611 2040267]
- qed: Initialize debug string array (John Meneghini) [2120611 2040267]
- qed: Fix spelling mistake "ctx_bsaed" -&gt; "ctx_based" (John Meneghini) [2120611 2040267]
- qed: fix ll2 establishment during load of RDMA driver (John Meneghini) [2120611 2040267]
- qed: Update the TCP active termination 2 MSL timer ("TIME_WAIT") (John Meneghini) [2120611 2040267]
- qed: Update TCP silly-window-syndrome timeout for iwarp, scsi (John Meneghini) [2120611 2040267]
- qed: Update debug related changes (John Meneghini) [2120611 2040267]
- qed: Add '_GTT' suffix to the IRO RAM macros (John Meneghini) [2120611 2040267]
- qed: Update FW init functions to support FW 8.59.1.0 (John Meneghini) [2120611 2040267]
- qed: Use enum as per FW 8.59.1.0 in qed_iro_hsi.h (John Meneghini) [2120611 2040267]
- qed: Update qed_hsi.h for fw 8.59.1.0 (John Meneghini) [2120611 2040267]
- qed: Update qed_mfw_hsi.h for FW ver 8.59.1.0 (John Meneghini) [2120611 2040267]
- qed: Update common_hsi for FW ver 8.59.1.0 (John Meneghini) [2120611 2040267]
- qed: Split huge qed_hsi.h header file (John Meneghini) [2120611 2040267]
- qed: Remove e4_ and _e4 from FW HSI (John Meneghini) [2120611 2040267]
- qed: Fix kernel-doc warnings (John Meneghini) [2120611 2040267]
- qed: Don't ignore devlink allocation failures (John Meneghini) [2120611 2040267]
- qed: Improve the stack space of filter_config() (John Meneghini) [2120611 2040267]
- RDMA/qedr: Move variables reset to qedr_set_common_qp_params() (John Meneghini) [2120611 2040267]
- RDMA/qedr: Fix reporting max_{send/recv}_wr attrs (John Meneghini) [2119122 2051524]</changelog>
  <changelog author="Chris White &lt;chwhite@redhat.com&gt; [4.18.0-372.32.1.rt7.189.el8_6]" date="1665144000">- [rt] build kernel-rt-4.18.0-372.32.1.rt7.189.el8_6 [2125396]
- net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131936 2130839]
- net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131936 2130839]
- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2129923 2123508]
- drm/nouveau: recognise GA103 (Karol Herbst) [2127122 1923125]
- net: fix a memleak when uncloning an skb dst and its metadata (Hangbin Liu) [2131255 2068355]
- net: do not keep the dst cache when uncloning an skb dst and its metadata (Hangbin Liu) [2131255 2068355]
- intel_idle: Fix false positive RCU splats due to incorrect hardirqs state (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/spec_ctrl: Enable RHEL only ibrs_always &amp; retpoline,ibrs_user spectre_v2 options (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- efi/x86: use naked RET on mixed mode call wrapper (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Remove apostrophe typo (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/entry: Remove UNTRAIN_RET from native_irq_return_ldt (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Mark retbleed_strings static (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Disable RRSBA behavior (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kexec: Disable RET on kexec (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- redhat/configs: Add new mitigation configs for RetBleed CVEs (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/retbleed: Add fine grained Kconfig knobs (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/cpu/amd: Enumerate BTC_NO (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/common: Stamp out the stepping madness (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: VMX: Prevent RSB underflow before vmenter (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Fill RSB on vmexit for IBRS (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: VMX: Fix IBRS handling after vmexit (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: VMX: Convert launched argument to flags (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: VMX: Flatten __vmx_vcpu_run() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Remove x86_spec_ctrl_mask (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Fix SPEC_CTRL write on SMT state change (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Fix firmware entry SPEC_CTRL handling (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/cpu/amd: Add Spectral Chicken (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Do IBPB fallback check only once (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Add retbleed=ibpb (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Update Retpoline validation (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- intel_idle: Disable IBRS during long idle (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Report Intel retbleed vulnerability (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Optimize SPEC_CTRL MSR writes (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/entry: Add kernel IBRS implementation (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Enable STIBP for JMP2RET (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Add AMD retbleed= boot parameter (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bugs: Report AMD retbleed vulnerability (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Add magic AMD return-thunk (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Use return-thunk in asm code (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/sev: Avoid using __x86_return_thunk (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kvm: Fix SETcc emulation for return thunks (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/bpf: Use alternative RET encoding (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Use alternative RET encoding (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86,objtool: Create .return_sites (Josh Poimboeuf) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Undo return-thunk damage (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/retpoline: Use -mfunction-return (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/retpoline: Swizzle retpoline thunk (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/retpoline: Cleanup some #ifdefery (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kvm/vmx: Make noinstr clean (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- arch/x86/boot/compressed: Add -D__DISABLE_EXPORTS to kbuild flags (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: (Ab)use __DISABLE_EXPORTS to disable RETHUNK in real mode (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/entry: Remove skip_r11rcx (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation/srbds: Do not try to turn mitigation off when not supported (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/module: Fix the paravirt vs alternative order (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Add straight-line-speculation mitigation (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Prepare inline-asm for straight-line-speculation (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Prepare asm files for straight-line-speculation (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Move RETPOLINE*_CFLAGS to arch Makefile (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- Makefile: remove stale cc-option checks (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- tools headers: Remove broken definition of __LITTLE_ENDIAN (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Add insn_decode_kernel() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- tools/insn: Restore the relative include paths for cross building (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternative: Use insn_decode() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/insn: Add an insn_decode() API (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/insn: Rename insn_decode() to insn_decode_from_regs() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/paravirt: Add new features for paravirt patching (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternative: Support not-feature (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternative: Merge include files (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Fix error handling for STD/CLD warnings (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternatives: Teach text_poke_bp() to emulate RET (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Have ftrace trampolines turn read-only at the end of system boot up (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation: Change FILL_RETURN_BUFFER to work with objtool (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Add support for intra-function calls (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Rework allocating stack_ops on decode (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Better handle IRET (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Support multiple stack_op per instruction (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Make BP scratch register warning more robust (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kexec: Make relocate_kernel_64.S objtool clean (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Introduce validate_return() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- Makefile: disallow data races on gcc-10 as well (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Improve call destination function detection (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternatives: Implement a better poke_int3_handler() completion scheme (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- lib/: fix Kconfig indentation (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternatives: Use INT3_INSN_SIZE (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kprobes: Fix ordering while text-patching (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/kprobes: Convert to text-patching.h (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternative: Shrink text_poke_loc (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternative: Remove text_poke_loc::len (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Use text_gen_insn() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternative: Add text_opcode_size() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Use text_poke() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Use vmalloc special flag (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Explicitly include vmalloc.h for set_vm_flush_reset_perms() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternatives: Add and use text_gen_insn() helper (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternatives, jump_label: Provide better text_poke() batching interface (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/asm: Annotate relocate_kernel_{32,64}.c (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: kprobes: Prohibit probing on instruction which has emulate prefix (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86: Correct misc typos (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/speculation/mds: Apply more accurate check on hypervisor platform (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Convert insn type to enum (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Track original function across branches (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Rename elf_open() to prevent conflict with libelf from elftoolchain (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Make enable parameter bool where applicable (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Fix function fallthrough detection (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/paravirt: Detect over-sized patching bugs in paravirt_patch_call() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/cpu/amd: Exclude 32bit only assembler from 64bit build (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/asm: Mark all top level asm statements as .text (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/cpu/bugs: Use __initconst for 'const' init data (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Add Direction Flag validation (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- objtool: Rewrite add_ignores() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/nospec, objtool: Introduce ANNOTATE_IGNORE_ALTERNATIVE (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Fix warning and considate ftrace_jmp_replace() and ftrace_call_replace() (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- kbuild: Disable extra debugging info in .s output (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/CPU/AMD: Set the CPB bit unconditionally on F17h (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/alternatives: Print containing function (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/ftrace: Do not call function graph from dynamic trampolines (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- ftrace: Create new ftrace_internal.h header (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- kprobes/x86: Fix instruction patching corruption when copying more than one RIP-relative instruction (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- tracing/Makefile: Fix handling redefinition of CC_FLAGS_FTRACE (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/paravirt: Remove unused paravirt bits (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/paravirt: Remove clobbers parameter from paravirt patch functions (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/paravirt: Make paravirt_patch_call() and paravirt_patch_jmp() static (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- ftrace: Remove unused pointer ftrace_swapper_pid (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- x86/spec_ctrl: Temporarily remove RHEL specific IBRS code (Waiman Long) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- intel_idle: enable interrupts before C1 on Xeons (Steve Best) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (Vitaly Kuznetsov) [2103170 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
- atlantic: Fix issue in the pm resume flow. (Igor Russkikh) [2127845 2002395]
- atlantic: Fix driver resume flow. (Igor Russkikh) [2127845 2002395]
- net: atlantic: always deep reset on pm op, fixing up my null deref regression (Foggy Liu) [2124966 2039680]
- net: atlantic: invert deep par in pm functions, preventing null derefs (Foggy Liu) [2124966 2039680]</changelog>
</package>
<package pkgid="5e0c0de0661e948d936811adcf4b66803573a8c7c5e78b5a5c1470fc77686aaa" name="kronosnet" arch="src">
  <version epoch="0" ver="1.22" rel="2.el8_6"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-2" date="1557835200">add some covscan fixes
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.9-3" date="1558440000">Fix kronosnet-tests dependancies and add workaround for dwz crash
  Resolves: rhbz#1688880</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.10-1" date="1560340800">Rebase to 1.10 for ACL support
  Resolves: rhbz#1688880</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-2" date="1571227200">link: Fix memory corruption when too many up/down events are recorded
  Resolves: rhbz#1753517</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-3" date="1571227201">PMTUd: Fix MTU calculation when using crypto
  Resolves: rhbz#1736872
  host: Fix defrag buffer reclaim logic that could cause delivery
        of corrupted data
  ResolveS: rhbz#1761711</changelog>
  <changelog author="Fabio M. Di Nitto &lt;fdinitto@redhat.com&gt; - 1.10-4" date="1571313600">Disable fun_pmtud_crypto_test as it can take several hours to run
  Resolves: rhbz#1736872</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.15-1" date="1586952000">Rebase to 1.15
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.16-1" date="1588766400">Rebase to 1.16
  Resolves: rhbz#1796503</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.22-1" date="1631793600">Rebase to 1.22
  Resolves: rhbz#1999976

  * Wed Sep 23 2020 Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.18-1
  Rebase to 1.18
  Resolves: rhbz#1855301</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.22-2" date="1659528000">Fix "node randomly not rejoining cluster after a pcs cluster stop/start"
  Resolves: rhbz#2112924</changelog>
</package>
<package pkgid="fa1d1626b13b36571d2d92a63571b4c19d46c1cf90960c1a43f78c995c193b0b" name="libdnf" arch="src">
  <version epoch="0" ver="0.63.0" rel="8.1.el8_6"/>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.55.0-6" date="1613131200">- Fix removal step during modular enable in context part</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-1" date="1621425600">- Update to 0.62.0
- Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
- Support allow_vendor_change setting in dnf context API
- Add a new option module_obsoletes
- Add new API applyObsoletes() function to apply modular obsoletes
- Do not allow 1 as installonly_limit value (RhBug:1926261)
- Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
- Swdb: Add a method to get the current transaction
- [context,API] Functions for accessing main/global configuration options
- [context,API] Function for adding setopt
- Add getter for modular obsoletes from ModuleMetadata
- Add ModulePackage.getStaticContext() and getRequires()
- Fix modular queries with the new solver
- Fix: Fully set ssl in newHandle function
- [conf] Add options for working with certificates used with proxy
- Modify module NSVCA parsing - context definition (RhBug:1926771)
- [context] Fix: dnf_package_is_installonly (RhBug:1928056)
- Add getApplicablePackages to advisory and isApplicable to advisorymodule
- Keep isAdvisoryApplicable to preserve API
- [context] Support config file option "proxy_auth_method", defaults "any"
- Support main config file options "installonlypkgs" and "protected_packages". Changes behaviour of microdnf and PackageKit.
- Properly handle multiple collections in updateinfo.xml (RhBug:1804234)
- Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)
- Add new dnf_context_module_install() C API</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-2" date="1627387200">- Fix: dnf_context_module_install: memory leaks
- covscan: remove unused vars, mark private func static, return values
- DNF does not fail on non UTF-8 file names in a package</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-3" date="1636459200">-  Turn off strict validation of modulemd documents (RhBug:2004853,2007166,2007167)</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-4" date="1636459201">- Bump release number because of conflicting version of 8.5 build</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-5" date="1638187200">- Add unittest for setting up repo with empty keyfile (RhBug:1994614)</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-6" date="1641902400">- Add getLatestModules()</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-7" date="1642161600">- Rebuild with new release number</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.63.0-8" date="1647604800">- Update translations</changelog>
  <changelog author="Lukas Hrazky &lt;lhrazky@redhat.com&gt; - 0.63.0-8.1" date="1655294400">- advisory upgrade: filter out advPkgs with different arch</changelog>
</package>
<package pkgid="23cd0f7f21c99bd51d49d2e5820a25558719e16e5c1545e3ca9cf3228541e70b" name="libdnf" arch="src">
  <version epoch="0" ver="0.63.0" rel="8.2.el8_6"/>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-1" date="1621425600">- Update to 0.62.0
- Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
- Support allow_vendor_change setting in dnf context API
- Add a new option module_obsoletes
- Add new API applyObsoletes() function to apply modular obsoletes
- Do not allow 1 as installonly_limit value (RhBug:1926261)
- Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
- Swdb: Add a method to get the current transaction
- [context,API] Functions for accessing main/global configuration options
- [context,API] Function for adding setopt
- Add getter for modular obsoletes from ModuleMetadata
- Add ModulePackage.getStaticContext() and getRequires()
- Fix modular queries with the new solver
- Fix: Fully set ssl in newHandle function
- [conf] Add options for working with certificates used with proxy
- Modify module NSVCA parsing - context definition (RhBug:1926771)
- [context] Fix: dnf_package_is_installonly (RhBug:1928056)
- Add getApplicablePackages to advisory and isApplicable to advisorymodule
- Keep isAdvisoryApplicable to preserve API
- [context] Support config file option "proxy_auth_method", defaults "any"
- Support main config file options "installonlypkgs" and "protected_packages". Changes behaviour of microdnf and PackageKit.
- Properly handle multiple collections in updateinfo.xml (RhBug:1804234)
- Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)
- Add new dnf_context_module_install() C API</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-2" date="1627387200">- Fix: dnf_context_module_install: memory leaks
- covscan: remove unused vars, mark private func static, return values
- DNF does not fail on non UTF-8 file names in a package</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-3" date="1636459200">-  Turn off strict validation of modulemd documents (RhBug:2004853,2007166,2007167)</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-4" date="1636459201">- Bump release number because of conflicting version of 8.5 build</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-5" date="1638187200">- Add unittest for setting up repo with empty keyfile (RhBug:1994614)</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-6" date="1641902400">- Add getLatestModules()</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.63.0-7" date="1642161600">- Rebuild with new release number</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.63.0-8" date="1647604800">- Update translations</changelog>
  <changelog author="Lukas Hrazky &lt;lhrazky@redhat.com&gt; - 0.63.0-8.1" date="1655294400">- advisory upgrade: filter out advPkgs with different arch</changelog>
  <changelog author="Lukas Hrazky &lt;lhrazky@redhat.com&gt; - 0.63.0-8.2" date="1660737600">- Add obsoletes to filtering for advisory candidates</changelog>
</package>
<package pkgid="085f310d89ee505ea0c512340b7aaba97f612f2a4116cb0ee25b3bd4d7c5ea2d" name="libgcrypt" arch="src">
  <version epoch="0" ver="1.8.5" rel="7.el8_6"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.2-2" date="1517918400">- fix behavior when getrandom syscall is not present (#1542453)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-1" date="1528977600">- new upstream version 1.8.3</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-2" date="1531396800">- make only_urandom a default in non-presence of configuration file
- run the full FIPS selftests only when the library is called from
  application</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-3" date="1559563200">- add CMAC selftest for FIPS POST
- add continuous FIPS entropy test
- disable non-approved FIPS hashes in the enforced FIPS mode</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.3-4" date="1561377600">- improve the continuous FIPS entropy test</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-3" date="1588075200">- new upstream version 1.8.5
- AES performance improvements backported from master branch
- FIPS module is implicit with kernel FIPS flag
- always run the FIPS selftests if FIPS module is installed</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.8.5-4" date="1592222400">- add PBKDF2 selftest for FIPS POST</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-5" date="1620907200">- Performance enchancements for AES-GCM, CRC32 and SHA2 (#1855231)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-6" date="1624881600">- Fix for CVE-2021-40528 (#1971421)
- Enable HW optimizations in FIPS (#1976137)
- Performance enchancements for ChaCha20 and Poly1305 (#1855231)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.5-7" date="1649160000">- Fix CVE-2021-33560 (#2018525)</changelog>
</package>
<package pkgid="6b0fa9ade5aa4acacf0a0446be1ebc2519766fbdceff6bf0508a056cc8151647" name="libksba" arch="src">
  <version epoch="0" ver="1.3.5" rel="8.el8_6"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.3-3" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.3.4-1" date="1463054400">- new upstream release fixing minor security issues</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.3.5-1" date="1472472000">- new upstream release fixing minor security issues</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.3.5-2" date="1486036800">- mark license files as such in the file list (#1418513)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-3" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-4" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-5" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.3.5-6" date="1517659200">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-7" date="1518004800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.5-8" date="1666180800">- Fix for CVE-2022-3515 (#2135702)</changelog>
</package>
<package pkgid="e640abd0458a7bc7b7f037232081d800a9ac0b6e94a5b6881c2d237d581d63f2" name="libsemanage" arch="src">
  <version epoch="0" ver="2.9" rel="9.el8_6"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.8-5" date="1544097600">- genhomedircon - improve handling large groups</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-1" date="1552910400">- SELinux userspace 2.9 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-2" date="1573041600">- Add support for DCCP and SCTP protocols (#1563742)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-3" date="1593432000">- Fsync final files before rename (#1838762)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-4" date="1606046400">- genhomedircon: check usepasswd (rhbz#1871786)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-5" date="1608552000">- Revert "genhomedircon: check usepasswd" (rhbz#1871786)
- semanage.conf - improve usepasswd=False explanation (rhbz#1871786)
- semanage.conf - expand list of ignoredirs (rhbz#1871786)</changelog>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; - 2.9-6" date="1612180800">- sync filesystem with sandbox (#1913224)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-7" date="1645099200">- Trivial style fixes
- Free contents of modkey in semanage_direct_remove
- Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext()
- add missing include to boolean_record.c
- move module hashing into libsemanage
- move compressed file handling into a separate object
- clean up semanage_direct_commit() a bit
- optionally rebuild policy when modules are changed externally
- add command-line option to detect module changes (#2049186)</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-8" date="1645531200">- Bump release to get around OSCI issues</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 2.9-9" date="1665489600">- always write kernel policy when check_ext_changes is specified (#2129139)</changelog>
</package>
<package pkgid="ef8296f9ae2a2c083a75e5b6d4221d9bb049ab3427afb714a8a65b4aec33b66a" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.7" rel="13.el8_6.1"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.9.7-5" date="1533297600">- Fix some crashes under Python 3
- Conditionalize the python2 subpackage</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-6" date="1571918400">- Fix CVE-2018-9251 (#1565322)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-7" date="1571918401">- Fix CVE-2018-14404 (#1595989)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-8" date="1579521600">- Fix CVE-2019-19956 (#1793001)
- Fix CVE-2020-7595 (#1799786)
- Fix CVE-2019-20388 (#1810058)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-9" date="1603108800">- Fix CVE-2020-24977 (#1878252)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-10" date="1620388800">- Fix CVE-2021-3516 (#1956976)
- Fix CVE-2021-3517 (#1957001)
- Fix CVE-2021-3518 (#1957028)
- Fix CVE-2021-3537 (#1957284)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-11" date="1621425600">- Fix CVE-2021-3541 (#1958783)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-12" date="1645704000">- Fix CVE-2022-23308 (#2057664)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-13" date="1645704001">- Bump release (#2057664)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.7-13.1" date="1652356800">- Fix CVE-2022-29824 (#2082297)</changelog>
</package>
<package pkgid="5fef6d555e5a24f36cb2b024f09597fc9fc267d3ea8d3827eb5c98236b7bf5ef" name="linux-firmware" arch="src">
  <version epoch="0" ver="20220210" rel="108.git6342082c.el8_6"/>
  <changelog author="Frantisek Hrbata &lt;fhrbata@redhat.com&gt; - 20200619-99.git3890db36" date="1592568000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1847992)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201022-100.gitdae4b4cd" date="1604577600">- Update to latest upstream linux-firmware image for assorted updates
- ice: Pull Comms Market Segment Package (rhbz 1861491)
- ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201118-101.git7455a360" date="1607083200">- Update to latest upstream linux-firmware image for assorted updates
- Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20201218-102.git05789708" date="1611748800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1918613)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20210702-103.gitd79c2677" date="1625227200">- Update to latest upstream linux-firmware image for assorted updates
- Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
- Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
- Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
- Package the new iwl7260 ucode files and also the new binary format PNVM</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211007-104.git7a300505" date="1633608000">- Update to latest upstream linux-firmware image for assorted updates
- Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
- Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)</changelog>
  <changelog author="Bruno Meneguele &lt;bmeneg@redhat.com&gt; - 20211119-105.gitf5d51956" date="1638792000">- Update to latest upstream linux-firmware image for assorted updates
- Update to latest AMD GPU firmware (rhbz 1986660)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-106.git6342082c" date="1644494400">- Update to latest upstream linux-firmware image for assorted updates
- Include AMD GPU firmware fix (rhbz 2031172)
- Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220209-107.git6342082c" date="1648987200">- Support QCA WCN6856 v2.1 Module: WIFI firmware (rhbz 2007902)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20220210-108.git6342082c" date="1661947200">- Update Marvel QED firmware to version 8.59.1.0
- Fixes rhbz 2121415</changelog>
</package>
<package pkgid="6ca650005a64f29314677de72066f7ec777e24beb1b1a0c12b8f68134aace0cb" name="lvm2" arch="src">
  <version epoch="8" ver="2.03.14" rel="3.el8_6.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-6" date="1627992000">- Fix handling of pmspare by vgsplit, vgmerge and vgremove.
- Fix detection of active components of external origin volume.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-7" date="1628683200">- Fix missing executable flag on vdoimport.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-8" date="1629979200">- Rename vdoimport to lvm_import_vdo.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-9" date="1631880000">- Fix various lvm_import_vdo issues.
- Fix conversion to vdo when virtual size is above 2TiB.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.12-10" date="1632139200">- Fix incorrect memory free.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.14-1" date="1634731200">- Update to upstream version 2.03.14.
- See WHATS_NEW for list of changes.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.14-2" date="1639742400">- Revert autoactivation changes.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.14-3" date="1641297600">- Fix devices file and autoactivation related issues.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.14-3.el8_6.1" date="1656417600">- Fix filter not respecting blacklisted multipath devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.14-3.el8_6.2" date="1657627200">- Fix packaging.</changelog>
</package>
<package pkgid="ebe7a49f34590fd8a0851c02acf3f0c623f3b40b9a1b88250710fb7b1cd0dd57" name="microcode_ctl" arch="src">
  <version epoch="4" ver="20220207" rel="1.20220510.1.el8_6"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20201112-1" date="1605268800">- Update Intel CPU microcode to microcode-20201112 release (#1896912):
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20201112-2" date="1606824000">- Do not use "grep -q" in a pipe in check_caveats (#1902021).
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1902884).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20201112-3" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20210216-1" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1902884):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20210525-1" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962664, #1962714, #1962734, #1962680):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20210525-2" date="1623672000">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default (#1970611).
- Enable 06-5e-03 microcode update by default (#1897673).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20210608-1" date="1625486400">- Update Intel CPU microcode to microcode-20210608 release (#1921773):
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20220204-1" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, and CVE-2021-33120 (#1971906, #2049543,
    - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
    to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
    to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xea up
    to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xea up to 0xec;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xea up
    to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xea up
    to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xea up
    to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xea up
    to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xea up
    to 0xec;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20220207-1" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20220207-1.20220510.1" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2086742):
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
</package>
<package pkgid="e9b0a53bd7a31e6e2430735b07b40e2600069c5895455ca1bfc7eabc2e7d99ee" name="mokutil" arch="src">
  <version epoch="1" ver="0.3.0" rel="11.el8_6.1"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.3.0-3" date="1471435200">- Rebuild for newer efivar again.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.0-4" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.3.0-5" date="1499515200">- Rebuild for efivar-31-1.fc26
  Related: rhbz#1468841</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.0-6" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.0-7" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 1:0.3.0-8" date="1516449600">- Rebuilt for switch to libxcrypt</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.3.0-9" date="1532433600">- Minor obsoletes fix
- Import some fixes from upstream</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 0.3.0-10" date="1609329600">- Add mokutil code to consume data from /sys/firmware/efi/mok-variables/
  as well as attempting to consume numbered mok variables from efivarfs
  when mok-variables aren't present (pjones)
  Resolves: rhbz#1907418</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 0.3.0-11" date="1609848000">- Bump NVR for brew to build the package
  Related: rhbz##1907418</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.0-11.el8_6.1" date="1654084800">- Support listing sbat revocations and setting sbat policy
- Resolves: CVE-2022-28737</changelog>
</package>
<package pkgid="c29cfbcf8266b75207d293c83b46a2e7a268192f2e51a084306713e829895c2f" name="mtools" arch="src">
  <version epoch="0" ver="4.0.18" rel="15.el8_6"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.18-6" date="1405684800">- fix license handling</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.0.18-7" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Till Maas &lt;opensource@till.name&gt; - 4.0.18-8" date="1424520000">- Rebuilt for Fedora 23 Change
  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 4.0.18-9" date="1434542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.18-10" date="1454587200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.18-11" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.18-12" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.18-13" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.18-14" date="1518091200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 4.0.18-15" date="1654603200">- Add dependency on glibc-gconv-extra
  mtools need codepage 850, which was split from glibc into a subpackage.
  (Fedora bug #2021637, RHEL bug #2073842)</changelog>
</package>
<package pkgid="37ea67116064d0a9a516d64bce06bd03accbba996c583aaa284e4e933931d4fd" name="opencryptoki" arch="src">
  <version epoch="0" ver="3.17.0" rel="4.el8_6"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-1" date="1622548800">- Resolves: #1919223, rebase to 3.16.0
- Resolves: #1922195, Event Notification Support
- Resolves: #1959936, Soft token does not check if an EC key is valid
- Resolves: #1851104, import and export of secure key objects
- Resolves: #1851106, openCryptoki ep11 token: protected key support
- Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-2" date="1623412800">- Related: #1919223, add requirement on selinux-policy &gt;= 3.14.3-70 for using ipsec</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-3" date="1623758400">- Related: #1919223, add conditional requirement</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-4" date="1626436800">- Resolves: #1964304, Fix detection if pkcsslotd is still running</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-5" date="1629374400">- Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-1" date="1634644800">- Resolves: #1984993, rebase to 3.17.0
- Resolves: #1984870, openCryptoki key management tool</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-2" date="1636459200">- Related: #1984993, add missing p11sak_defined_attrs.conf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-3" date="1642420800">- Resolves: #2040677, API: Unlock GlobMutex if user and group check fails</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-4" date="1650024000">- Resolves: #2069592, Dilithium support not available</changelog>
</package>
<package pkgid="fe32c9f1cc8a47cecbeaf4d7d2d81ec68c2e0ef113f63f4e2fe1790280dc1369" name="opencryptoki" arch="src">
  <version epoch="0" ver="3.17.0" rel="5.el8_6"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-2" date="1623412800">- Related: #1919223, add requirement on selinux-policy &gt;= 3.14.3-70 for using ipsec</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-3" date="1623758400">- Related: #1919223, add conditional requirement</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-4" date="1626436800">- Resolves: #1964304, Fix detection if pkcsslotd is still running</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-5" date="1629374400">- Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.16.0-6" date="1631534400">- Fix: Could not open /run/lock/opencryptoki/LCK..APIlock</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-1" date="1634644800">- Resolves: #1984993, rebase to 3.17.0
- Resolves: #1984870, openCryptoki key management tool</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-2" date="1636459200">- Related: #1984993, add missing p11sak_defined_attrs.conf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-3" date="1642420800">- Resolves: #2040677, API: Unlock GlobMutex if user and group check fails</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-4" date="1650024000">- Resolves: #2069592, Dilithium support not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.17.0-5" date="1659528000">- Resolves: #2114806, EP11: Fix C_GetMechanismList returning CKR_BUFFER_TOO_SMALL</changelog>
</package>
<package pkgid="d17bd141b9a2f9c186734b96a56d2bdfff56e6c28212d80c900d3f1546df49bd" name="openssl" arch="src">
  <version epoch="1" ver="1.1.1k" rel="7.el8_6"/>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1g-14" date="1617019200">- Fix CVE-2021-3450 openssl: CA certificate check bypass with
  X509_V_FLAG_X509_STRICT
- Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing</changelog>
  <changelog author="Dmitry Belyavski &lt;dbelyavs@redhat.com&gt; 1.1.1g-15" date="1618574400">- Remove 2-key 3DES test from FIPS_selftest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; 1.1.1g-16" date="1619438400">- Use AI_ADDRCONFIG only when explicit host name is given
- Allow only curves defined in RFC 8446 in TLS 1.3</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.1.1k-1" date="1621857600">- Update to version 1.1.1k</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.1.1k-2" date="1624449600">- Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
- Using safe primes for FIPS DH self-test</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-3" date="1624536000">- Cleansup the peer point formats on renegotiation
- Resolves rhbz#1965362</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-4" date="1626436800">- Fixes bugs in s390x AES code.
- Uses the first detected address family if IPv6 is not available
- Reverts the changes in https://github.com/openssl/openssl/pull/13305
  as it introduces a regression if server has a DSA key pair, the handshake fails
  when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
  it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
  will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
  known - https://trac.nginx.org/nginx/ticket/2071#comment:1
  As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
  could early callback instead of servername callback.
- Resolves: rhbz#1978214
- Related: rhbz#1934534</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1:1.1.1k-5" date="1637064000">- Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005402</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-6" date="1648036800">- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067145</changelog>
  <changelog author="Clemens Lang &lt;cllang@redhat.com&gt; - 1:1.1.1k-7" date="1657022400">- Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
  Resolves: CVE-2022-2097
- Update expired certificates used in the testsuite
  Resolves: rhbz#2100554
- Fix CVE-2022-1292: openssl: c_rehash script allows command injection
  Resolves: rhbz#2090371
- Fix CVE-2022-2068: the c_rehash script allows command injection
  Resolves: rhbz#2098278</changelog>
</package>
<package pkgid="d2f75e51284c406d00049602d29280d0e5bdc8d1147bfc4836b4e83a955d9f95" name="pam" arch="src">
  <version epoch="0" ver="1.3.1" rel="16.el8_6.1"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.3.1-8" date="1576756800">- pam_motd: Document how to properly silence unwanted motd messages</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; 1.3.1-9" date="1587124800">- pam_usertype: new module to tell if uid is in login.defs ranges (#1810474)
- pam_tty_audit: if kernel audit is disabled return PAM_IGNORE (#1775357)</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; 1.3.1-10" date="1587470400">- pam_modutil_sanitize_helper_fds: fix SIGPIPE effect of PAM_MODUTIL_PIPE_FD (#1791970)</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; 1.3.1-11" date="1589544000">- pam_usertype: fixed malformed patch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; - 1.3.1-12" date="1594900800">- Add the motd.d directories (empty) to silence warnings and to
  provide proper ownership for them (#1847501)</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; 1.3.1-13" date="1604059200">- pam_wheel: if getlogin fails fallback to PAM_RUSER: fixed malformed patch (#1866866)
- pam_namespace: polyinstantiation refer to gdm doc (#1861841)</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; 1.3.1-14" date="1604577600">- Revert 1.3.1-12</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; 1.3.1-15" date="1620043200">- pam_userdb: Prevent garbage characters from db (#1791965)</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.3.1-16" date="1643371200">- pam_limits: "Unlimited" is not a valid value for RLIMIT_NOFILE. Resolves: #2047655</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 1.3.1-16.1" date="1659441600">- faillock: load configuration from file. Resolves: #2112889</changelog>
</package>
<package pkgid="8b7fe6033ece8ec80dbf01ee97d59feae972a6e59bff17d39210b41a48c4d625" name="pcre2" arch="src">
  <version epoch="0" ver="10.32" rel="3.el8_6"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 10.31-5" date="1529928000">- Fix bug when \K is used in a lookbehind in a substitute pattern</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 10.31-6" date="1530532800">- Fix global search/replace in pcre2test and pcre2_substitute() when the pattern
  matches an empty string, but never at the starting offset</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 10.31-7" date="1531137600">- Fix checking that a lookbehind assertion has a fixed length if the
  lookbehind assertion is used inside a lookahead assertion
- Fix parsing VERSION conditions</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 10.31-8" date="1533038400">- Fix backtracking atomic groups when they are not separated by something with
  a backtracking point</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 10.31-9" date="1534420800">- Recognize all Unicode space characters with /x option in a pattern
  (bug #1617960)
- Fix changing dynamic options (bug #1617960)
- Fix autopossessifying a repeated negative class with no characters less than
  256 that is followed by a positive class with only characters less than 255,
  (bug #1617960)
- Fix autopossessifying a repeated negative class with no characters less than
  256 that is followed by a positive class with only characters less than 256,
  (bug #1617960)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 10.31-10" date="1535976000">- Fix anchoring in conditionals with only one branch (bug #1617960)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 10.31-11" date="1537790400">- Fix caseless matching an extended class in JIT mode (bug #1617960)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 10.32-1" date="1544184000">- 10.32 bump (bug #1628200)
- Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has
  a greater than 1 fixed quantifier (bug #1628200)
- Fix matching a zero-repeated subroutine call at a start of a pattern
  (bug #1628200)
- Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 10.32-2" date="1557748800">- Fix CVE-2019-20454 (a crash when \X is used without UTF mode in a JIT)
  (bug #1734468)</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.32-3" date="1652443200">- Resolves: CVE-2022-1586</changelog>
</package>
<package pkgid="631d1e91b1e435f9c70bd862f42faab80d0371558af4eeb53c8c0d6017ec95d3" name="python3" arch="src">
  <version epoch="0" ver="3.6.8" rel="47.el8_6"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-38" date="1619784000">- Security fix for CVE-2021-3426: information disclosure via pydoc
Resolves: rhbz#1935913</changelog>
  <changelog author="Victor Stinner &lt;vstinner@redhat.com&gt; - 3.6.8-39" date="1625832000">- Fix reentrant call to threading.enumerate() (rhbz#1959459)
- Don't exit Python with abort() when a thread exit and there is no available
  file descriptor to load dynamically the libgcc_s.so.1 library (rhbz#1972293)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 3.6.8-40" date="1627560000">- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.6.8-41" date="1631188800">- Security fix for CVE-2021-3733: Denial of service when identifying crafted invalid RFCs
Resolves: rhbz#1995234</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.6.8-42" date="1631880000">- Security fix for CVE-2021-3737
Resolves: rhbz#1995162</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-43" date="1633953600">- Change shouldRollover() methods of logging.handlers to only rollover regular files
Resolves: rhbz#2009200</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-44" date="1634040000">- Use the monotonic clock for theading.Condition
- Use the monotonic clock for the global interpreter lock
Resolves: rhbz#2003758</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-45" date="1641556800">- Security fix for CVE-2021-4189: ftplib should not use the host from the PASV response
Resolves: rhbz#2036020</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-46" date="1646827200">- Security fix for CVE-2022-0391: urlparse does not sanitize URLs containing ASCII newline and tabs
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2047376</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-47" date="1655208000">- Security fix for CVE-2015-20107
Resolves: rhbz#2075390</changelog>
</package>
<package pkgid="ec9cd408291fd97db8fd52c480c6e2fa570fec9804083b21d3ccc2b449277357" name="rng-tools" arch="src">
  <version epoch="0" ver="6.14" rel="6.git.b2b7934e.el8_6"/>
  <changelog author="Neil Horman &lt;nhorman@redhat.com&gt; - 6.8-1" date="1573819200">- Update to latest upstream (bz 1769916)</changelog>
  <changelog author="Neil Horman &lt;nhorman@redhat.com&gt; - 6.8-2" date="1575288000">- Fix erroneous message due to bad errno check (bz 1776710)
- Enable addition of 0 value for fill-watermark (bz 1776710)</changelog>
  <changelog author="Neil Horman &lt;nhorman@redhat.com&gt; - 6.8-3" date="1582027200">- Fix coarse clock time on Azure (bz 180155)</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 6.8-4" date="1621857600">- There is no need to hardcode _sbindir anymore, also the old value is
  incorrect
- Update the rngd.service file
- Fix a busyloop bug (bz 1956248)
- Fix /dev/hwrng permission issue (bz 1955522)</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 6.8-5" date="1622116800">- Fix /dev/hwrng permissions issue at boot time (bz 1955522)</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 6.8-6" date="1625486400">- Adjust rngd-wake-threshold.service and post section so udevadm is not
  run in a container (bz 1975554)</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 6.13-1.git.d207e0b6" date="1626955200">- Update to the upstream v6.13 + tip of origin/master + onecpu
  branch + revert of 2ce93190
- Rebuild rng-tools against the latest jitterentropy library
  3.0.2-2.git.409828cf with fixes for an important issue
- Fix a number of issues (bz 1974103, bz 1980421, bz 1859154)</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 6.14-4.git.b2b7934e" date="1637582400">- Update rng-tools to v6.14 @ b2b7934e (bz 2015570)
- Update jitterentropy library to v3.3.1 @ 887c9871
- Add a config file for storing rngd options
- Fix a security issue found by a covscan in jitterentropy library</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 6.14-5.git.b2b7934e" date="1650542400">- Fix udevadm issues on systems lacking it (bz 2057030)
- Fix a missing working directory issue (bz 2053160)
- Add some upstream patches</changelog>
  <changelog author="Vladis Dronov &lt;vdronov@redhat.com&gt; - 6.14-6.git.b2b7934e" date="1651147200">- Fix a missing rngd group issue (bz2079377)</changelog>
</package>
<package pkgid="58e7d2649b8ec7780bbb6b02b9b22fccdcdd77f21a309a778894f51e7580c6fa" name="rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="24.el8_6"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-15" date="1626350400">- Add out-of-bounds checks to hdrblobInit() (#1929445)
- Fixes CVE-2021-20266
- Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-16" date="1629374400">- Add support for read-only sqlite rpmdb (#1938928)
- Drop compat .decode() method from returned Py3 strings (#1840142)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-17" date="1629720000">- Address important covscan issues (#1996665)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-18" date="1629979200">- Address important covscan issues (#1996665), vol. 2</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-19" date="1633521600">- Unbreak in-tree kmod strip by reverting brp-strip fix (#1967291)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-20" date="1639051200">- Add --path query option (#1940895)
- Macroize find-debuginfo script location (#2019540)
- Validate and require subkey binding sigs on PGP pubkeys (#1958480)
- Fixes CVE-2021-3521</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-21" date="1641816000">- Address covscan issues in binding sigs validation patch (#1958480)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-22" date="1644926400">- Fix spurious %transfiletriggerpostun execution (#2023693)
- Skip recorded symlinks in --setperms (#1900662)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-23" date="1649160000">- Fix minor ABI regression in rpmcli.h (#1940895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.14.3-24" date="1663070400">- Make write() nonblocking in fapolicyd plugin (#2110787)</changelog>
</package>
<package pkgid="e4b76c57e0cbd3315ee6d52b4419eef3e6b61427924897ba701dc5decd5ca7de" name="rsync" arch="src">
  <version epoch="0" ver="3.1.3" rel="14.el8"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-5" date="1555416000">- Resolves: #1656761 - [FJ8.0 Bug]: [REG] The rsync command is terminated with SIGSEGV</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-6" date="1555416001">- Resolves: #1602683 - Please review important issues found by covscan</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-7" date="1572350400">- Resolves: #1693162 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-8" date="1591790400">- Resolves: #1775561 - rsync 3.1.2 hangs when run with -vvv to sync a large repository</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-9" date="1598270400">- Resolves: #1667436 - rsyncd.service fails to start at boot if address is configured</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 3.1.3-10" date="1604577600">- Resolves: #1727093 - rsync: "ABORTING due to invalid path from sender"</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 3.1.3-11" date="1604577601">- Resolves: #1855981 - rsync segfaults in --append mode</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-12" date="1608292800">- Resolves: #1816528 - Defaults for --skip-compress are not working, everything is being compressed</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 3.1.3-13" date="1632744000">- Resolves: #1907443 - Read-only files that have changed xattrs fail to allow xattr changes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-14" date="1633953600">- Related: #1907443 - Adding fmf plans to run tests with tmt</changelog>
</package>
<package pkgid="e906e250c5513e7c3204c7ac3cbe4b169652d9786dc10f2a57a32422b0da9f4e" name="rsync" arch="src">
  <version epoch="0" ver="3.1.3" rel="14.el8_6.2"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-7" date="1572350400">- Resolves: #1693162 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-8" date="1591790400">- Resolves: #1775561 - rsync 3.1.2 hangs when run with -vvv to sync a large repository</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-9" date="1598270400">- Resolves: #1667436 - rsyncd.service fails to start at boot if address is configured</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 3.1.3-10" date="1604577600">- Resolves: #1727093 - rsync: "ABORTING due to invalid path from sender"</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 3.1.3-11" date="1604577601">- Resolves: #1855981 - rsync segfaults in --append mode</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-12" date="1608292800">- Resolves: #1816528 - Defaults for --skip-compress are not working, everything is being compressed</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 3.1.3-13" date="1632744000">- Resolves: #1907443 - Read-only files that have changed xattrs fail to allow xattr changes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-14" date="1633953600">- Related: #1907443 - Adding fmf plans to run tests with tmt</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-14.1" date="1649851200">- Resolves: #2074783 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-14.2" date="1650456000">- Related: #2074783 - Needed to bump this to rebuild correctly</changelog>
</package>
<package pkgid="3bf85b64c71109a08a81bb558b722a0e767dea6f826379a20b2af207006170d4" name="rsync" arch="src">
  <version epoch="0" ver="3.1.3" rel="14.el8_6.3"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-8" date="1591790400">- Resolves: #1775561 - rsync 3.1.2 hangs when run with -vvv to sync a large repository</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-9" date="1598270400">- Resolves: #1667436 - rsyncd.service fails to start at boot if address is configured</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 3.1.3-10" date="1604577600">- Resolves: #1727093 - rsync: "ABORTING due to invalid path from sender"</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 3.1.3-11" date="1604577601">- Resolves: #1855981 - rsync segfaults in --append mode</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-12" date="1608292800">- Resolves: #1816528 - Defaults for --skip-compress are not working, everything is being compressed</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 3.1.3-13" date="1632744000">- Resolves: #1907443 - Read-only files that have changed xattrs fail to allow xattr changes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-14" date="1633953600">- Related: #1907443 - Adding fmf plans to run tests with tmt</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-14.1" date="1649851200">- Resolves: #2074783 - A flaw in zlib-1.2.11 when compressing (not decompressing!) certain inputs</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-14.2" date="1650456000">- Related: #2074783 - Needed to bump this to rebuild correctly</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.3-14.3" date="1660564800">- Resolves: #2111174 - remote arbitrary files write inside the directories of connecting peers</changelog>
</package>
<package pkgid="9dac5f2c43ee84bbfd139556df4fb0c146bb8e9fcfc1332276cb2c30db1ff6ba" name="samba" arch="src">
  <version epoch="0" ver="4.15.5" rel="10.el8_6"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.4-0" date="1642766400">- Update to Samba 4.15.4
- related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
- resolves: rhbz#2039153 - Fix CVE-2021-20316
- resolves: rhbz#1912549 - Winexe: Kerberos flag not invoking Kerberos Auth
- resolves: rhbz#2039157 - Fix CVE-2021-43566
- resolves: rhbz#2038148 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7
- resolves: rhbz#2035528 - [smb] Segmentation fault when joining the domain
- resolves: rhbz#2038796 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-0" date="1643803200">- Update to Samba 4.15.5
- related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
- resolves: rhbz#2046127 - Fix CVE-2021-44141
- resolves: rhbz#2046153 - Fix CVE-2021-44142
- resolves: rhbz#2044404 - Printing no longer works on Windows 7
- resolves: rhbz#2043154 - Fix systemd notifications
- resolves: rhbz#2049602 - Disable NTLMSSP for ldap client connections (e.g. libads)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-1" date="1644840000">- resolves: #1995849 - [RFE] Change change password change prompt phrasing
- resolves: #2029417 - virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.15.5-2" date="1645099200">- resolves: rhbz#1979959 - Improve idmap autorid sanity checks and documentation</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.15.5-3" date="1645444800">- related: rhbz#1979959 - Fix typo in testparm output</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.15.5-4" date="1645704000">- resolves: rhbz#2057503 - Fix winbind kerberos ticket refresh</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.15.5-5" date="1647432000">- resolves: rhbz#2064325 - Fix 'create krb5 conf = yes` when a KDC has a
                           single IP address.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2079303 - Fix username map for unix groups
- resolves: rhbz#2079299 - PAM Kerberos authentication fails with a clock skew error
- resolves: rhbz#2079304 - Fix UPNs handling in lookup_name*() calls</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.15.5-9" date="1662724800">- Fix CVE-2022-32742
- resolves: rhbz#2125552</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.15.5-10" date="1662984000">- resolves: rhbz#2126041 - Do not require samba package in python3-samba</changelog>
</package>
<package pkgid="00fc494434fb1ea425fe21e0aecf3beedf6b7e8589d446649deca8eddc0480d6" name="samba" arch="src">
  <version epoch="0" ver="4.15.5" rel="8.el8_6"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.15.2-2" date="1638532800">- related: rhbz#2013596 - Remove unneeded lmdb dependency</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.3-1" date="1639656000">- related: rhbz#2013596 - Rebase to version 4.15.3
- resolves: rhbz#2028029 - Fix possible null pointer dereference in winbind
- resolves: rhbz#1912549 - Winexe: Kerberos Auth is respected via --use-kerberos=desired</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.4-0" date="1642766400">- Update to Samba 4.15.4
- related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
- resolves: rhbz#2039153 - Fix CVE-2021-20316
- resolves: rhbz#1912549 - Winexe: Kerberos flag not invoking Kerberos Auth
- resolves: rhbz#2039157 - Fix CVE-2021-43566
- resolves: rhbz#2038148 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7
- resolves: rhbz#2035528 - [smb] Segmentation fault when joining the domain
- resolves: rhbz#2038796 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-0" date="1643803200">- Update to Samba 4.15.5
- related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
- resolves: rhbz#2046127 - Fix CVE-2021-44141
- resolves: rhbz#2046153 - Fix CVE-2021-44142
- resolves: rhbz#2044404 - Printing no longer works on Windows 7
- resolves: rhbz#2043154 - Fix systemd notifications
- resolves: rhbz#2049602 - Disable NTLMSSP for ldap client connections (e.g. libads)</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-1" date="1644840000">- resolves: #1995849 - [RFE] Change change password change prompt phrasing
- resolves: #2029417 - virusfilter_vfs_openat: Not scanned: Directory or special file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.15.5-2" date="1645099200">- resolves: rhbz#1979959 - Improve idmap autorid sanity checks and documentation</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.15.5-3" date="1645444800">- related: rhbz#1979959 - Fix typo in testparm output</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.15.5-4" date="1645704000">- resolves: rhbz#2057503 - Fix winbind kerberos ticket refresh</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.15.5-5" date="1647432000">- resolves: rhbz#2064325 - Fix 'create krb5 conf = yes` when a KDC has a
                           single IP address.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 4.15.5-8" date="1651060800">- resolves: rhbz#2079303 - Fix username map for unix groups
- resolves: rhbz#2079299 - PAM Kerberos authentication fails with a clock skew error
- resolves: rhbz#2079304 - Fix UPNs handling in lookup_name*() calls</changelog>
</package>
<package pkgid="0493cf6451bf06472bec2115831f1e6544c48e05cc42f039838a7ed99223d540" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.14.3" rel="95.el8_6.1"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-87" date="1642507200">- Set default file context for /sys/firmware/efi/efivars
Resolves: rhbz#2039458
- Allow sysadm_t start and stop transient services
Resolves: rhbz#2031065
- Label /etc/cockpit/ws-certs.d with cert_t
Resolves: rhbz#1907473
- Allow smbcontrol read the network state information
Resolves: rhbz#2033873
- Allow rhsm-service read/write its private memfd: objects
Resolves: rhbz#2029873
- Allow fcoemon request the kernel to load a module
Resolves: rhbz#1940317
- Allow radiusd connect to the radacct port
Resolves: rhbz#2038955
- Label /var/lib/shorewall6-lite with shorewall_var_lib_t
Resolves: rhbz#2041447
- Exclude container.if from selinux-policy-devel
Resolves: rhbz#1861968</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-88" date="1642680000">- Revert "Label /etc/cockpit/ws-certs.d with cert_t"
Related: rhbz#1907473</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-89" date="1643198400">- Allow NetworkManager talk with unconfined user over unix domain dgram socket
Resolves: rhbz#2044048
- Allow system_mail_t read inherited apache system content rw files
Resolves: rhbz#1988339
- Add apache_read_inherited_sys_content_rw_files() interface
Related: rhbz#1988339
- Allow rhsm-service execute its private memfd: objects
Resolves: rhbz#2029873
- Allow dirsrv read configfs files and directories
Resolves: rhbz#2042568
- Label /run/stratisd with stratisd_var_run_t
Resolves: rhbz#1879585
- Fix path for excluding container.if from selinux-policy-devel
Resolves: rhbz#1861968</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-90" date="1643976000">- Fix badly indented used interfaces
Resolves: rhbz#2030156
- Allow domain transition to sssd_t 1/2
Resolves: rhbz#2022690
- Allow confined users to use kinit,klist and etc.
Resolves: rhbz#2026598
- Allow login_userdomain open/read/map system journal
Resolves: rhbz#2046481
- Allow init read stratis data symlinks 2/2
Resolves: rhbz#2048514
- Label new utility of NetworkManager nm-priv-helper
Resolves: rhbz#1986076
- Label NetworkManager-dispatcher service with separate context
Resolves: rhbz#1989070
- Allow domtrans to sssd_t and role access to sssd
Resolves: rhbz#2030156
- Creating interface sssd_run_sssd()
Resolves: rhbz#2030156
- Allow domain transition to sssd_t 2/2
Resolves: rhbz#2022690
- Allow timedatex dbus chat with xdm
Resolves: rhbz#2040214
- Associate stratisd_data_t with device filesystem
Resolves: rhbz#2048514
- Allow init read stratis data symlinks 1/2
Resolves: rhbz#2048514
- Allow rhsmcertd create rpm hawkey logs with correct label
Resolves: rhbz#1949871</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-91" date="1644408000">- Allow NetworkManager-dispatcher dbus chat with NetworkManager
Resolves: rhbz#1989070</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-92" date="1645012800">- Allow postfix_domain read dovecot certificates 1/2
Resolves: rhbz#2043599
- Dontaudit dirsrv search filesystem sysctl directories 1/2
Resolves: rhbz#2042568
- Allow chage domtrans to sssd
Resolves: rhbz#2054718
- Allow postfix_domain read dovecot certificates 2/2
Resolves: rhbz#2043599
- Allow ctdb create cluster logs
Resolves: rhbz#2049481
- Allow alsa bind mixer controls to led triggers
Resolves: rhbz#2049730
- Allow alsactl set group Process ID of a process
Resolves: rhbz#2049730
- Dontaudit mdadm list dirsrv tmpfs dirs
Resolves: rhbz#2011174
- Dontaudit dirsrv search filesystem sysctl directories 2/2
Resolves: rhbz#2042568
- Revert "Label NetworkManager-dispatcher service with separate context"
Related: rhbz#1989070
- Revert "Allow NetworkManager-dispatcher dbus chat with NetworkManager"
Related: rhbz#1989070</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-93" date="1645704000">- Allow systemd-networkd dbus chat with sosreport
Resolves: rhbz#1949493
- Allow sysadm_passwd_t to relabel passwd and group files
Resolves: rhbz#2053457
- Allow confined sysadmin to use tool vipw
Resolves: rhbz#2053457
- Allow sosreport dbus chat with abrt and timedatex
Resolves: rhbz#1949493
- Remove unnecessary /etc file transitions for insights-client
Resolves: rhbz#2031853
- Label all content in /var/lib/insights with insights_client_var_lib_t
Resolves: rhbz#2031853
- Update insights-client policy
Resolves: rhbz#2031853
- Update insights-client: fc pattern, motd, writing to etc
Resolves: rhbz#2031853
- Remove permissive domain for insights_client_t
Resolves: rhbz#2031853
- New policy for insight-client
Resolves: rhbz#2031853
- Add the insights_client module
Resolves: rhbz#2031853
- Update specfile to buildrequire policycoreutils-devel &gt;= 2.9-19
- Add modules_checksum to %files</changelog>
  <changelog author="Nikola Knazekova nknazeko@redhat.com - 3.14.3-94" date="1646913600">- Allow chronyd send a message to sosreport over datagram socket
- Allow systemd-logind dbus chat with sosreport
Resolves: rhbz#1949493</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-95" date="1648123200">- Allow hostapd talk with unconfined user over unix domain dgram socket
Resolves: rhbz#2064284</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-95.1" date="1654776000">- Label more vdsm utils with virtd_exec_t
Resolves: rhbz#2095184</changelog>
</package>
<package pkgid="87edca4c5d158bf43961b95f0268b382108a5f503854e6e7e7ff1240a864e3c2" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.14.3" rel="95.el8_6.4"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-90" date="1643976000">- Fix badly indented used interfaces
Resolves: rhbz#2030156
- Allow domain transition to sssd_t 1/2
Resolves: rhbz#2022690
- Allow confined users to use kinit,klist and etc.
Resolves: rhbz#2026598
- Allow login_userdomain open/read/map system journal
Resolves: rhbz#2046481
- Allow init read stratis data symlinks 2/2
Resolves: rhbz#2048514
- Label new utility of NetworkManager nm-priv-helper
Resolves: rhbz#1986076
- Label NetworkManager-dispatcher service with separate context
Resolves: rhbz#1989070
- Allow domtrans to sssd_t and role access to sssd
Resolves: rhbz#2030156
- Creating interface sssd_run_sssd()
Resolves: rhbz#2030156
- Allow domain transition to sssd_t 2/2
Resolves: rhbz#2022690
- Allow timedatex dbus chat with xdm
Resolves: rhbz#2040214
- Associate stratisd_data_t with device filesystem
Resolves: rhbz#2048514
- Allow init read stratis data symlinks 1/2
Resolves: rhbz#2048514
- Allow rhsmcertd create rpm hawkey logs with correct label
Resolves: rhbz#1949871</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-91" date="1644408000">- Allow NetworkManager-dispatcher dbus chat with NetworkManager
Resolves: rhbz#1989070</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-92" date="1645012800">- Allow postfix_domain read dovecot certificates 1/2
Resolves: rhbz#2043599
- Dontaudit dirsrv search filesystem sysctl directories 1/2
Resolves: rhbz#2042568
- Allow chage domtrans to sssd
Resolves: rhbz#2054718
- Allow postfix_domain read dovecot certificates 2/2
Resolves: rhbz#2043599
- Allow ctdb create cluster logs
Resolves: rhbz#2049481
- Allow alsa bind mixer controls to led triggers
Resolves: rhbz#2049730
- Allow alsactl set group Process ID of a process
Resolves: rhbz#2049730
- Dontaudit mdadm list dirsrv tmpfs dirs
Resolves: rhbz#2011174
- Dontaudit dirsrv search filesystem sysctl directories 2/2
Resolves: rhbz#2042568
- Revert "Label NetworkManager-dispatcher service with separate context"
Related: rhbz#1989070
- Revert "Allow NetworkManager-dispatcher dbus chat with NetworkManager"
Related: rhbz#1989070</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-93" date="1645704000">- Allow systemd-networkd dbus chat with sosreport
Resolves: rhbz#1949493
- Allow sysadm_passwd_t to relabel passwd and group files
Resolves: rhbz#2053457
- Allow confined sysadmin to use tool vipw
Resolves: rhbz#2053457
- Allow sosreport dbus chat with abrt and timedatex
Resolves: rhbz#1949493
- Remove unnecessary /etc file transitions for insights-client
Resolves: rhbz#2031853
- Label all content in /var/lib/insights with insights_client_var_lib_t
Resolves: rhbz#2031853
- Update insights-client policy
Resolves: rhbz#2031853
- Update insights-client: fc pattern, motd, writing to etc
Resolves: rhbz#2031853
- Remove permissive domain for insights_client_t
Resolves: rhbz#2031853
- New policy for insight-client
Resolves: rhbz#2031853
- Add the insights_client module
Resolves: rhbz#2031853
- Update specfile to buildrequire policycoreutils-devel &gt;= 2.9-19
- Add modules_checksum to %files</changelog>
  <changelog author="Nikola Knazekova nknazeko@redhat.com - 3.14.3-94" date="1646913600">- Allow chronyd send a message to sosreport over datagram socket
- Allow systemd-logind dbus chat with sosreport
Resolves: rhbz#1949493</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-95" date="1648123200">- Allow hostapd talk with unconfined user over unix domain dgram socket
Resolves: rhbz#2064284</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-95.1" date="1654776000">- Label more vdsm utils with virtd_exec_t
Resolves: rhbz#2095184</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-95.2" date="1657627200">- Add the init_status_config_transient_files() interface
Resolves: rhbz#2103606
- Allow transition to insights_client named content
Resolves: rhbz#2103606
- Allow init_t to rw insights_client unnamed pipe
Resolves: rhbz#2103606
- Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Resolves: rhbz#2103606
- Add the gpg_manage_admin_home_content() interface
Resolves: rhbz#2103606
- Update insights_client_filetrans_named_content()
Resolves: rhbz#2103606
- Add the insights_client_filetrans_named_content() interface
Resolves: rhbz#2103606
- Update policy for insights-client to run additional commands 3
Resolves: rhbz#2103606
- Allow insights-client get status of the systemd transient scripts
Resolves: rhbz#2103606
- Allow insights-client execute its private memfd: objects
Resolves: rhbz#2103606
- Update policy for insights-client to run additional commands 2
Resolves: rhbz#2103606
- Do not call systemd_userdbd_stream_connect() for insights-client
Resolves: rhbz#2103606
- Use insights_client_tmp_t instead of insights_client_var_tmp_t
Resolves: rhbz#2103606
- Change space indentation to tab in insights-client
Resolves: rhbz#2103606
- Use socket permissions sets in insights-client
Resolves: rhbz#2103606
- Update policy for insights-client to run additional commands
Resolves: rhbz#2103606
- Change rpm_setattr_db_files() to use a pattern
Resolves: rhbz#2103606
- Add rpm setattr db files macro
Resolves: rhbz#2103606
- Fix insights client
Resolves: rhbz#2103606
- Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
Resolves: rhbz#2103606
- Allow insights-client manage gpg admin home content
Resolves: rhbz#2103606
- Label /var/cache/insights with insights_client_cache_t
Resolves: rhbz#2103606
- Allow insights-client search gconf homedir
Resolves: rhbz#2103606
- Allow insights-client create and use unix_dgram_socket
Resolves: rhbz#2103606
- Allow insights-client create_socket_perms for tcp/udp sockets
Resolves: rhbz#2103606
- Allow insights-client read rhnsd config files
Resolves: rhbz#2103606
- Allow insights-client search rhnsd configuration directory
Resolves: rhbz#2103606</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-95.3" date="1659614400">- Allow insights-client rpm named file transitions
Resolves: rhbz#2103606
- Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Resolves: rhbz#2103606
- Use insights_client_filetrans_named_content
Resolves: rhbz#2103606
- Make default file context match with named transitions
Resolves: rhbz#2103606
- Allow rhsmcertd to read insights config files
Resolves: rhbz#2103606
- Label /etc/insights-client/machine-id
Resolves: rhbz#2103606</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.14.3-95.4" date="1661169600">- rebuild
Resolves: rhbz#2103606</changelog>
</package>
<package pkgid="b838879a882b3f4643a14bf5b12957f445f0007544dd053e1f8d81f72e5bef47" name="sqlite" arch="src">
  <version epoch="0" ver="3.26.0" rel="16.el8_6"/>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-7" date="1585051200">- Fixed CVE-2019-20218 (#1791592)
- Fixed CVE-2020-6405 (#1804823)
- Fixed CVE-2020-0327 (#1816572)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-8" date="1587643200">- Fixed CVE-2019-16168 (#1826897)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-9" date="1591099200">- Fixed CVE-2019-5018 (#1721509)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-10" date="1591790400">- Fixed CVE-2020-13632 (#1845572)
- Fixed CVE-2020-13631 (#1845474)
- Fixed CVE-2020-13630 (#1845153)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-11" date="1596801600">- Fixed bug in CVE-2019-20218 (#1791592)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-12" date="1597665600">- Fixed CVE-2020-13434 (#1845843)
- Fixed CVE-2020-15358 (#1855208)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-13" date="1606824000">- enabled fts3conf.test on s390x and ppc64 architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 3.26.0-14" date="1618488000">- Fixed CVE-2019-5827 (#1710184)
- Fixed CVE-2019-13750 (#1786510)
- Fixed CVE-2019-13751 (#1786522)
- Fixed CVE-2019-19603 (#1792013)
- Fixed CVE-2020-13435 (#1841233)</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 3.26.0-15" date="1621339200">- Removing fix for CVE-2019-19645 (unaffected)
- Removing fix for CVE-2019-19880 (unaffected)</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 3.26.0-16" date="1662379200">- Fixed CVE-2020-35527
- Fixed CVE-2020-35525</changelog>
</package>
<package pkgid="b557afc850adae339c9f7cc8e4ad8f07b0d3f06b3ae006d0a4267edc13da994f" name="sssd" arch="src">
  <version epoch="0" ver="2.6.2" rel="4.el8_6.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.1-1" date="1636977600">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected
- Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator
- Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed
- Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb
- Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces)
- Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
- Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD
- Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True'
- Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication.
- Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.1-2" date="1637928000">- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-4" date="1650542400">- Resolves: rhbz#2074648 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop [rhel-8.6.0.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-4.1" date="1654171200">- Resolves: rhbz#2072958 - Use right sdap_domain in ad_domain_info_send [rhel-8.6.0.z]
- Resolves: rhbz#2089244 - pam_sss_gss ceased to work after upgrade to 8.6 [rhel-8.6.0.z]</changelog>
</package>
<package pkgid="6fcc0b76834995c3d74648c61d64bd9e1083e0fb071b7e2cf33f3ba54bde1ba5" name="sssd" arch="src">
  <version epoch="0" ver="2.6.2" rel="4.el8_6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-1" date="1623153600">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
- Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
- Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
- Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
- Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
- Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
- Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
- Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
- Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
- Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
- Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
- Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.1-2" date="1624276800">- Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
- Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
- Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-1" date="1626091200">- Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
- Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
- Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
- Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
- Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
- Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
- Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.5.2-2" date="1627905600">- Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
- Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.1-1" date="1636977600">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected
- Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator
- Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed
- Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb
- Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces)
- Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
- Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD
- Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True'
- Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication.
- Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.1-2" date="1637928000">- Rebuild due to rhbz#2013596 - Rebase Samba to the the latest 4.15.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-1" date="1640606400">- Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
- Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
- Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
- Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
- Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
- Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-2" date="1641297600">- Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files (additional patch)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-3" date="1642420800">- Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
- Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
- Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
- Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
- Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.6.2-4" date="1650542400">- Resolves: rhbz#2074648 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop [rhel-8.6.0.z]</changelog>
</package>
<package pkgid="da7e278f95338ad8146ef8f9e4cfc3b9023d60422549efbb53ddf8b673e224c3" name="systemd" arch="src">
  <version epoch="0" ver="239" rel="58.el8_6.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-50" date="1630065600">- Added option --check-inhibitors for non-tty usage (#1269726)
- logind: Introduce RebootWithFlags and others (#1269726)
- logind: add …WithFlags methods to policy (#1269726)
- logind: simplify flags handling a bit (#1269726)
- Update link to RHEL documentation (#1982584)
- Set default core ulimit to 0, but keep the hard limit ulimited (#1905582)
- shared/seccomp-util: address family filtering is broken on ppc (#1982650)
- logind: rework Seat/Session/User object allocation and freeing a bit (#1642460)
- logind: fix serialization/deserialization of user's "display session" (#1642460)
- logind: turn of stdio locking when writing session files too (#1642460)
- units: set StopWhenUnneeded= for the user slice units too (#1642460)
- units: improve Description= string a bit (#1642460)
- logind: improve logging in manager_connect_console() (#1642460)
- logind: save/restore User object's "stopping" field during restarts (#1642460)
- logind: correct bad clean-up path (#1642460)
- logind: fix bad error propagation (#1642460)
- logind: never elect a session that is stopping as display (#1642460)
- logind: introduce little helper that checks whether a session is ready (#1642460)
- logind: propagate session stop errors (#1642460)
- logind: rework how we manage the slice and user-runtime-dir@.service unit for each user (#1642460)
- logind: optionally, keep the user@.service instance for eached logged in user around for a while (#1642460)
- logind: add a RequiresMountsFor= dependency from the session scope unit to the home directory of the user (#1642460)
- logind: improve error propagation of user_check_linger_file() (#1642460)
- logind: automatically GC lingering users for who now user@.service (nor slice, not runtime dir service) is running anymore (#1642460)
- pam_systemd: simplify code which with we set environment variables (#1642460)
- logind: validate /run/user/1000 before we set it (#1642460)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-53" date="1637755200">- sd-hwdb: allow empty properties (#2005009)
- Update hwdb (#2005009)
- Disable libpitc to fix CentOS Stream CI (#2017033)
- rpm: Fix typo in %_environmentdir (#2018024)
- rpm: Add misspelled %_environmentdir macro for temporary compatibility (#2018024)
- rpm: emit warning when macro with typo is used (#2018024)
- Remove unintended additions to systemd-analyze man page (#2004765)
- core: fix SIGABRT on empty exec command argv (#2020239)
- core/service: also check path in exec commands (#2020239)
- mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (#2015057)
- basic: add vmware hypervisor detection from device-tree (#1959150)
- pam: do not require a non-expired password for user@.service (#1961746)
- udev rules: add rule to create /dev/ptp_hyperv (#1991834)
- process-util: explicitly handle processes lacking parents in get_process_ppid() (#1977569)
- errno-util: add ERRNO_IS_PRIVILEGE() helper (#1977569)
- procfs-util: fix confusion wrt. quantity limit and maximum value (#1977569)
- test-process-util: also add EROFS to the list of "good" errors (#1977569)
- journal: refresh cached credentials of stdout streams (#1931806)
- util-lib: introduce HAS_FEATURE_ADDRESS_SANITIZER (#2017033)
- ci: skip test-execute on GH Actions under ASan (#2017033)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2017033)
- test: accept that char device 0/0 can now be created witout privileges (#2017033)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2017033)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#1970945)
- sd-event: take ref on event loop object before dispatching event sources (#1970945)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-54" date="1638360000">- core: consider service with no start command immediately started (#1860899)
- man: move description of *Action= modes to FailureAction=/SuccessAction= (#1860899)
- core: define "exit" and "exit-force" actions for user units and only accept that (#1860899)
- core: accept system mode emergency action specifiers with a warning (#1860899)
- core: allow services with no commands but SuccessAction set (#1860899)
- core: limit service-watchdogs=no to actual "watchdog" commands (#1860899)
- units: use SuccessAction=exit-force in systemd-exit.service (#1860899)
- units: use SuccessAction=reboot-force in systemd-reboot.service (#1860899)
- units: use SuccessAction=poweroff-force in systemd-poweroff.service (#1860899)
- units: allow and use SuccessAction=exit-force in system systemd-exit.service (#1860899)
- core: do not "warn" about mundane emergency actions (#1860899)
- core: return true from cg_is_empty* on ENOENT (#1860899)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2017033)
- tests: add helper function to autodetect CI environments (#2017033)
- strv: rework FOREACH_STRING() macro (#2017033)
- test,systemctl: use "const char*" instead of "char*" (#2017033)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2017033)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-55" date="1641816000">- lgtm: detect uninitialized variables using the __cleanup__ attribute (#2017033)
- lgtm: replace the query used for looking for fgets with a more general query (#2017033)
- lgtm: beef up list of dangerous/questionnable API calls not to make (#2017033)
- lgtm: warn about strerror() use (#2017033)
- lgtm: complain about accept() [people should use accept4() instead, due to O_CLOEXEC] (#2017033)
- lgtm: don't treat the custom note as a list of tags (#2017033)
- lgtm: ignore certain cleanup functions (#2017033)
- lgtm: detect more possible problematic scenarios (#2017033)
- lgtm: enable more (and potentially useful) queries (#2017033)
- test: make TEST-47 less racy (#2017033)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2036608)
- core: Check unit start rate limiting earlier (#2036608)
- sd-event: introduce callback invoked when event source ratelimit expires (#2036608)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2036608)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2036608)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2036608)
- pid1: add a manager_trigger_run_queue() helper (#2036608)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2036608)
- Revert "Revert "sysctl: Enable ping(8) inside rootless Podman containers"" (#2037807)
- sysctl: prefix ping port range setting with a dash (#2037807)
- mount: don't propagate errors from mount_setup_unit() further up (#2036853)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-56" date="1643112000">- Take ghost ownership of /var/log/lastlog (#1798685)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-57" date="1644235200">- udev/net_id: introduce naming scheme for RHEL-8.5 (#2039797)
- udev/net_id: remove extraneous bracket (#2039797)
- udev/net_id: introduce naming scheme for RHEL-8.6 (#2039797)
- define newly needed constants (#2005008)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#2005008)
- sd-netlink: introduce sd_netlink_message_read_strv() (#2005008)
- sd-netlink: introduce sd_netlink_message_append_strv() (#2005008)
- test: add a test for sd_netlink_message_{append,read}_strv() (#2005008)
- util: introduce ifname_valid_full() (#2005008)
- rename function (#2005008)
- udev: support AlternativeName= setting in .link file (#2005008)
- network: make Name= in [Match] support alternative names of interfaces (#2005008)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#2005008)
- udev: do not fail if kernel does not support alternative names (#2005008)
- udev: introduce AlternativeNamesPolicy= setting (#2005008)
- network: set AlternativeNamesPolicy= in 99-default.link (#2005008)
- random-util: call initialize_srand() after fork() (#2005008)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#2005008)
- udev: sort alternative names (#2005008)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#2005008)
- netlink: do not fail when new interface name is already used as an alternative name (#2005008)
- udev: do not try to reassign alternative names (#2005008)
- Do not fail if the same alt. name is set again (#2005008)
- mount: do not update exec deps on mountinfo changes (#2008825)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2008825)
- core: fix unfortunate typo in unit_is_unneeded() (#2040147)
- core: make destructive transaction error a bit more useful (#2040147)
- tmpfiles: use a entry in hashmap as ItemArray in read_config_file() (#1944468)
- tmpfiles: rework condition check (#1944468)
- TEST-22-TMPFILES: add reproducer for bug with X (#1944468)
- core: make sure we don't get confused when setting TERM for a tty fd (#2045307)
- hash-funcs: introduce macro to create typesafe hash_ops (#2037807)
- hash-func: add destructors for key and value (#2037807)
- util: define free_func_t (#2037807)
- hash-funcs: make basic hash_ops typesafe (#2037807)
- test: add tests for destructors of hashmap or set (#2037807)
- man: document the new sysctl.d/ - prefix (#2037807)
- sysctl: if options are prefixed with "-" ignore write errors (#2037807)
- sysctl: fix segfault (#2037807)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58" date="1644321600">- ci: drop CentOS 8 CI (#2017033)
- test: adapt to the new capsh format (#2017033)
- test: ignore IAB capabilities in `test-execute` (#2017033)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.1" date="1652270400">- acpi-fpdt: mark structures as packed (#2084052)
- core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2084052)
- core/unit: fix use-after-free (#2084052)
- sd-bus: fix reference counter to be incremented (#2084052)
- sd-bus: do not read unused value (#2084052)
- sd-bus: do not return negative errno when unknown name is specified (#2084052)
- sd-bus: switch to a manual overflow check in sd_bus_track_add_name() (#2084052)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.2" date="1654776000">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#2091590)
- core: propagate triggered unit in more load states (#2086553)
- core: propagate unit start limit hit state to triggering path unit (#2086553)
- core: Move 'r' variable declaration to start of unit_start() (#2086553)
- core: Delay start rate limit check when starting a unit (#2086553)
- core: Propagate condition failed state to triggering units. (#2086553)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.3" date="1655985600">- unit: check for mount rate limiting before checking active state (#2097336)</changelog>
</package>
<package pkgid="969db977d10b234fc1f3cadf9b0066c591aec9c627c34b2850c6538ae1294f5a" name="systemd" arch="src">
  <version epoch="0" ver="239" rel="58.el8_6.4"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-53" date="1637755200">- sd-hwdb: allow empty properties (#2005009)
- Update hwdb (#2005009)
- Disable libpitc to fix CentOS Stream CI (#2017033)
- rpm: Fix typo in %_environmentdir (#2018024)
- rpm: Add misspelled %_environmentdir macro for temporary compatibility (#2018024)
- rpm: emit warning when macro with typo is used (#2018024)
- Remove unintended additions to systemd-analyze man page (#2004765)
- core: fix SIGABRT on empty exec command argv (#2020239)
- core/service: also check path in exec commands (#2020239)
- mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (#2015057)
- basic: add vmware hypervisor detection from device-tree (#1959150)
- pam: do not require a non-expired password for user@.service (#1961746)
- udev rules: add rule to create /dev/ptp_hyperv (#1991834)
- process-util: explicitly handle processes lacking parents in get_process_ppid() (#1977569)
- errno-util: add ERRNO_IS_PRIVILEGE() helper (#1977569)
- procfs-util: fix confusion wrt. quantity limit and maximum value (#1977569)
- test-process-util: also add EROFS to the list of "good" errors (#1977569)
- journal: refresh cached credentials of stdout streams (#1931806)
- util-lib: introduce HAS_FEATURE_ADDRESS_SANITIZER (#2017033)
- ci: skip test-execute on GH Actions under ASan (#2017033)
- test-seccomp: accept ENOSYS from sysctl(2) too (#2017033)
- test: accept that char device 0/0 can now be created witout privileges (#2017033)
- meson: do not fail if rsync is not installed with meson 0.57.2 (#2017033)
- pid1: fix free of uninitialized pointer in unit_fail_if_noncanonical() (#1970945)
- sd-event: take ref on event loop object before dispatching event sources (#1970945)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-54" date="1638360000">- core: consider service with no start command immediately started (#1860899)
- man: move description of *Action= modes to FailureAction=/SuccessAction= (#1860899)
- core: define "exit" and "exit-force" actions for user units and only accept that (#1860899)
- core: accept system mode emergency action specifiers with a warning (#1860899)
- core: allow services with no commands but SuccessAction set (#1860899)
- core: limit service-watchdogs=no to actual "watchdog" commands (#1860899)
- units: use SuccessAction=exit-force in systemd-exit.service (#1860899)
- units: use SuccessAction=reboot-force in systemd-reboot.service (#1860899)
- units: use SuccessAction=poweroff-force in systemd-poweroff.service (#1860899)
- units: allow and use SuccessAction=exit-force in system systemd-exit.service (#1860899)
- core: do not "warn" about mundane emergency actions (#1860899)
- core: return true from cg_is_empty* on ENOENT (#1860899)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2017033)
- tests: add helper function to autodetect CI environments (#2017033)
- strv: rework FOREACH_STRING() macro (#2017033)
- test,systemctl: use "const char*" instead of "char*" (#2017033)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2017033)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-55" date="1641816000">- lgtm: detect uninitialized variables using the __cleanup__ attribute (#2017033)
- lgtm: replace the query used for looking for fgets with a more general query (#2017033)
- lgtm: beef up list of dangerous/questionnable API calls not to make (#2017033)
- lgtm: warn about strerror() use (#2017033)
- lgtm: complain about accept() [people should use accept4() instead, due to O_CLOEXEC] (#2017033)
- lgtm: don't treat the custom note as a list of tags (#2017033)
- lgtm: ignore certain cleanup functions (#2017033)
- lgtm: detect more possible problematic scenarios (#2017033)
- lgtm: enable more (and potentially useful) queries (#2017033)
- test: make TEST-47 less racy (#2017033)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2036608)
- core: Check unit start rate limiting earlier (#2036608)
- sd-event: introduce callback invoked when event source ratelimit expires (#2036608)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2036608)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2036608)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2036608)
- pid1: add a manager_trigger_run_queue() helper (#2036608)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2036608)
- Revert "Revert "sysctl: Enable ping(8) inside rootless Podman containers"" (#2037807)
- sysctl: prefix ping port range setting with a dash (#2037807)
- mount: don't propagate errors from mount_setup_unit() further up (#2036853)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-56" date="1643112000">- Take ghost ownership of /var/log/lastlog (#1798685)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-57" date="1644235200">- udev/net_id: introduce naming scheme for RHEL-8.5 (#2039797)
- udev/net_id: remove extraneous bracket (#2039797)
- udev/net_id: introduce naming scheme for RHEL-8.6 (#2039797)
- define newly needed constants (#2005008)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#2005008)
- sd-netlink: introduce sd_netlink_message_read_strv() (#2005008)
- sd-netlink: introduce sd_netlink_message_append_strv() (#2005008)
- test: add a test for sd_netlink_message_{append,read}_strv() (#2005008)
- util: introduce ifname_valid_full() (#2005008)
- rename function (#2005008)
- udev: support AlternativeName= setting in .link file (#2005008)
- network: make Name= in [Match] support alternative names of interfaces (#2005008)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#2005008)
- udev: do not fail if kernel does not support alternative names (#2005008)
- udev: introduce AlternativeNamesPolicy= setting (#2005008)
- network: set AlternativeNamesPolicy= in 99-default.link (#2005008)
- random-util: call initialize_srand() after fork() (#2005008)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#2005008)
- udev: sort alternative names (#2005008)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#2005008)
- netlink: do not fail when new interface name is already used as an alternative name (#2005008)
- udev: do not try to reassign alternative names (#2005008)
- Do not fail if the same alt. name is set again (#2005008)
- mount: do not update exec deps on mountinfo changes (#2008825)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2008825)
- core: fix unfortunate typo in unit_is_unneeded() (#2040147)
- core: make destructive transaction error a bit more useful (#2040147)
- tmpfiles: use a entry in hashmap as ItemArray in read_config_file() (#1944468)
- tmpfiles: rework condition check (#1944468)
- TEST-22-TMPFILES: add reproducer for bug with X (#1944468)
- core: make sure we don't get confused when setting TERM for a tty fd (#2045307)
- hash-funcs: introduce macro to create typesafe hash_ops (#2037807)
- hash-func: add destructors for key and value (#2037807)
- util: define free_func_t (#2037807)
- hash-funcs: make basic hash_ops typesafe (#2037807)
- test: add tests for destructors of hashmap or set (#2037807)
- man: document the new sysctl.d/ - prefix (#2037807)
- sysctl: if options are prefixed with "-" ignore write errors (#2037807)
- sysctl: fix segfault (#2037807)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58" date="1644321600">- ci: drop CentOS 8 CI (#2017033)
- test: adapt to the new capsh format (#2017033)
- test: ignore IAB capabilities in `test-execute` (#2017033)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.1" date="1652270400">- acpi-fpdt: mark structures as packed (#2084052)
- core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2084052)
- core/unit: fix use-after-free (#2084052)
- sd-bus: fix reference counter to be incremented (#2084052)
- sd-bus: do not read unused value (#2084052)
- sd-bus: do not return negative errno when unknown name is specified (#2084052)
- sd-bus: switch to a manual overflow check in sd_bus_track_add_name() (#2084052)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.2" date="1654776000">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#2091590)
- core: propagate triggered unit in more load states (#2086553)
- core: propagate unit start limit hit state to triggering path unit (#2086553)
- core: Move 'r' variable declaration to start of unit_start() (#2086553)
- core: Delay start rate limit check when starting a unit (#2086553)
- core: Propagate condition failed state to triggering units. (#2086553)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.3" date="1655985600">- unit: check for mount rate limiting before checking active state (#2097336)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.4" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110548)</changelog>
</package>
<package pkgid="46b9dbfae1155663f380e2e14ba0d83a4c71e01064f8e2d6ff13a2e84dbd07a5" name="systemd" arch="src">
  <version epoch="0" ver="239" rel="58.el8_6.7"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-54" date="1638360000">- core: consider service with no start command immediately started (#1860899)
- man: move description of *Action= modes to FailureAction=/SuccessAction= (#1860899)
- core: define "exit" and "exit-force" actions for user units and only accept that (#1860899)
- core: accept system mode emergency action specifiers with a warning (#1860899)
- core: allow services with no commands but SuccessAction set (#1860899)
- core: limit service-watchdogs=no to actual "watchdog" commands (#1860899)
- units: use SuccessAction=exit-force in systemd-exit.service (#1860899)
- units: use SuccessAction=reboot-force in systemd-reboot.service (#1860899)
- units: use SuccessAction=poweroff-force in systemd-poweroff.service (#1860899)
- units: allow and use SuccessAction=exit-force in system systemd-exit.service (#1860899)
- core: do not "warn" about mundane emergency actions (#1860899)
- core: return true from cg_is_empty* on ENOENT (#1860899)
- macro: define HAS_FEATURE_ADDRESS_SANITIZER also on gcc (#2017033)
- tests: add helper function to autodetect CI environments (#2017033)
- strv: rework FOREACH_STRING() macro (#2017033)
- test,systemctl: use "const char*" instead of "char*" (#2017033)
- ci: pass the $GITHUB_ACTIONS variable to the CentOS container (#2017033)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-55" date="1641816000">- lgtm: detect uninitialized variables using the __cleanup__ attribute (#2017033)
- lgtm: replace the query used for looking for fgets with a more general query (#2017033)
- lgtm: beef up list of dangerous/questionnable API calls not to make (#2017033)
- lgtm: warn about strerror() use (#2017033)
- lgtm: complain about accept() [people should use accept4() instead, due to O_CLOEXEC] (#2017033)
- lgtm: don't treat the custom note as a list of tags (#2017033)
- lgtm: ignore certain cleanup functions (#2017033)
- lgtm: detect more possible problematic scenarios (#2017033)
- lgtm: enable more (and potentially useful) queries (#2017033)
- test: make TEST-47 less racy (#2017033)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2036608)
- core: Check unit start rate limiting earlier (#2036608)
- sd-event: introduce callback invoked when event source ratelimit expires (#2036608)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2036608)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2036608)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2036608)
- pid1: add a manager_trigger_run_queue() helper (#2036608)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2036608)
- Revert "Revert "sysctl: Enable ping(8) inside rootless Podman containers"" (#2037807)
- sysctl: prefix ping port range setting with a dash (#2037807)
- mount: don't propagate errors from mount_setup_unit() further up (#2036853)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-56" date="1643112000">- Take ghost ownership of /var/log/lastlog (#1798685)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-57" date="1644235200">- udev/net_id: introduce naming scheme for RHEL-8.5 (#2039797)
- udev/net_id: remove extraneous bracket (#2039797)
- udev/net_id: introduce naming scheme for RHEL-8.6 (#2039797)
- define newly needed constants (#2005008)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#2005008)
- sd-netlink: introduce sd_netlink_message_read_strv() (#2005008)
- sd-netlink: introduce sd_netlink_message_append_strv() (#2005008)
- test: add a test for sd_netlink_message_{append,read}_strv() (#2005008)
- util: introduce ifname_valid_full() (#2005008)
- rename function (#2005008)
- udev: support AlternativeName= setting in .link file (#2005008)
- network: make Name= in [Match] support alternative names of interfaces (#2005008)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#2005008)
- udev: do not fail if kernel does not support alternative names (#2005008)
- udev: introduce AlternativeNamesPolicy= setting (#2005008)
- network: set AlternativeNamesPolicy= in 99-default.link (#2005008)
- random-util: call initialize_srand() after fork() (#2005008)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#2005008)
- udev: sort alternative names (#2005008)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#2005008)
- netlink: do not fail when new interface name is already used as an alternative name (#2005008)
- udev: do not try to reassign alternative names (#2005008)
- Do not fail if the same alt. name is set again (#2005008)
- mount: do not update exec deps on mountinfo changes (#2008825)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2008825)
- core: fix unfortunate typo in unit_is_unneeded() (#2040147)
- core: make destructive transaction error a bit more useful (#2040147)
- tmpfiles: use a entry in hashmap as ItemArray in read_config_file() (#1944468)
- tmpfiles: rework condition check (#1944468)
- TEST-22-TMPFILES: add reproducer for bug with X (#1944468)
- core: make sure we don't get confused when setting TERM for a tty fd (#2045307)
- hash-funcs: introduce macro to create typesafe hash_ops (#2037807)
- hash-func: add destructors for key and value (#2037807)
- util: define free_func_t (#2037807)
- hash-funcs: make basic hash_ops typesafe (#2037807)
- test: add tests for destructors of hashmap or set (#2037807)
- man: document the new sysctl.d/ - prefix (#2037807)
- sysctl: if options are prefixed with "-" ignore write errors (#2037807)
- sysctl: fix segfault (#2037807)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58" date="1644321600">- ci: drop CentOS 8 CI (#2017033)
- test: adapt to the new capsh format (#2017033)
- test: ignore IAB capabilities in `test-execute` (#2017033)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.1" date="1652270400">- acpi-fpdt: mark structures as packed (#2084052)
- core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2084052)
- core/unit: fix use-after-free (#2084052)
- sd-bus: fix reference counter to be incremented (#2084052)
- sd-bus: do not read unused value (#2084052)
- sd-bus: do not return negative errno when unknown name is specified (#2084052)
- sd-bus: switch to a manual overflow check in sd_bus_track_add_name() (#2084052)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.2" date="1654776000">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#2091590)
- core: propagate triggered unit in more load states (#2086553)
- core: propagate unit start limit hit state to triggering path unit (#2086553)
- core: Move 'r' variable declaration to start of unit_start() (#2086553)
- core: Delay start rate limit check when starting a unit (#2086553)
- core: Propagate condition failed state to triggering units. (#2086553)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.3" date="1655985600">- unit: check for mount rate limiting before checking active state (#2097336)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.4" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110548)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.7" date="1661428800">- sd-event: don't invalidate source type on disconnect (#2116892)
- test-procfs-util: skip test on certain errors (#2087152)
- Try stopping MD RAID devices in shutdown too (#2120608)
- shutdown: get only active md arrays. (#2120608)</changelog>
</package>
<package pkgid="48a5227be24bb99ac875a96ce50723c08161a3aaaff9045432ec6454e439e4ae" name="systemd" arch="src">
  <version epoch="0" ver="239" rel="58.el8_6.8"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-55" date="1641816000">- lgtm: detect uninitialized variables using the __cleanup__ attribute (#2017033)
- lgtm: replace the query used for looking for fgets with a more general query (#2017033)
- lgtm: beef up list of dangerous/questionnable API calls not to make (#2017033)
- lgtm: warn about strerror() use (#2017033)
- lgtm: complain about accept() [people should use accept4() instead, due to O_CLOEXEC] (#2017033)
- lgtm: don't treat the custom note as a list of tags (#2017033)
- lgtm: ignore certain cleanup functions (#2017033)
- lgtm: detect more possible problematic scenarios (#2017033)
- lgtm: enable more (and potentially useful) queries (#2017033)
- test: make TEST-47 less racy (#2017033)
- core: rename unit_{start_limit|condition|assert}_test() to unit_test_xyz() (#2036608)
- core: Check unit start rate limiting earlier (#2036608)
- sd-event: introduce callback invoked when event source ratelimit expires (#2036608)
- core: rename/generalize UNIT(u)-&gt;test_start_limit() hook (#2036608)
- mount: make mount units start jobs not runnable if /p/s/mountinfo ratelimit is in effect (#2036608)
- mount: retrigger run queue after ratelimit expired to run delayed mount start jobs (#2036608)
- pid1: add a manager_trigger_run_queue() helper (#2036608)
- unit: add jobs that were skipped because of ratelimit back to run_queue (#2036608)
- Revert "Revert "sysctl: Enable ping(8) inside rootless Podman containers"" (#2037807)
- sysctl: prefix ping port range setting with a dash (#2037807)
- mount: don't propagate errors from mount_setup_unit() further up (#2036853)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-56" date="1643112000">- Take ghost ownership of /var/log/lastlog (#1798685)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-57" date="1644235200">- udev/net_id: introduce naming scheme for RHEL-8.5 (#2039797)
- udev/net_id: remove extraneous bracket (#2039797)
- udev/net_id: introduce naming scheme for RHEL-8.6 (#2039797)
- define newly needed constants (#2005008)
- sd-netlink: support IFLA_PROP_LIST and IFLA_ALT_IFNAME attributes (#2005008)
- sd-netlink: introduce sd_netlink_message_read_strv() (#2005008)
- sd-netlink: introduce sd_netlink_message_append_strv() (#2005008)
- test: add a test for sd_netlink_message_{append,read}_strv() (#2005008)
- util: introduce ifname_valid_full() (#2005008)
- rename function (#2005008)
- udev: support AlternativeName= setting in .link file (#2005008)
- network: make Name= in [Match] support alternative names of interfaces (#2005008)
- udev: extend the length of ID_NET_NAME_XXX= to ALTIFNAMSIZ (#2005008)
- udev: do not fail if kernel does not support alternative names (#2005008)
- udev: introduce AlternativeNamesPolicy= setting (#2005008)
- network: set AlternativeNamesPolicy= in 99-default.link (#2005008)
- random-util: call initialize_srand() after fork() (#2005008)
- sd-netlink: introduce rtnl_resolve_link_alternative_names() (#2005008)
- udev: sort alternative names (#2005008)
- netlink: introduce rtnl_get/delete_link_alternative_names() (#2005008)
- netlink: do not fail when new interface name is already used as an alternative name (#2005008)
- udev: do not try to reassign alternative names (#2005008)
- Do not fail if the same alt. name is set again (#2005008)
- mount: do not update exec deps on mountinfo changes (#2008825)
- core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2008825)
- core: fix unfortunate typo in unit_is_unneeded() (#2040147)
- core: make destructive transaction error a bit more useful (#2040147)
- tmpfiles: use a entry in hashmap as ItemArray in read_config_file() (#1944468)
- tmpfiles: rework condition check (#1944468)
- TEST-22-TMPFILES: add reproducer for bug with X (#1944468)
- core: make sure we don't get confused when setting TERM for a tty fd (#2045307)
- hash-funcs: introduce macro to create typesafe hash_ops (#2037807)
- hash-func: add destructors for key and value (#2037807)
- util: define free_func_t (#2037807)
- hash-funcs: make basic hash_ops typesafe (#2037807)
- test: add tests for destructors of hashmap or set (#2037807)
- man: document the new sysctl.d/ - prefix (#2037807)
- sysctl: if options are prefixed with "-" ignore write errors (#2037807)
- sysctl: fix segfault (#2037807)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58" date="1644321600">- ci: drop CentOS 8 CI (#2017033)
- test: adapt to the new capsh format (#2017033)
- test: ignore IAB capabilities in `test-execute` (#2017033)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.1" date="1652270400">- acpi-fpdt: mark structures as packed (#2084052)
- core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2084052)
- core/unit: fix use-after-free (#2084052)
- sd-bus: fix reference counter to be incremented (#2084052)
- sd-bus: do not read unused value (#2084052)
- sd-bus: do not return negative errno when unknown name is specified (#2084052)
- sd-bus: switch to a manual overflow check in sd_bus_track_add_name() (#2084052)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.2" date="1654776000">- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#2091590)
- core: propagate triggered unit in more load states (#2086553)
- core: propagate unit start limit hit state to triggering path unit (#2086553)
- core: Move 'r' variable declaration to start of unit_start() (#2086553)
- core: Delay start rate limit check when starting a unit (#2086553)
- core: Propagate condition failed state to triggering units. (#2086553)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.3" date="1655985600">- unit: check for mount rate limiting before checking active state (#2097336)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.4" date="1659528000">- resolved: pin stream while calling callbacks for it (#2110548)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.7" date="1661428800">- sd-event: don't invalidate source type on disconnect (#2116892)
- test-procfs-util: skip test on certain errors (#2087152)
- Try stopping MD RAID devices in shutdown too (#2120608)
- shutdown: get only active md arrays. (#2120608)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 239-58.8" date="1663761600">- unit-name: tighten checks for building valid unit names (#2094712)
- core: shorten long unit names that are based on paths and append path hash at the end (#2094712)
- test: add extended test for triggering mount rate limit (#2094712)
- tests: add test case for long unit names (#2094712)
- Revert "core: Propagate condition failed state to triggering units." (#2123801)
- core: Check unit start rate limiting earlier (#2123801)
- core: Add trigger limit for path units (#2123801)
- resolved: pin stream while calling callbacks for it (#2110548)
- core: move reset_arguments() to the end of main's finish (#2127171)</changelog>
</package>
<package pkgid="63741c0830d9ce8b7708b96ae2f35a3480a5b014a785a1400b2340f5bf546883" name="tuned" arch="src">
  <version epoch="0" ver="2.18.0" rel="2.el8_6.1"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.15.0-0.1.rc1" date="1606824000">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1874052
  - added plugin service for linux services control
    resolves: rhbz#1869991
  - scheduler: added default_irq_smp_affinity option
    resolves: rhbz#1896348
  - bootloader: skip boom managed BLS snippets
    resolves: rhbz#1901532
  - scheduler: added perf_process_fork option to enable processing of fork
    resolves: rhbz#1894610
  - scheduler: added perf_mmap_pages option to set perf buffer size
    resolves: rhbz#1890219
  - bootloader: fixed cmdline duplication with BLS and grub2-mkconfig
    resolves: rhbz#1777874</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.15.0-1" date="1608206400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1874052</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.15.0-2" date="1613736000">- realtime: added support for netdev_queue_count and extended plugin_net
  resolves: rhbz#1951992</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.15.0-3" date="1619006400">- updated mssql profile
  resolves: rhbz#1942733</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.16.0-0.1.rc1" date="1625659200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1936426
  - realtime: "isolate_managed_irq=Y" should be mentioned in
    "/etc/tuned/realtime-virtual-*-variables.conf"
    resolves: rhbz#1817827
  - realtime: changed tuned default to "isolcpus=domain,managed_irq,X-Y"
    resolves: rhbz#1820626
  - applying a profile with multiple inheritance where parents include a common
    ancestor fails
    resolves: rhbz#1825882
  - failure in moving i40e IRQ threads to housekeeping CPUs from isolated CPUs
    resolves: rhbz#1933069
  - sort network devices before matching by regex
    resolves: rhbz#1939970
  - net: fixed traceback while adjusting the netdev queue count
    resolves: rhbz#1943291
  - net: fixed traceback if the first listed device returns netlink error
    resolves: rhbz#1944686
  - realtime: improve verification
    resolves: rhbz#1947858
  - bootloader: add support for the rpm-ostree
    resolves: rhbz#1950164
  - net: fixed traceback if a device channel contains n/a
    resolves: rhbz#1974071
  - mssql: updated the profile
    resolves: rhbz#1942733</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.16.0-1" date="1626868800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1936426</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.18.0-0.1.rc1" date="1643803200">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#2003833
  - profiles: fix improper parsing of include directive
    resolves: rhbz#2017924
  - disk: added support for the nvme
    resolves: rhbz#1854816
  - cpu: extended cstate force_latency syntax to allow skipping zero latency
    resolves: rhbz#2002744
  - net: added support for the txqueuelen
    resolves: rhbz#2015044
  - bootloader: on s390(x) remove TuneD variables from the BLS
    resolves: rhbz#1978786
  - daemon: don't do full rollback on systemd failure
    resolves: rhbz#2011459</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.18.0-1" date="1644408000">- new release
  - rebased tuned to latest upstream
    related: rhbz#2003833
  - tuned-gui: fixed creation of new profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.18.0-2" date="1644494400">- openshift/atomic: increased nf_conntrack_hashsize
  resolves: rhbz#2052886</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.18.0-2.1" date="1654689600">- bootloader: do not hardcode device to initrd
  resolves: rhbz#2084643</changelog>
</package>
<package pkgid="9c9e5b48f45644d1de46bc5dbd759ff657cba7b8352ed52e17340f934ff981f6" name="tzdata" arch="src">
  <version epoch="0" ver="2022c" rel="1.el8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020c-1" date="1603108800">- Rebase to tzdata-2020c
  - Fiji starts DST later than usual, on 2020-12-20.
  - Rearguard now provides an empty file pacificnew to support
    downstream software that expects it.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-1" date="1603281600">- Rebase to tzdata-2020d
 - Palestine will end summer time on 2020-10-24 rather than the
   predicted 2020-10-31.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020f-1" date="1609243200">- Rebase to tzdata-2020f including changes for tzdata-2020e
  - tzdata-2020f fixes a bug in tzdata-2020e that caused an
    invalid zi file in rearguard format
  - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
  - Australia/Currie is identical to Australia/Hobart for all
    timestamps since 1970 and was therefore created by mistake,
    now moved to the "backward" file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021a-1" date="1611489600">- Rebase to tzdata-2021a
  - South Sudan will change from +03 to +02 on 2021-02-01.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021c-1" date="1633521600">- Rebase to tzdata-2021c - supersedes tzdata-2021b
  - Revert most of 2021b changes to 'backward'.
  - Fix 'zic -b fat' bug in pre-1970 32-bit data.
  - Fix two Link line typos.
  - Distribute SECURITY file.
- Includes changes in tzdata-2021b
  - Innclude patch for Mayen
  - Jordan now starts DST on February's last Thursday.
  - Samoa no longer observes DST.
  - Merge more location-based Zones whose timestamps agree since 1970.
  - Move some backward-compatibility links to 'backward'.
  - Rename Pacific/Enderbury to Pacific/Kanton.
  - Correct many pre-1993 transitions in Malawi, Portugal, etc.
  - zic now creates each output file or link atomically.
  - zic -L no longer omits the POSIX TZ string in its output.
  - zic fixes for truncation and leap second table expiration.
  - zic now follows POSIX for TZ strings using all-year DST.
  - Fix some localtime crashes and bugs in obscure cases.
  - zdump -v now outputs more-useful boundary cases.
  - tzfile.5 better matches a draft successor to RFC 8536.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1648814400">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-2" date="1649160000">- Update the release for rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
</package>
<package pkgid="8ca0881ffdb875929dde5c90e26374850f40a7808bf40fc40a974c6859368e80" name="tzdata" arch="src">
  <version epoch="0" ver="2022d" rel="1.el8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-1" date="1603281600">- Rebase to tzdata-2020d
 - Palestine will end summer time on 2020-10-24 rather than the
   predicted 2020-10-31.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020f-1" date="1609243200">- Rebase to tzdata-2020f including changes for tzdata-2020e
  - tzdata-2020f fixes a bug in tzdata-2020e that caused an
    invalid zi file in rearguard format
  - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
  - Australia/Currie is identical to Australia/Hobart for all
    timestamps since 1970 and was therefore created by mistake,
    now moved to the "backward" file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021a-1" date="1611489600">- Rebase to tzdata-2021a
  - South Sudan will change from +03 to +02 on 2021-02-01.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021c-1" date="1633521600">- Rebase to tzdata-2021c - supersedes tzdata-2021b
  - Revert most of 2021b changes to 'backward'.
  - Fix 'zic -b fat' bug in pre-1970 32-bit data.
  - Fix two Link line typos.
  - Distribute SECURITY file.
- Includes changes in tzdata-2021b
  - Innclude patch for Mayen
  - Jordan now starts DST on February's last Thursday.
  - Samoa no longer observes DST.
  - Merge more location-based Zones whose timestamps agree since 1970.
  - Move some backward-compatibility links to 'backward'.
  - Rename Pacific/Enderbury to Pacific/Kanton.
  - Correct many pre-1993 transitions in Malawi, Portugal, etc.
  - zic now creates each output file or link atomically.
  - zic -L no longer omits the POSIX TZ string in its output.
  - zic fixes for truncation and leap second table expiration.
  - zic now follows POSIX for TZ strings using all-year DST.
  - Fix some localtime crashes and bugs in obscure cases.
  - zdump -v now outputs more-useful boundary cases.
  - tzfile.5 better matches a draft successor to RFC 8536.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1648814400">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-2" date="1649160000">- Update the release for rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022d-1" date="1664193600">- Rebase to tzdata-2022d
  - Palestine's DST transition will be on October 29, 2022,
    not October 28, 2022.
  - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.</changelog>
</package>
<package pkgid="e9dc9e3dd86156a192f2659fdc88f0d16b9dd49b99b9bf87f322e57a62adaf16" name="tzdata" arch="src">
  <version epoch="0" ver="2022e" rel="1.el8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020f-1" date="1609243200">- Rebase to tzdata-2020f including changes for tzdata-2020e
  - tzdata-2020f fixes a bug in tzdata-2020e that caused an
    invalid zi file in rearguard format
  - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
  - Australia/Currie is identical to Australia/Hobart for all
    timestamps since 1970 and was therefore created by mistake,
    now moved to the "backward" file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021a-1" date="1611489600">- Rebase to tzdata-2021a
  - South Sudan will change from +03 to +02 on 2021-02-01.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021c-1" date="1633521600">- Rebase to tzdata-2021c - supersedes tzdata-2021b
  - Revert most of 2021b changes to 'backward'.
  - Fix 'zic -b fat' bug in pre-1970 32-bit data.
  - Fix two Link line typos.
  - Distribute SECURITY file.
- Includes changes in tzdata-2021b
  - Innclude patch for Mayen
  - Jordan now starts DST on February's last Thursday.
  - Samoa no longer observes DST.
  - Merge more location-based Zones whose timestamps agree since 1970.
  - Move some backward-compatibility links to 'backward'.
  - Rename Pacific/Enderbury to Pacific/Kanton.
  - Correct many pre-1993 transitions in Malawi, Portugal, etc.
  - zic now creates each output file or link atomically.
  - zic -L no longer omits the POSIX TZ string in its output.
  - zic fixes for truncation and leap second table expiration.
  - zic now follows POSIX for TZ strings using all-year DST.
  - Fix some localtime crashes and bugs in obscure cases.
  - zdump -v now outputs more-useful boundary cases.
  - tzfile.5 better matches a draft successor to RFC 8536.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1648814400">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-2" date="1649160000">- Update the release for rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022d-1" date="1664193600">- Rebase to tzdata-2022d
  - Palestine's DST transition will be on October 29, 2022,
    not October 28, 2022.
  - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022e-1" date="1665576000">- Rebase to tzdata-2022e
  - Jordan and Syria cancelled the DST transition planned
    for 2022-10-28, remaining at +03 permanently.</changelog>
</package>
<package pkgid="3d09b0624da3f5b7320bee7a6b9f06018c5eafe0dd232f923f3cfd87239b977f" name="tzdata" arch="src">
  <version epoch="0" ver="2022f" rel="1.el8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-1" date="1603281600">- Rebase to tzdata-2020d
 - Palestine will end summer time on 2020-10-24 rather than the
   predicted 2020-10-31.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020f-1" date="1609243200">- Rebase to tzdata-2020f including changes for tzdata-2020e
  - tzdata-2020f fixes a bug in tzdata-2020e that caused an
    invalid zi file in rearguard format
  - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
  - Australia/Currie is identical to Australia/Hobart for all
    timestamps since 1970 and was therefore created by mistake,
    now moved to the "backward" file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021a-1" date="1611489600">- Rebase to tzdata-2021a
  - South Sudan will change from +03 to +02 on 2021-02-01.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021c-1" date="1633521600">- Rebase to tzdata-2021c - supersedes tzdata-2021b
  - Revert most of 2021b changes to 'backward'.
  - Fix 'zic -b fat' bug in pre-1970 32-bit data.
  - Fix two Link line typos.
  - Distribute SECURITY file.
- Includes changes in tzdata-2021b
  - Innclude patch for Mayen
  - Jordan now starts DST on February's last Thursday.
  - Samoa no longer observes DST.
  - Merge more location-based Zones whose timestamps agree since 1970.
  - Move some backward-compatibility links to 'backward'.
  - Rename Pacific/Enderbury to Pacific/Kanton.
  - Correct many pre-1993 transitions in Malawi, Portugal, etc.
  - zic now creates each output file or link atomically.
  - zic -L no longer omits the POSIX TZ string in its output.
  - zic fixes for truncation and leap second table expiration.
  - zic now follows POSIX for TZ strings using all-year DST.
  - Fix some localtime crashes and bugs in obscure cases.
  - zdump -v now outputs more-useful boundary cases.
  - tzfile.5 better matches a draft successor to RFC 8536.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1648814400">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-2" date="1649160000">- Update the release for rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022f-1" date="1667217600">- Rebase to tzdata-2022f
  - Mexico will stop observing DST except near the US border.
  - Chihuahua moved to -06 year round starting on 2022-10-30.
  - Fiji no longer observes DST.</changelog>
</package>
<package pkgid="a7f305a5d95ebc025380c63291ad55ece8ff1bf75de71a41fa8cfe63683496c9" name="vim" arch="src">
  <version epoch="2" ver="8.0.1763" rel="19.el8_6.2"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-16" date="1632398400">- 2004975 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-8.6.0]
- 2004892 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c [rhel-8.6.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-17" date="1635249600">- 2016201 - CVE-2021-3872 vim: heap-based buffer overflow in win_redr_status() drawscreen.c [rhel-8.6.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-18" date="1638532800">- 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0]
- 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-18" date="1641988800">- CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
- CVE-2021-4192 vim: vulnerable to Use After Free</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-18" date="1641988801">- CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
- CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-18" date="1643284800">- fix test suite after fix for CVE-2022-0318
- CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-18" date="1644235200">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- CVE-2022-0413 vim: use after free in src/ex_cmds.c</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-19" date="1644321600">- CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-19.1" date="1649505600">- CVE-2022-1154 vim: use after free in utf_ptr2char</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-19.2" date="1653480000">- CVE-2022-1621 vim: heap buffer overflow
- CVE-2022-1629 vim: buffer over-read</changelog>
</package>
<package pkgid="bdc1d4778a3ab77e9d458c5e49e7d3d38a985a445b0e91959ab18273c3d1ec00" name="vim" arch="src">
  <version epoch="2" ver="8.0.1763" rel="19.el8_6.4"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-18" date="1638532800">- 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0]
- 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-18" date="1641988800">- CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
- CVE-2021-4192 vim: vulnerable to Use After Free</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-18" date="1641988801">- CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
- CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-18" date="1643284800">- fix test suite after fix for CVE-2022-0318
- CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-18" date="1644235200">- CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c
- CVE-2022-0413 vim: use after free in src/ex_cmds.c</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-19" date="1644321600">- CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-19.1" date="1649505600">- CVE-2022-1154 vim: use after free in utf_ptr2char</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-19.2" date="1653480000">- CVE-2022-1621 vim: heap buffer overflow
- CVE-2022-1629 vim: buffer over-read</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-19.3" date="1655121600">- CVE-2022-1785 vim: Out-of-bounds Write
- CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
- CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:8.0.1763-19.4" date="1655208000">- fix issue reported by covscan</changelog>
</package>
<package pkgid="5929e06d2b91a94c8321f815dc58ad4c8e008b9552defe43b059d398d6d7d89c" name="xz" arch="src">
  <version epoch="0" ver="5.2.4" rel="4.el8_6"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.3-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.3-3" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.3-4" date="1501761600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Vasiliy N. Glazov &lt;vascom2@gmail.com&gt; - 5.2.3.-5" date="1505304000">- Cleanup spec</changelog>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 5.2.3-6" date="1517572800">- Switch to %ldconfig_scriptlets</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.3-7" date="1518177600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 5.2.4-1" date="1525780800">- rebase to 5.2.4 (rhbz#1574039), per release notes:
  https://www.mail-archive.com/xz-devel@tukaani.org/msg00295.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 5.2.4-2" date="1525867200">- drop ppc64p7 hack, per fedora devel list discussion:
  https://lists.fedoraproject.org/archives/list/
  devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
- don't explicitly set _FILE_OFFSET_BITS, package uses AC_SYS_LARGEFILE</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 5.2.4-3" date="1542888000">- fix annocheck failures on i686 (rhbz#1630650)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 5.2.4-4" date="1653998400">- Fix arbitrary file write vulnerability
  Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="d1ae0a2ea38bd1854e6c77b3c17d09870c52b27c37c7573582d0089889526f66" name="zlib" arch="src">
  <version epoch="0" ver="1.2.11" rel="19.el8_6"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.11-10" date="1533297600">- sync with fedora rawhide</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-11" date="1571054400">- IBM Z hardware-accelerated deflate for s390x architectures
- IBM CRC32 optimalization for POWER 8+ architectures
- fixed firefox crash due to zlib (#1741266)
- added test for crc32</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-12" date="1571140800">- fixed covscan issues</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-13" date="1572350400">- Added -DDFLTCC parameter to configure to enable 
- Z hardware-accelerated deflate for s390x architectures (#1659433)</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-14" date="1590408000">- Fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-15" date="1592222400">- Another fix for Z hardware-accelerated deflate for s390x architectures</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-16" date="1592222401">- Permit a deflateParams() parameter change
- Another fix for Z hardware-accelerated deflate for s390x architectures
- according to previous change by upstream</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.11-17" date="1592222402">- Fixed DFLTCC compression level switching issues (#1875492)
- Enabled HW compression for compression levels 1 through 6 (#1847438)
- Fixed inflateSyncPoint() bad return value on z15 (#1888930)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-18" date="1648555200">- Resolves: CVE-2018-25032</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11.19" date="1660046400">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
</package>
</otherdata>